From 5dd6af6ba9277115a6223b51eaabaf60c67bb97f Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 30 May 2026 15:01:27 +0100
Subject: [PATCH] fix(ci): replace fake haskell-actions/setup SHA pin

The pin `haskell-actions/setup@dd344bc1cec854a9b55c2b857c28b688010e4fce`
at .github/workflows/e2e.yml:39 is fabricated (`gh api repos/haskell-
actions/setup/commits/dd344bc... -> 422`). The e2e job would have
failed at action resolution on next run.

Replaced with verified v2.11.0 pin
`cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553`.

Provenance: propagated from rsr-template-repo#81 (merged); discovered
while wiring CI for snifs (hyperpolymath/snifs#30). Companion to
panll#61 (incoming), odds-and-sods-package-manager#39, proven#93
(merged), proven-servers#19 and the throttled sweep of 16 commented-
stub repos.
---
 .github/workflows/e2e.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index e6cf6d5..cfb62db 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -36,7 +36,7 @@ jobs:
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
 
       - name: Install Haskell (GHCup)
-        uses: haskell-actions/setup@dd344bc1cec854a9b55c2b857c28b688010e4fce  # v2
+        uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553  # v2.11.0
         with:
           ghc-version: '9.6'
           cabal-version: '3.10'