From a291dfac197f3b82091e6b8c70121c95ea0bff86 Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Thu, 12 Jun 2025 09:40:50 -0700
Subject: [PATCH] chore: bump pipeline action versions

---
 .github/workflows/ci.yml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 59e4cbe64..4343aba8e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,6 +5,8 @@ on:
     branches: [ release/vscode ]
   pull_request:
 
+permissions: {}
+
 jobs:
   posix:
     runs-on: ${{ matrix.os }}
@@ -12,7 +14,9 @@ jobs:
       matrix:
         os: [macos-latest, ubuntu-latest]
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - run: yarn install
     - run: scripts/test-electron.sh
   windows:
@@ -21,6 +25,8 @@ jobs:
       matrix:
         os: [windows-latest]
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - run: yarn install
-    - run: .\scripts\test-electron.bat
\ No newline at end of file
+    - run: .\scripts\test-electron.bat