From 9fb445c8e531c63f7c3464885de0184842f5a6b8 Mon Sep 17 00:00:00 2001
From: Christian Oliff <christian_oliff@trimble.com>
Date: Mon, 2 Feb 2026 17:09:23 +0900
Subject: [PATCH 1/2] Update VSCode Prettier extension and GitHub Actions
 versions

Changed Prettier extension references from 'prettier.prettier-vscode' to 'esbenp.prettier-vscode' in VSCode config files. Updated GitHub Actions in documentation to use specific commit SHAs for improved security and reproducibility.
---
 .vscode/extensions.json                                 | 2 +-
 .vscode/settings.json                                   | 2 +-
 website/src/content/docs/usage/github-code-scanning.mdx | 6 +++---
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.vscode/extensions.json b/.vscode/extensions.json
index 98e545dde..25f46e6f6 100644
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -2,7 +2,7 @@
   "recommendations": [
     "dbaeumer.vscode-eslint",
     "EditorConfig.EditorConfig",
-    "prettier.prettier-vscode",
+    "esbenp.prettier-vscode",
     "streetsidesoftware.code-spell-checker"
   ]
 }
diff --git a/.vscode/settings.json b/.vscode/settings.json
index ff5da84d0..3773d5b48 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -1,6 +1,6 @@
 {
   "[javascript][typescript][json][jsonc][markdown][yaml]": {
-    "editor.defaultFormatter": "prettier.prettier-vscode",
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
     "editor.formatOnSave": true
   },
   "[javascript][typescript]": {
diff --git a/website/src/content/docs/usage/github-code-scanning.mdx b/website/src/content/docs/usage/github-code-scanning.mdx
index 56c3185b0..70951d721 100644
--- a/website/src/content/docs/usage/github-code-scanning.mdx
+++ b/website/src/content/docs/usage/github-code-scanning.mdx
@@ -34,12 +34,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
 
       # If you need a website build script, include the steps here
 
@@ -48,7 +48,7 @@ jobs:
         # Continue even if HTMLHint finds issues
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
         with:
           sarif_file: website/htmlhint.sarif
           category: HTMLHint

From e8f6abecf760bd9485f71494d88db79be708e74a Mon Sep 17 00:00:00 2001
From: Christian Oliff <christian_oliff@trimble.com>
Date: Mon, 2 Feb 2026 17:11:56 +0900
Subject: [PATCH 2/2] Update .cspell.json

---
 .cspell.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.cspell.json b/.cspell.json
index 218bcedb6..cbde09998 100644
--- a/.cspell.json
+++ b/.cspell.json
@@ -29,6 +29,7 @@
     "Cstop",
     "Cstyle",
     "Csvg",
+    "dbaeumer",
     "enochian",
     "esbenp",
     "evenodd",