From 5705faeab6b777651e3b930f7404e35ffa5dd21b Mon Sep 17 00:00:00 2001
From: Boning <me@boni.ng>
Date: Sat, 17 Jan 2026 15:31:18 -0500
Subject: [PATCH] Update action

---
 .github/workflows/build.yml | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index daed06e..20886d9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,6 +7,8 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   build:
     strategy:
@@ -16,16 +18,16 @@ jobs:
           - ubuntu-latest
         ocaml-compiler:
           - 4.04.x
-          - 4.14.1
+          - 4.14.2
 
     runs-on: ${{ matrix.os }}
 
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
+      - name: Checkout tree
+        uses: actions/checkout@v6
 
       - name: Use OCaml ${{ matrix.ocaml-compiler }}
-        uses: ocaml/setup-ocaml@v2
+        uses: ocaml/setup-ocaml@v3
         with:
           ocaml-compiler: ${{ matrix.ocaml-compiler }}
 
@@ -39,7 +41,7 @@ jobs:
         run: opam exec -- dune runtest --verbose
 
       - name: Coverage
-        if: ${{ matrix.ocaml-compiler == '4.14.1' }}
+        if: ${{ matrix.ocaml-compiler == '4.14.2' }}
         env:
           COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }}
           PULL_REQUEST_NUMBER: ${{ github.event.number }}