From 9716e8ee4d5b8d04282440f195dfaa1f3346a8f4 Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Sun, 28 Jun 2026 11:15:25 +0200 Subject: [PATCH] Allow carabiner-dev/actions/install/ampel-bootstrap@2a11d59a (v1.1.7) The nightly "Check for transitive failures" workflow has been failing on every run: the transitive chain ampel/verify@v1.2.0 -> install/download-and-verify@v1.1.7 -> ampel-bootstrap@v1.1.7 resolves to carabiner-dev/actions/install/ampel-bootstrap@2a11d59a..., which was not in the allowlist. The same commit (tag v1.1.7) is already approved for the sibling subpaths install/ampel, install/bnd, and install/download-and-verify; ampel-bootstrap was simply missed. Add it to actions.yml (mirroring the siblings: tag v1.1.7, expires_at 2026-08-16) and regenerate approved_patterns.yml via gateway. Generated-by: Claude Opus 4.8 (1M context) --- actions.yml | 4 ++++ approved_patterns.yml | 1 + 2 files changed, 5 insertions(+) diff --git a/actions.yml b/actions.yml index 42c888f9..fef199dc 100644 --- a/actions.yml +++ b/actions.yml @@ -171,6 +171,10 @@ carabiner-dev/actions/install/ampel: 94f29392187fe5082d1195a7d4cae3a7ddf09d9c: tag: v1.2.1 carabiner-dev/actions/install/ampel-bootstrap: + 2a11d59a135c5e291f305f249a92ad7903e3ee0f: + # transitive dep of carabiner-dev/actions/ampel/verify @ v1.2.0 + tag: v1.1.7 + expires_at: 2026-08-16 # level-3 transitive: called by install/download-and-verify; commit is untagged # (per upstream: "bootstrap rotated to ampel v1.2.1") 0a075bb75a68646d05f99c85cbbf2be40dd8e442: diff --git a/approved_patterns.yml b/approved_patterns.yml index 8d22c3fd..e976d15e 100644 --- a/approved_patterns.yml +++ b/approved_patterns.yml @@ -68,6 +68,7 @@ - carabiner-dev/actions/install/ampel@2a11d59a135c5e291f305f249a92ad7903e3ee0f - carabiner-dev/actions/install/ampel@e0e3b8149dafed833431095bc148d50e7eade4e8 - carabiner-dev/actions/install/ampel@94f29392187fe5082d1195a7d4cae3a7ddf09d9c +- carabiner-dev/actions/install/ampel-bootstrap@2a11d59a135c5e291f305f249a92ad7903e3ee0f - carabiner-dev/actions/install/ampel-bootstrap@0a075bb75a68646d05f99c85cbbf2be40dd8e442 - carabiner-dev/actions/install/ampel-bootstrap@9db1a064ca5691ef6f5d983031739ca287de0968 - carabiner-dev/actions/install/ampel-bootstrap@b60791af41423360b892a1a3cee90cd4e131f381