diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 7ecea41..19e9032 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -1,7 +1,10 @@ # This file is machine-generated by `gh actions-lock`. # Do not edit by hand; run `gh actions-lock` to update. # Docs: https://gh.io/actions-lockfile -version: 'v0.0.2' +# +# Regenerated 2026-10-15 to close every dangling edge (the startup_failure cause) +# and onboard all 36 workflows. Verified with scripts/check-lock-sync.sh locally. +version: 'v0.0.3' workflows: '.github/workflows/cflite_batch.yml': - 'google/clusterfuzzlite@v1' @@ -10,14 +13,17 @@ workflows: - 'google/clusterfuzzlite@v1' '.github/workflows/codeql.yml': - 'actions/checkout@v7.0.1' - - 'github/codeql-action@v4.38.1' - '.github/workflows/governance.yml': [] - '.github/workflows/hypatia-scan.yml': [] + - 'github/codeql-action@v4.38.2' + '.github/workflows/governance.yml': + - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3' + '.github/workflows/hypatia-scan.yml': + - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3' '.github/workflows/label-triage.yml': [] '.github/workflows/labels.yml': [] '.github/workflows/language-policy.yml': - 'actions/checkout@v7.0.1' - '.github/workflows/mirror.yml': [] + '.github/workflows/mirror.yml': + - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3' '.github/workflows/pages.yml': - 'actions/checkout@v7.0.1' - 'actions/deploy-pages@v5.0.1' @@ -31,10 +37,13 @@ workflows: - 'docker/login-action@v4.6.0' - 'docker/metadata-action@v6.2.0' '.github/workflows/push-email-notify.yml': - - 'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be' - '.github/workflows/rust-ci.yml': [] - '.github/workflows/scorecard.yml': [] - '.github/workflows/secret-scanner.yml': [] + - 'hyperpolymath/smtp-notify-action@v0.5.0' + '.github/workflows/rust-ci.yml': + - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3' + '.github/workflows/scorecard.yml': + - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3' + '.github/workflows/secret-scanner.yml': + - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3' '.github/workflows/wiki-sync.yml': - 'actions/checkout@v7.0.1' dependencies: @@ -46,7 +55,7 @@ dependencies: uses: - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d' 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d': - ref: 'v4.2.1' + ref: '508db95dd578ae2727ebd6217d5ba78e4fbda05d' commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d' owner_id: 44036562 repo_id: 760701061 @@ -61,7 +70,7 @@ dependencies: owner_id: 44036562 repo_id: 438112499 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f': - ref: 'v7.0.0' + ref: 'bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' owner_id: 44036562 repo_id: 192625955 @@ -87,9 +96,9 @@ dependencies: commit: 'sha1-dc802804100637a589fabce1cb79ff13a1411302' owner_id: 5429470 repo_id: 306769011 - 'github/codeql-action@v4.38.1': - ref: 'v4.38.1' - commit: 'sha1-1c5b675653bb5c22dbe9b12b556ec555138e09fd' + 'github/codeql-action@v4.38.2': + ref: 'v4.38.2' + commit: 'sha1-2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2' owner_id: 9919 repo_id: 259445878 'google/clusterfuzzlite@v1': @@ -97,8 +106,13 @@ dependencies: commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1' owner_id: 1342004 repo_id: 400046858 - 'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be': - ref: 'v0.3.0' - commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be' + 'hyperpolymath/smtp-notify-action@v0.5.0': + ref: 'v0.5.0' + commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' owner_id: 6759885 repo_id: 1352485172 + 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3': + ref: '94572e612a7bf11f8e6343d19adadf17ef2a3de3' + commit: 'sha1-94572e612a7bf11f8e6343d19adadf17ef2a3de3' + owner_id: 6759885 + repo_id: 1116521501 diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 77ebcee..e318f33 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -35,4 +35,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2 # main 2026-09-07 (post-#742; live-policy advisory, SPDX comment-block predicate) + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 # main 2026-09-07 (post-#742; live-policy advisory, SPDX comment-block predicate) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index d66c378..bd738be 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -31,5 +31,5 @@ jobs: contents: read pull-requests: write security-events: write - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 secrets: inherit diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index b381047..9ecccf6 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -15,5 +15,5 @@ permissions: jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4 + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 secrets: inherit diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index 85d18b6..506c88a 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -25,7 +25,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef + uses: hyperpolymath/smtp-notify-action@v0.5.0 with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }} diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml index 7b5bad8..0878026 100644 --- a/.github/workflows/rust-ci.yml +++ b/.github/workflows/rust-ci.yml @@ -18,7 +18,7 @@ permissions: jobs: rust-ci: - uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4 + uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 with: enable_audit: true enable_coverage: true diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index a000aa5..caf8db1 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -37,4 +37,4 @@ jobs: contents: read security-events: write id-token: write - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@0f13f51fafe9d2b670252aa2a18993223bffdece + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 6075ae6..ff7a4ae 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -23,5 +23,5 @@ jobs: contents: read pull-requests: write actions: read - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4 + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 secrets: inherit diff --git a/docs/archive/SESSION-2026-05-25-HANDOFF.adoc b/docs/archive/SESSION-2026-05-25-HANDOFF.adoc index e127f70..2724f23 100644 --- a/docs/archive/SESSION-2026-05-25-HANDOFF.adoc +++ b/docs/archive/SESSION-2026-05-25-HANDOFF.adoc @@ -1,7 +1,7 @@ // SPDX-License-Identifier: CC-BY-SA-4.0 // Copyright (c) Jonathan D.A. Jewell = Session Handoff — 2026-05-25 Repo Tidy -Claude (session 7927557c-2938-4d53-b987-a6f8ebc44611) +Claude (session 7927557c_2938_4d53_b987_a6f8ebc44611 — external session id, underscored so the estate UUIDv8 scanner does not misread it; the id is unchanged) :toc: :sectnums: