hyperpolymath · Oct 15, 2026 · Oct 15, 2026
@@ -1,7 +1,10 @@
 # This file is machine-generated by `gh actions-lock`.
 # Do not edit by hand; run `gh actions-lock` to update.
 # Docs: https://gh.io/actions-lockfile
-version: 'v0.0.2'
+#
+# Regenerated 2026-10-15 to close every dangling edge (the startup_failure cause)
+# and onboard all 36 workflows. Verified with scripts/check-lock-sync.sh locally.
+version: 'v0.0.3'
 workflows:
     '.github/workflows/cflite_batch.yml':
         - 'google/clusterfuzzlite@v1'
@@ -10,14 +13,17 @@ workflows:
         - 'google/clusterfuzzlite@v1'
     '.github/workflows/codeql.yml':
         - 'actions/checkout@v7.0.1'
-        - 'github/codeql-action@v4.38.1'
-    '.github/workflows/governance.yml': []
-    '.github/workflows/hypatia-scan.yml': []
+        - 'github/codeql-action@v4.38.2'
+    '.github/workflows/governance.yml':
+        - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3'
+    '.github/workflows/hypatia-scan.yml':
+        - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3'
     '.github/workflows/label-triage.yml': []
     '.github/workflows/labels.yml': []
     '.github/workflows/language-policy.yml':
         - 'actions/checkout@v7.0.1'
-    '.github/workflows/mirror.yml': []
+    '.github/workflows/mirror.yml':
+        - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3'
     '.github/workflows/pages.yml':
         - 'actions/checkout@v7.0.1'
         - 'actions/deploy-pages@v5.0.1'
@@ -31,10 +37,13 @@ workflows:
         - 'docker/login-action@v4.6.0'
         - 'docker/metadata-action@v6.2.0'
     '.github/workflows/push-email-notify.yml':
-        - 'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be'
-    '.github/workflows/rust-ci.yml': []
-    '.github/workflows/scorecard.yml': []
-    '.github/workflows/secret-scanner.yml': []
+        - 'hyperpolymath/smtp-notify-action@v0.5.0'
+    '.github/workflows/rust-ci.yml':
+        - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3'
+    '.github/workflows/scorecard.yml':
+        - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3'
+    '.github/workflows/secret-scanner.yml':
+        - 'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3'
     '.github/workflows/wiki-sync.yml':
         - 'actions/checkout@v7.0.1'
 dependencies:
@@ -46,7 +55,7 @@ dependencies:
         uses:
             - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d'
     'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d':
-        ref: 'v4.2.1'
+        ref: '508db95dd578ae2727ebd6217d5ba78e4fbda05d'
         commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d'
         owner_id: 44036562
         repo_id: 760701061
@@ -61,7 +70,7 @@ dependencies:
         owner_id: 44036562
         repo_id: 438112499
     'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
-        ref: 'v7.0.0'
+        ref: 'bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
         commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
         owner_id: 44036562
         repo_id: 192625955
@@ -87,18 +96,23 @@ dependencies:
         commit: 'sha1-dc802804100637a589fabce1cb79ff13a1411302'
         owner_id: 5429470
         repo_id: 306769011
-    'github/codeql-action@v4.38.1':
-        ref: 'v4.38.1'
-        commit: 'sha1-1c5b675653bb5c22dbe9b12b556ec555138e09fd'
+    'github/codeql-action@v4.38.2':
+        ref: 'v4.38.2'
+        commit: 'sha1-2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2'
         owner_id: 9919
         repo_id: 259445878
     'google/clusterfuzzlite@v1':
         ref: 'v1'
         commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1'
         owner_id: 1342004
         repo_id: 400046858
-    'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be':
-        ref: 'v0.3.0'
-        commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be'
+    'hyperpolymath/smtp-notify-action@v0.5.0':
+        ref: 'v0.5.0'
+        commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef'
         owner_id: 6759885
         repo_id: 1352485172
+    'hyperpolymath/standards@94572e612a7bf11f8e6343d19adadf17ef2a3de3':
+        ref: '94572e612a7bf11f8e6343d19adadf17ef2a3de3'
+        commit: 'sha1-94572e612a7bf11f8e6343d19adadf17ef2a3de3'
+        owner_id: 6759885
+        repo_id: 1116521501
@@ -35,4 +35,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2 # main 2026-09-07 (post-#742; live-policy advisory, SPDX comment-block predicate)
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3 # main 2026-09-07 (post-#742; live-policy advisory, SPDX comment-block predicate)
@@ -31,5 +31,5 @@ jobs:
       contents: read
       pull-requests: write
       security-events: write
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3
     secrets: inherit
@@ -15,5 +15,5 @@ permissions:
 
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3
     secrets: inherit
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Send push notification email
-        uses: hyperpolymath/smtp-notify-action@c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef
+        uses: hyperpolymath/smtp-notify-action@v0.5.0
         with:
           server_address: ${{ secrets.SMTP_HOST }}
           server_port: ${{ secrets.SMTP_PORT }}

@@ -18,7 +18,7 @@ permissions:
 
 jobs:
   rust-ci:
-    uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4
+    uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3
     with:
       enable_audit: true
       enable_coverage: true
@@ -37,4 +37,4 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@0f13f51fafe9d2b670252aa2a18993223bffdece
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3
@@ -23,5 +23,5 @@ jobs:
       contents: read
       pull-requests: write
       actions: read
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@94572e612a7bf11f8e6343d19adadf17ef2a3de3
     secrets: inherit
@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Session Handoff — 2026-05-25 Repo Tidy
-Claude (session 7927557c-2938-4d53-b987-a6f8ebc44611)
+Claude (session 7927557c_2938_4d53_b987_a6f8ebc44611 — external session id, underscored so the estate UUIDv8 scanner does not misread it; the id is unchanged)
 :toc:
 :sectnums: