From e008c98b71c6c335a943d0f3d0c33fa2e5021943 Mon Sep 17 00:00:00 2001 From: jrtxio Date: Mon, 19 Oct 2026 19:03:56 +0800 Subject: [PATCH] ci: pin rivet to v0.12.0 (1ebb3ac0) The dependency pin preflight requires full 40-hex SHAs (immutable trust chain), so the pin records the release commit instead of the tag name. --- .github/workflows/acceptance.yml | 4 ++-- .github/workflows/ci.yml | 5 ++--- .github/workflows/release.yml | 5 ++--- 3 files changed, 6 insertions(+), 8 deletions(-) diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml index 999c9aa..8b2c0a4 100644 --- a/.github/workflows/acceptance.yml +++ b/.github/workflows/acceptance.yml @@ -15,7 +15,7 @@ concurrency: cancel-in-progress: true env: - RIVET_PIN: b1d05950537f8679b2cfb48aded383c5162c288f + RIVET_PIN: 1ebb3ac09ed2e23eeb0a91cbec6e689aac01ab1a KEEL_PIN: 0740fdfbdab7bf5dab32232c82f07dd98aa6a196 jobs: @@ -95,7 +95,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Set up embeddable Racket CS - uses: turinglambdaai/rivet/.github/actions/setup-embed-racket@b1d05950537f8679b2cfb48aded383c5162c288f + uses: turinglambdaai/rivet/.github/actions/setup-embed-racket@1ebb3ac09ed2e23eeb0a91cbec6e689aac01ab1a - name: Install native and pinned Racket dependencies shell: bash run: | diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7fca7a9..341d442 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,8 +12,7 @@ permissions: # Single source of truth for the rivet pin; every install step below # references this so a bump is one edit, not a grep-replace across jobs. env: - RIVET_PIN: b1d05950537f8679b2cfb48aded383c5162c288f - + RIVET_PIN: 1ebb3ac09ed2e23eeb0a91cbec6e689aac01ab1a jobs: contract: name: Contract preflight (i18n + release metadata) @@ -75,7 +74,7 @@ jobs: # Builds and caches the embeddable Racket CS runtime and exports # RIVET_RACKET_* (rivet's own composite action). - name: Set up embeddable Racket CS - uses: turinglambdaai/rivet/.github/actions/setup-embed-racket@b1d05950537f8679b2cfb48aded383c5162c288f + uses: turinglambdaai/rivet/.github/actions/setup-embed-racket@1ebb3ac09ed2e23eeb0a91cbec6e689aac01ab1a # Installed after the embeddable runtime so the catalog dependency # closure (cext-lib, crypto-lib, keel) resolves against the minimal # build — it ships no packages of its own. db backs taskly's storage; diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f56a992..3fba709 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -15,8 +15,7 @@ concurrency: # Single source of truth for the rivet pin; every install step below # references this so a bump is one edit, not a grep-replace across jobs. env: - RIVET_PIN: b1d05950537f8679b2cfb48aded383c5162c288f - + RIVET_PIN: 1ebb3ac09ed2e23eeb0a91cbec6e689aac01ab1a jobs: macos: name: macOS (${{ matrix.arch }}) @@ -143,7 +142,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Set up embeddable Racket CS - uses: turinglambdaai/rivet/.github/actions/setup-embed-racket@b1d05950537f8679b2cfb48aded383c5162c288f + uses: turinglambdaai/rivet/.github/actions/setup-embed-racket@1ebb3ac09ed2e23eeb0a91cbec6e689aac01ab1a # Installed after the embeddable runtime so the catalog dependency # closure (cext-lib, crypto-lib, keel) resolves against the minimal # build — it ships no packages of its own. db backs taskly's storage;