chore(ci): cascade socket-registry pins to 3f2f2c00

Picks up the multi-package bootstrap loop (a645d921) that pre-seeds
@socketsecurity/lib + @socketregistry/packageurl-js + @sinclair/typebox
on a fresh checkout, plus the libuv-fix in check-firewall that drops
process.exit() in favor of natural event-loop drain (necessary on
Node 24 + Windows when the bootstrap runs the firewall checker
multiple times in succession).

Cascade chain:
  setup + check-firewall    Layer 1  a645d921
  setup-and-install         Layer 2  521d0ba8
  reusable workflows        Layer 3  3f2f2c00  ← this is the propagation SHA
  _local-not-for-reuse-*    Layer 4  b2905c2f  (socket-registry only)

Author: jdalton

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ concurrency:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
     with:
       test-script: 'pnpm exec vitest --config .config/vitest.config.mts run'
 
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
 
       - name: Build project
         run: pnpm run build

.github/workflows/provenance.yml

@@ -21,7 +21,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
     with:
       debug: ${{ inputs.debug }}
       package-name: '@socketsecurity/lib'

.github/workflows/weekly-update.yml

@@ -29,7 +29,7 @@ jobs:
     outputs:
       has-updates: ${{ steps.check.outputs.has-updates }}
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
 
       - name: Check for npm updates
         id: check
@@ -54,7 +54,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
 
       - name: Create update branch
         id: branch
@@ -66,7 +66,7 @@ jobs:
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -303,7 +303,7 @@ jobs:
             test-output.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@ceab1e26610aa29511b85a7eb369ed2248d8543c # main
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@3f2f2c00e9b9dbd78872619e47cb600586b88105 # main
         if: always()
 
   notify: