From db160052f72e6544d169daab2cc0bc8196931d51 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 27 Jun 2026 12:06:44 +0100
Subject: [PATCH 1/3] ci: re-pin hypatia-scan reusable to standards HEAD
 d7c2271 (hypatia#464)

---
 .github/workflows/hypatia-scan.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index 3c2f6e0..73ba055 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -25,5 +25,5 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
-    timeout-minutes: 20
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
+    timeout-minutes: 20
\ No newline at end of file

From a20d90643cdf4887beae3d85d7d5f8679cfd4355 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 27 Jun 2026 12:06:45 +0100
Subject: [PATCH 2/3] ci: re-pin governance reusable to standards HEAD d7c2271
 (hypatia#464)

---
 .github/workflows/governance.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index 7f1ec2c..ad1080f 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -16,5 +16,5 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
-    timeout-minutes: 10
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
+    timeout-minutes: 10
\ No newline at end of file

From 74cafb7f01c086f4edcd28bdf40675dd701a95b4 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 27 Jun 2026 12:06:47 +0100
Subject: [PATCH 3/3] ci: re-pin scorecard reusable to standards HEAD d7c2271
 (hypatia#464)

---
 .github/workflows/scorecard.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 78c65dd..b59573c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@09e7023d24682621bea4e11965a1ef5e87d86c3b
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
     # Reusable called-workflow permissions are CAPPED by the caller's grants;
     # without security-events: write here the scorecard SARIF upload fails with
     # startup_failure (hypatia WF018). id-token: write enables OIDC publish.
@@ -24,4 +24,4 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    timeout-minutes: 15
+    timeout-minutes: 15
\ No newline at end of file