From 34f6a36aafe60e7f4b551e73090dd21bbc3f28cf Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 21 Jun 2026 11:08:21 +0000 Subject: [PATCH] ci(governance): bump standards reusables to d72fe5a; retire interim hypatia pin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit standards#394 (d72fe5a) repinned actions/cache to the working v4.2.0 SHA (1bd1e32a3bdc45362d1e726936510720a7c30a57) in governance-reusable.yml and hypatia-scan-reusable.yml, superseding the broken d4373f2 pin from 5a93d9d. Forward-bump the three core standards pins to the new HEAD: - governance.yml: 5a93d9d -> d72fe5a (picks up the cache fix) - hypatia-scan.yml: 915139d (interim) -> d72fe5a (cache fix; retires the #23 stopgap) - scorecard.yml: 5a93d9d -> d72fe5a (realign to HEAD; reusable unchanged at d72fe5a) Clears the Check Workflow Staleness gate (hypatia was flagged since the #23 revert) and drops the now-obsolete INTERIM comment. secret-scanner and mirror keep their own pins — d72fe5a did not modify those reusables. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01UCnxjXkN6uDj9YSANuGEgR --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 6 +----- .github/workflows/scorecard.yml | 2 +- 3 files changed, 3 insertions(+), 7 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 920c17c..e555fe2 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -31,4 +31,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20 diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index d22fb15..62bb619 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -25,9 +25,5 @@ permissions: jobs: hypatia: - # INTERIM: pinned to the last working SHA. standards@5a93d9d's hypatia - # reusable pins a non-existent actions/cache SHA (d4373f2…), which hard-fails - # this check at startup. Restore the @5a93d9d pin once standards repins - # actions/cache to v4.2.0 (1bd1e32a3bdc45362d1e726936510720a7c30a57). - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@915139d73560e65a8240b8fc7768698658502c89 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20 secrets: inherit diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 73e4cb6..ba50e07 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -17,5 +17,5 @@ jobs: id-token: write contents: read actions: read - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20 secrets: inherit