From 79a82075320b1954b8b24d62e27026436ed85a05 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 3 Jul 2026 02:22:11 +0000 Subject: [PATCH] ci(governance): bump governance-reusable pin to adopt the hypatia-baseline fix MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit standards#455 wired scripts/apply-baseline.sh into the shared `validate-hypatia-baseline` job so it now actually consults .hypatia-baseline.json (previously it counted raw findings and failed on any, ignoring the baseline entirely). Bumping neurophone's governance-reusable pin 7c9db0e -> 832b157 (current standards main, fix confirmed present) lets that job suppress this repo's honestly-baselined findings and go green, while still failing on any genuinely-new finding (no silent-green — apply-baseline.sh keeps non-baselined findings for the gate). Surgical on purpose: only governance-reusable is bumped. The other five standards reusables (rust-ci — deliberately pinned at 7c9db0e for the standards#439 toolchain fix — plus secret-scanner, scorecard, hypatia-scan, mirror) are left at 7c9db0e to avoid pulling unrelated deltas. This bump does pull the governance delta since 7c9db0e (standards #453 "Wave 0", #457/#458 "Wave 4"); neurophone's full CI is checked on this PR to surface any surprise from it. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0172RBMz3qYjb1ttzD2i7RNh --- .github/workflows/governance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index fd9f140..c32611c 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -31,4 +31,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@7c9db0e5909aab77bf11a444ade3b95c1d2b702e + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@832b1578ecaeeb27dad54f133630ebd670f6e752 # bumped 2026-07-03: standards#455 wires apply-baseline.sh into validate-hypatia-baseline (the check now actually consults .hypatia-baseline.json). Other standards reusables intentionally left at 7c9db0e.