Pin cpflow workflows to safety guard fixes

Author: justin808

.controlplane/shakacode-team.md

@@ -78,7 +78,7 @@ Optional repository settings:
 - `ROLLBACK_READINESS_RETRIES` / `ROLLBACK_READINESS_INTERVAL`: post-rollback health polling controls; defaults to `24` retries and `15` seconds.
 
 Current workflow wrappers are pinned to upstream `control-plane-flow` PR #318 at
-`1fd7de511099278dc9dccd4c28b146d809cf36bc` for downstream testing. After that
+`19501451b7e08a48a917fb04a439171881558f82` for downstream testing. After that
 upstream work is released, regenerate or repin the wrappers to the release tag
 instead of keeping this PR commit SHA long term.
 

.github/workflows/cpflow-cleanup-stale-review-apps.yml

@@ -12,8 +12,8 @@ jobs:
   cleanup:
     # Cleanup targets qa-react-webpack-rails-tutorial-<PR>. Manually delete any
     # legacy qa-react-webpack-rails-tutorial-pr-<PR> apps during migration.
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-cleanup-stale-review-apps.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-cleanup-stale-review-apps.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}

.github/workflows/cpflow-delete-review-app.yml

@@ -26,8 +26,8 @@ jobs:
        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) ||
       (github.event_name == 'pull_request_target' && github.event.action == 'closed') ||
       github.event_name == 'workflow_dispatch'
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-delete-review-app.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-delete-review-app.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}

.github/workflows/cpflow-deploy-review-app.yml

@@ -30,9 +30,9 @@ jobs:
        github.event.issue.pull_request &&
        contains(fromJson('["+review-app-deploy","+review-app-deploy\n","+review-app-deploy\r\n"]'), github.event.comment.body) &&
        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association))
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-review-app.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-review-app.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}
       DOCKER_BUILD_SSH_KEY: ${{ secrets.DOCKER_BUILD_SSH_KEY }}

.github/workflows/cpflow-deploy-staging.yml

@@ -16,9 +16,9 @@ permissions:
 
 jobs:
   deploy-staging:
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-staging.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-staging.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82
       staging_app_branch_default: ""
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}

.github/workflows/cpflow-help-command.yml

@@ -23,6 +23,6 @@ jobs:
        contains(fromJson('["+review-app-help","+review-app-help\n","+review-app-help\r\n"]'), github.event.comment.body) &&
        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) ||
       github.event_name == 'workflow_dispatch'
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-help-command.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-help-command.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82

.github/workflows/cpflow-promote-staging-to-production.yml

@@ -18,9 +18,9 @@ jobs:
     if: github.event.inputs.confirm_promotion == 'promote'
     # Keep the @ref in `uses:` and `control_plane_flow_ref` below in sync: the
     # first selects the reusable workflow, the second selects its shared actions.
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-promote-staging-to-production.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-promote-staging-to-production.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82
       # Keep CPLN_TOKEN_PRODUCTION as a secret on this protected GitHub
       # Environment. The caller passes the environment name, the upstream
       # reusable workflow runs its production job in that environment, and

.github/workflows/cpflow-review-app-help.yml

@@ -17,6 +17,6 @@ jobs:
     # This is intentionally unconditional: adding this wrapper opts the repo in
     # to PR-open help. Remove the wrapper or add a repo-specific `if:` guard if
     # review apps should not be advertised before Control Plane is configured.
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-review-app-help.yml@1fd7de511099278dc9dccd4c28b146d809cf36bc
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-review-app-help.yml@19501451b7e08a48a917fb04a439171881558f82
     with:
-      control_plane_flow_ref: 1fd7de511099278dc9dccd4c28b146d809cf36bc
+      control_plane_flow_ref: 19501451b7e08a48a917fb04a439171881558f82