fix: converge Generic integration prefix + pin eval.yml action SHAs

- Add converge to speckit. prefix exception in test_command_loads_constitution_context
- Use speckit.converge.md (not {prefix}.converge.md) in test_complete_file_inventory_{sh,ps}
- Pin all 6 GitHub Actions in .github/workflows/eval.yml to full 40-char commit SHAs
- Bump version to 0.11.9+adlc4

Assisted-by: opencode (autonomous)

Author: kanfil

.github/workflows/eval.yml

@@ -17,23 +17,23 @@ jobs:
       pull-requests: write  # For posting PR comments
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
 
       - name: Restore promptfoo cache
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ~/.promptfoo/cache
           key: promptfoo-${{ hashFiles('evals/configs/**', 'evals/prompts/**') }}-${{ github.event.inputs.model || secrets.LLM_MODEL || 'default' }}
           restore-keys: |
             promptfoo-${{ hashFiles('evals/configs/**', 'evals/prompts/**') }}-
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: '3.11'
 
@@ -134,7 +134,7 @@ jobs:
 
       - name: Comment PR with Results
         if: github.event_name == 'pull_request' && always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
         with:
           script: |
             const fs = require('fs');
@@ -177,7 +177,7 @@ jobs:
 
       - name: Upload Results Artifact
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: eval-results
           path: |

CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to the Specify CLI and templates are documented here.
 
+# [0.11.9+adlc4] - 2026-06-29
+
+### Fixed
+
+- **Generic integration tests**: Fixed `test_command_loads_constitution_context` to recognize `converge` in the `speckit.` prefix exception (alongside `taskstoissues`). Fixed both `test_complete_file_inventory_sh` and `test_complete_file_inventory_ps` to expect `speckit.converge.md` instead of `{prefix}.converge.md` in the expected file inventory.
+- **eval.yml action pinning**: Pinned all 6 GitHub Actions in `.github/workflows/eval.yml` to full 40-character commit SHAs (checkout@34e11487, setup-node@49933ea5, cache@0057852b, setup-python@a26af69b, github-script@f28e40c7, upload-artifact@ea165f8d) to satisfy `test_github_actions_are_pinned_to_full_commit_shas`.
+
 # [0.11.9+adlc3] - 2026-06-29
 
 ### Fixed

FORK.md

@@ -58,15 +58,16 @@ Examples:
 
 ### Tag Format
 Use `agentic-sdlc-v<version>` with plus:
-- Version: `0.11.9+adlc3`
+- Version: `0.11.9+adlc4`
 
-- Tag: `agentic-sdlc-v0.11.9+adlc3`
+- Tag: `agentic-sdlc-v0.11.9+adlc4`
 When a fork release changes only bundled extension behavior, keep the CLI version on the upstream base (for example `0.10.0+adlc3`) and bump the affected extension manifest version independently (for example `extensions/git/extension.yml` to `1.5.0`).
 
 ### Version History
 
 | Version | Date | Base Upstream | Changes |
 |---------|------|---------------|---------|
+| 0.11.9+adlc4 | 2026-06-29 | 0.11.9 | Fixed 4 remaining CI test failures: Generic integration converge prefix mismatch (3 tests), eval.yml action SHA pinning (1 test). Pinned all 6 GitHub Actions to commit SHAs. All CI tests now pass. |
 | 0.11.9+adlc3 | 2026-06-29 | 0.11.9 | Merge upstream 2 new commits: community bundle submission issue template + docs (#3162), docs for /speckit.converge (#3181). All doc files already identical; only README.md required merge. Added new **Community Bundles** section to README with contribution link. Fixed 6 CI test failures: converge command keeps `speckit.` prefix (like taskstoissues); Firebender `_expected_files` accepts `project` kwarg + dedup; setup-plan test uses `SPECIFY_FEATURE_DIRECTORY`; PS `create-new-feature.ps1` null `$featureDir` fix; PS test uses correct extension script path. |
 | 0.11.9+adlc2 | 2026-06-29 | 0.11.9 | Re-added `specify preset update` CLI command (registration lost during upstream merge). Fixed `test_e2e_branch_pattern_with_issue_config` to source `git-common.sh` (core `common.sh` no longer has `check_feature_branch`). |
 | 0.11.9+adlc1 | 2026-06-28 | 0.11.9 | Merge upstream 0.11.9 (15 commits): mandatory hook invocation enforcement (#2901), PowerShell branch-name acronym case-sensitivity fix (#3129), GHES private release asset resolution (#3157), community bundle submission path (#3162), docs for --force and --refresh-shared-infra (#3179). Fork fixes: relative imports in extensions/ and presets/ __init__.py, registered.append guard in agents.py, bundled extension update uses install_from_directory not catalog download. |

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentic-sdlc-specify-cli"
-version = "0.11.9+adlc3"
+version = "0.11.9+adlc4"
 description = "Specify CLI (tikalk fork). Agentic SDLC toolkit for Spec-Driven Development with pre-installed extensions and AI integrations."
 readme = "README.md"
 requires-python = ">=3.11"

tests/integrations/test_integration_generic.py

@@ -233,7 +233,7 @@ def test_command_loads_constitution_context(self, tmp_path, command_stem):
         m = IntegrationManifest("generic", tmp_path)
         i.setup(tmp_path, m, parsed_options={"commands_dir": ".custom/cmds"})
         # taskstoissues is special-cased to keep speckit. prefix
-        pfx = "speckit" if command_stem == "taskstoissues" else _cmd_prefix()
+        pfx = "speckit" if command_stem in ("taskstoissues", "converge") else _cmd_prefix()
         cmd_file = tmp_path / ".custom" / "cmds" / f"{pfx}.{command_stem}.md"
         assert cmd_file.exists(), f"Command file missing: {cmd_file.name}"
         content = cmd_file.read_text(encoding="utf-8")
@@ -313,7 +313,7 @@ def test_complete_file_inventory_sh(self, tmp_path):
             f".myagent/commands/{_cmd_prefix()}.checklist.md",
             f".myagent/commands/{_cmd_prefix()}.clarify.md",
             f".myagent/commands/{_cmd_prefix()}.constitution.md",
-            f".myagent/commands/{_cmd_prefix()}.converge.md",
+            ".myagent/commands/speckit.converge.md",
             f".myagent/commands/{_cmd_prefix()}.implement.md",
             f".myagent/commands/{_cmd_prefix()}.plan.md",
             f".myagent/commands/{_cmd_prefix()}.specify.md",
@@ -389,7 +389,7 @@ def test_complete_file_inventory_ps(self, tmp_path):
             f".myagent/commands/{_cmd_prefix()}.checklist.md",
             f".myagent/commands/{_cmd_prefix()}.clarify.md",
             f".myagent/commands/{_cmd_prefix()}.constitution.md",
-            f".myagent/commands/{_cmd_prefix()}.converge.md",
+            ".myagent/commands/speckit.converge.md",
             f".myagent/commands/{_cmd_prefix()}.implement.md",
             f".myagent/commands/{_cmd_prefix()}.plan.md",
             f".myagent/commands/{_cmd_prefix()}.specify.md",