diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 7754a808..945664c1 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -105,6 +105,11 @@ workflows: - 'actions/checkout@v7.0.1' - 'hyperpolymath/cicd-suite@4c772eb235b04455307d5c03cbbc4f45130f7f0f' - 'mlugg/setup-zig@v2.2.1' + '.github/workflows/zz-one-off-close-lock.yml': [] + '.github/workflows/zz-probe-pa.yml': + - 'hyperpolymath/panic-attack@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea' + '.github/workflows/zz-probe-std-new.yml': + - 'metadatastician/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' dependencies: 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6': ref: 'v2.9.2' @@ -185,11 +190,21 @@ dependencies: commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed' owner_id: 42048915 repo_id: 356423100 + 'dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de': + ref: 'v1' + commit: 'sha1-02cb101ec7c40f2c49e1d9714d64511d8e1b74de' + owner_id: 1940490 + repo_id: 260749683 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8': ref: 'v1' commit: 'sha1-683b588c487a69d01f6c6ddf40f036ff682cc2c8' owner_id: 1940490 repo_id: 260749683 + 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f': + ref: 'v1' + commit: 'sha1-e2a55d2ffb04f378e9626c28d38b36d230d1e12f' + owner_id: 1940490 + repo_id: 260749683 'dtolnay/rust-toolchain@v1': ref: 'v1' commit: 'sha1-7e38f4b43b4db5c8dd498af069a4f6196df1d067' @@ -244,10 +259,19 @@ dependencies: - 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6' - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8' + 'hyperpolymath/panic-attack@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea': + ref: 'b689a74d2762a1c19839ae3fbd59b7fe5ef920ea' + commit: 'sha1-b689a74d2762a1c19839ae3fbd59b7fe5ef920ea' + owner_id: 6759885 + repo_id: 1152434997 + uses: + - 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de' 'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0': ref: '3c00687a5bbd0d881d351db8502417b5d0a8b0b0' commit: 'sha1-3c00687a5bbd0d881d351db8502417b5d0a8b0b0' - owner_id: 6759885 + owner_id: 297579217 repo_id: 1116521501 uses: - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' @@ -261,6 +285,15 @@ dependencies: - 'ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e' - 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6' - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555' + 'metadatastician/standards@75bd5994470661a099df562d6d5ad2fe744dbd66': + ref: '75bd5994470661a099df562d6d5ad2fe744dbd66' + commit: 'sha1-75bd5994470661a099df562d6d5ad2fe744dbd66' + owner_id: 297579217 + repo_id: 1116521501 + uses: + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f' + - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555' 'mlugg/setup-zig@v2.2.1': ref: 'v2.2.1' commit: 'sha1-d1434d08867e3ee9daa34448df10607b98908d29' diff --git a/.github/workflows/zz-one-off-close-lock.yml b/.github/workflows/zz-one-off-close-lock.yml new file mode 100644 index 00000000..a4cce585 --- /dev/null +++ b/.github/workflows/zz-one-off-close-lock.yml @@ -0,0 +1,49 @@ +# SPDX-License-Identifier: MPL-2.0 +# ONE-OFF, scratch branch only, deleted after use. Regenerates this branch's +# actions.lock with the estate repair order (regen_lock in +# standards/scripts/regen-dependabot-locks.sh) from hyperpolymath/standards#1350, +# reports close-lock's moved-tag decisions and the --check verdict, and prints +# the lock. It has no `uses:` steps, so it needs no lock entry to start. It +# writes nothing back. +name: one-off actions.lock regeneration (moved tags) +on: + push: + branches: [claude/compassionate-fermat-9x7vpe] +permissions: + contents: read +jobs: + regen: + runs-on: ubuntu-latest + timeout-minutes: 20 + env: + GH_TOKEN: ${{ github.token }} + STANDARDS_BRANCH: claude/compassionate-fermat-9x7vpe-callee-lock + steps: + - name: Regenerate actions.lock and check closure + run: | + set -uo pipefail + git clone --quiet https://github.com/${{ github.repository }}.git e + git -C e checkout --quiet ${{ github.sha }} + git -C e log --oneline -1 + git clone --quiet --depth 1 --branch "$STANDARDS_BRANCH" https://github.com/metadatastician/standards.git std + git -C std log --oneline -1 + sudo apt-get install -y -qq gawk >/dev/null + gh extension install github/gh-actions-lock --pin v0.2.0 + gh actions-lock --version + export GH_BIN=gh REGEN_TOOLS="$PWD/std/scripts" + cp e/.github/workflows/actions.lock prior.lock + source std/scripts/regen-dependabot-locks.sh + outcome="$(regen_lock "$PWD/e" 2> regen.log || true)" + cat regen.log + echo "OUTCOME=$outcome" + echo "== close-lock moved-tag decisions" + grep -E '^ (~|SKIP|\+) ' regen.log || echo "(none)" + echo "== close-lock --check" + bash std/scripts/close-lock.sh --check e/.github/workflows; echo "CHECK_RC=$?" + echo "== dtolnay records" + grep -A4 "^ 'dtolnay/rust-toolchain@\(e2a55d2\|02cb101\)" e/.github/workflows/actions.lock || echo "(no dtolnay records)" + git -C e status --porcelain + echo "LOCK-SHA256 $(sha256sum < e/.github/workflows/actions.lock | cut -d' ' -f1)" + echo "LOCK-BEGIN" + base64 -w 76 e/.github/workflows/actions.lock + echo "LOCK-END" diff --git a/.github/workflows/zz-probe-pa.yml b/.github/workflows/zz-probe-pa.yml new file mode 100644 index 00000000..3fcbb72f --- /dev/null +++ b/.github/workflows/zz-probe-pa.yml @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: MPL-2.0 +# ONE-OFF, scratch branch only, deleted after use. Probe for +# hyperpolymath/standards#1350, separated from the standards repository move: +# panic-attack@b689a74 scan-and-report pins dtolnay/rust-toolchain@02cb101, +# which no current tag names. No secrets, so the cross-repo dispatch skips. +name: one-off moved-tag probe (panic-attack) +on: + push: + branches: [claude/compassionate-fermat-9x7vpe] +permissions: + contents: read +jobs: + scan: + uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea # main 2026-10-01 diff --git a/.github/workflows/zz-probe-std-new.yml b/.github/workflows/zz-probe-std-new.yml new file mode 100644 index 00000000..1218afa8 --- /dev/null +++ b/.github/workflows/zz-probe-std-new.yml @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: MPL-2.0 +# ONE-OFF, scratch branch only, deleted after use. Probe for +# hyperpolymath/standards#1350 and the standards repository move: calls +# mirror-reusable@75bd5994 (pins dtolnay/rust-toolchain@e2a55d2, no current +# tag) under the repository's new name, metadatastician/standards. No +# secrets, so every mirror push skips. +name: one-off moved-tag probe (standards, new path) +on: + push: + branches: [claude/compassionate-fermat-9x7vpe] +permissions: + actions: read + contents: read +jobs: + mirror: + uses: metadatastician/standards/.github/workflows/mirror-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04