Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 34 additions & 1 deletion .github/workflows/actions.lock
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# This file is machine-generated by `gh actions-lock`.

Check failure on line 1 in .github/workflows/actions.lock

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan

[hypatia] actions.lock failed closed: {:line, 4, {:unsupported_version, "v0.0.3"}}

Check failure on line 1 in .github/workflows/actions.lock

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan

[hypatia] Invalid .github/workflows/actions.lock: {:line, 4, {:unsupported_version, "v0.0.3"}}. Regenerate and verify it with gh actions-lock.
# Do not edit by hand; run `gh actions-lock` to update.
# Docs: https://gh.io/actions-lockfile
version: 'v0.0.3'
Expand Down Expand Up @@ -105,6 +105,11 @@
- 'actions/checkout@v7.0.1'
- 'hyperpolymath/cicd-suite@4c772eb235b04455307d5c03cbbc4f45130f7f0f'
- 'mlugg/setup-zig@v2.2.1'
'.github/workflows/zz-one-off-close-lock.yml': []
'.github/workflows/zz-probe-pa.yml':
- 'hyperpolymath/panic-attack@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea'
'.github/workflows/zz-probe-std-new.yml':
- 'metadatastician/standards@75bd5994470661a099df562d6d5ad2fe744dbd66'
Comment on lines +109 to +112

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Preserve the unclosed control lock

When this standalone commit is pushed, these entries already close the lock over both probe workflows and their moved-tag dependencies. Consequently the advertised control can never produce the expected zero-job startup failure, and the probes immediately exercise the regenerated state; this removes the negative control needed to show that any subsequent startup is caused by the fallback rather than unrelated behavior. Keep the initial commit on the parent lock and add these generated records only in the follow-up commit.

Useful? React with 👍 / 👎.

dependencies:
'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6':
ref: 'v2.9.2'
Expand Down Expand Up @@ -185,11 +190,21 @@
commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed'
owner_id: 42048915
repo_id: 356423100
'dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de':
ref: 'v1'
commit: 'sha1-02cb101ec7c40f2c49e1d9714d64511d8e1b74de'
owner_id: 1940490
repo_id: 260749683
'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8':
ref: 'v1'
commit: 'sha1-683b588c487a69d01f6c6ddf40f036ff682cc2c8'
owner_id: 1940490
repo_id: 260749683
'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f':
ref: 'v1'
commit: 'sha1-e2a55d2ffb04f378e9626c28d38b36d230d1e12f'
owner_id: 1940490
repo_id: 260749683
'dtolnay/rust-toolchain@v1':
ref: 'v1'
commit: 'sha1-7e38f4b43b4db5c8dd498af069a4f6196df1d067'
Expand Down Expand Up @@ -244,10 +259,19 @@
- 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
- 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8'
'hyperpolymath/panic-attack@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea':
ref: 'b689a74d2762a1c19839ae3fbd59b7fe5ef920ea'
commit: 'sha1-b689a74d2762a1c19839ae3fbd59b7fe5ef920ea'
owner_id: 6759885
repo_id: 1152434997
uses:
- 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
- 'dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de'
'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0':
ref: '3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
commit: 'sha1-3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
owner_id: 6759885
owner_id: 297579217
repo_id: 1116521501
uses:
- 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
Expand All @@ -261,6 +285,15 @@
- 'ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e'
- 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6'
- 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555'
'metadatastician/standards@75bd5994470661a099df562d6d5ad2fe744dbd66':
ref: '75bd5994470661a099df562d6d5ad2fe744dbd66'
commit: 'sha1-75bd5994470661a099df562d6d5ad2fe744dbd66'
owner_id: 297579217
repo_id: 1116521501
uses:
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
- 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f'
- 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555'
'mlugg/setup-zig@v2.2.1':
ref: 'v2.2.1'
commit: 'sha1-d1434d08867e3ee9daa34448df10607b98908d29'
Expand Down
49 changes: 49 additions & 0 deletions .github/workflows/zz-one-off-close-lock.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
# SPDX-License-Identifier: MPL-2.0
# ONE-OFF, scratch branch only, deleted after use. Regenerates this branch's
# actions.lock with the estate repair order (regen_lock in
# standards/scripts/regen-dependabot-locks.sh) from hyperpolymath/standards#1350,
# reports close-lock's moved-tag decisions and the --check verdict, and prints
# the lock. It has no `uses:` steps, so it needs no lock entry to start. It
# writes nothing back.
name: one-off actions.lock regeneration (moved tags)
on:
push:
branches: [claude/compassionate-fermat-9x7vpe]
permissions:
contents: read
jobs:
regen:
runs-on: ubuntu-latest
timeout-minutes: 20
env:
GH_TOKEN: ${{ github.token }}
STANDARDS_BRANCH: claude/compassionate-fermat-9x7vpe-callee-lock
steps:
- name: Regenerate actions.lock and check closure
run: |
set -uo pipefail

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Fail when the measurement setup breaks

If a prerequisite such as either clone, the branch checkout, apt-get, or extension installation fails, set -uo pipefail continues through the script, and the final successful echo causes Actions to report the step as green. For this live probe, that can make a run which never executed the code under test look successful; enable errexit and explicitly capture only the expected nonzero results from regen_lock and close-lock --check.

Useful? React with 👍 / 👎.

git clone --quiet https://github.com/${{ github.repository }}.git e
git -C e checkout --quiet ${{ github.sha }}
git -C e log --oneline -1
git clone --quiet --depth 1 --branch "$STANDARDS_BRANCH" https://github.com/metadatastician/standards.git std
git -C std log --oneline -1
sudo apt-get install -y -qq gawk >/dev/null
gh extension install github/gh-actions-lock --pin v0.2.0
gh actions-lock --version
export GH_BIN=gh REGEN_TOOLS="$PWD/std/scripts"
cp e/.github/workflows/actions.lock prior.lock
source std/scripts/regen-dependabot-locks.sh
outcome="$(regen_lock "$PWD/e" 2> regen.log || true)"
cat regen.log
echo "OUTCOME=$outcome"
echo "== close-lock moved-tag decisions"
grep -E '^ (~|SKIP|\+) ' regen.log || echo "(none)"
echo "== close-lock --check"
bash std/scripts/close-lock.sh --check e/.github/workflows; echo "CHECK_RC=$?"
Comment thread
hyperpolymath marked this conversation as resolved.
echo "== dtolnay records"
grep -A4 "^ 'dtolnay/rust-toolchain@\(e2a55d2\|02cb101\)" e/.github/workflows/actions.lock || echo "(no dtolnay records)"
git -C e status --porcelain
echo "LOCK-SHA256 $(sha256sum < e/.github/workflows/actions.lock | cut -d' ' -f1)"
echo "LOCK-BEGIN"
base64 -w 76 e/.github/workflows/actions.lock
echo "LOCK-END"
14 changes: 14 additions & 0 deletions .github/workflows/zz-probe-pa.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# SPDX-License-Identifier: MPL-2.0
# ONE-OFF, scratch branch only, deleted after use. Probe for
# hyperpolymath/standards#1350, separated from the standards repository move:
# panic-attack@b689a74 scan-and-report pins dtolnay/rust-toolchain@02cb101,
# which no current tag names. No secrets, so the cross-repo dispatch skips.
name: one-off moved-tag probe (panic-attack)
on:
push:
branches: [claude/compassionate-fermat-9x7vpe]
permissions:
contents: read
jobs:
scan:
uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea # main 2026-10-01
16 changes: 16 additions & 0 deletions .github/workflows/zz-probe-std-new.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
# SPDX-License-Identifier: MPL-2.0
# ONE-OFF, scratch branch only, deleted after use. Probe for
# hyperpolymath/standards#1350 and the standards repository move: calls
# mirror-reusable@75bd5994 (pins dtolnay/rust-toolchain@e2a55d2, no current
# tag) under the repository's new name, metadatastician/standards. No
# secrets, so every mirror push skips.
name: one-off moved-tag probe (standards, new path)
on:
push:
branches: [claude/compassionate-fermat-9x7vpe]
permissions:
actions: read
contents: read
jobs:
mirror:
uses: metadatastician/standards/.github/workflows/mirror-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04
Loading