From a1c0cee6d265cf349ecfc55773708ccf49df5df7 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sun, 30 Aug 2026 12:37:45 +0100 Subject: [PATCH 1/2] chore: bump standards workflow pins to current main Unifies the four standards reusable-workflow pins (governance, hypatia-scan, mirror, secret-scanner) from three divergent stale SHAs onto the current standards main, 0ef5917 (2026-08-31, post ReScript BANNED-row sync #710). All four reusable workflows verified present at that SHA. Co-Authored-By: Claude Fable 5 --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/mirror.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 931cef9..6da596e 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -14,4 +14,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@0ef5917b3a6742dc69b6758b3e40a7beb8b97d04 diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 3c08e0a..095da4a 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -17,4 +17,4 @@ permissions: jobs: scan: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@0ef5917b3a6742dc69b6758b3e40a7beb8b97d04 diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index c3fc68a..bcbe82a 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -9,5 +9,5 @@ permissions: contents: read jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@0ef5917b3a6742dc69b6758b3e40a7beb8b97d04 secrets: inherit diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 3b6e339..4093c43 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -19,5 +19,5 @@ jobs: contents: read pull-requests: write actions: read - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586 + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@0ef5917b3a6742dc69b6758b3e40a7beb8b97d04 secrets: inherit From a606832eb3c7738d855eb9d9cadaddcf76ce2b05 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 1 Sep 2026 15:44:04 +0100 Subject: [PATCH 2/2] fix(ci): remove impossible mapping under scalar permissions in workflow-linter permissions: read-all is a scalar; nesting actions: read under it is a YAML parse error, so this workflow has never loaded (an unloaded workflow produces no check run). read-all already grants actions: read. Caught by the parse gate in the standards suite this PR pins to. Co-Authored-By: Claude Fable 5 --- .github/workflows/workflow-linter.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml index b3e5dc3..862a590 100644 --- a/.github/workflows/workflow-linter.yml +++ b/.github/workflows/workflow-linter.yml @@ -9,7 +9,6 @@ on: paths: - '.github/workflows/**' permissions: read-all - actions: read jobs: lint-workflows: runs-on: ubuntu-latest