v1.5.5 housekeeping: README + kit repins + fleet-pin-audit tool

[mcarter-astronautdev]

Follow-up to the just-merged claude-code-action bump (tagged v1.5.5 = 0b1a657): README latest-tag/history updated (and the 'fleet stubs are Dependabot-bumped' claim corrected — the 2026-07-16 audit found zero such Dependabot PRs fleet-wide; repins are manual waves), the onboarding-kit stubs repinned to v1.5.5, and tools/fleet-pin-audit.sh added as the one-command drift detector between waves.

Summary by CodeRabbit

• New Features

  • Added a command-line audit tool to identify outdated reusable workflow pins across repositories and branches.
  • Added support for reporting all pins or filtering to only stale pins.

• Chores

  • Updated reusable workflow references to version v1.5.5.
  • Updated onboarding guidance and version history to reflect the latest release.
  • Clarified that pin updates require manual repinning.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 178dd997-57ca-4b57-90df-65d5fda34583

📥 Commits

Reviewing files that changed from the base of the PR and between 0b1a657 and cc2b148.

📒 Files selected for processing (7)

• README.md
• templates/github/dependabot-keep-current.yml
• templates/github/dependabot-report.yml
• templates/github/dependabot-validate.yml
• templates/github/pr-first-review.yml
• templates/github/ticketed-review.yml
• tools/fleet-pin-audit.sh

---

Walkthrough

The pull request updates repository documentation and five reusable-workflow pins to v1.5.5, and adds a Bash utility that scans fleet repositories for stale DriverDigital/workflows references.

Changes

Workflow pin refresh

Layer / File(s)	Summary
Update v1.5.5 workflow pins README.md, templates/github/*.yml	Documentation and five GitHub workflow templates now reference the v1.5.5 commit, with manual repinning and audit guidance documented.
Add fleet pin auditing tools/fleet-pin-audit.sh	The script retrieves the latest workflow SHA, scans repository workflow files, reports pins, filters stale references with --stale, and summarizes SHA counts.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

• DriverDigital/workflows#6: Introduced the dependabot-keep-current workflow corresponding to one of the repinned references.

Poem

A rabbit hops where workflow pins align,
v1.5.5 shines in every line.
Stale little hashes flee the audit trail,
While fleet-wide checks follow each trail.
hop hop—the templates now prevail!

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/v1.5.5-docs-kit-audit-tool

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}