From 05506dd99d5c4d7775306965a25e29acdbefed43 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Wed, 27 May 2026 09:31:21 +0100 Subject: [PATCH] chore(ci): bump standards reusable pins past #219 governance-reusable fix MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Two wrappers point at stale SHAs of hyperpolymath/standards reusables: .github/workflows/governance.yml:34 pinned to 66271d3 (2026-05-22) — predates standards#219 (ad366b6, 2026-05-27) which fixes `governance / Language / package anti-pattern policy` failing with exit 128. Root cause: governance-reusable.yml used `ref: ${{ github.workflow_sha }}` for its inner self-checkout, which in a reusable resolves to the CALLER's SHA, not the reusable file's SHA, so the fetch asked the standards repo for a SHA that only exists in hypatia → exit 128 after retries. .github/workflows/hypatia-scan.yml:28 pinned to 97df762 — orphan SHA on the pre-squash PR branch for #193. File content identical to the canonical squash-merged 915139d, but cross-checks and audits (cf. standards#220) prefer pins reachable on standards/main. Both bumped to current standards/main HEAD 5eb28d7. Delta picked up on the governance side: ad366b6 fix(governance-reusable): pin standards self-checkout to main (#219) 481c496 feat(governance): add check-trusted-base CI enforcement (#211) 0ec0b83 fix(governance): eradicate inline Python from governance-reusable.yml (#189) 3285ac1 fix(baseline): file_pattern glob matching + jq scoping bugs (#180) 431adbb refactor(governance): subsume language-policy.yml + add deno-ci-reusable (#168) 91d8b88 feat: consume .hypatia-baseline.json in governance gate (#166) 43b6563 fix: checkout caller's repo in governance-reusable workflow Delta on hypatia-scan side: none (reusable file unchanged since #193). No code changes; only workflow SHA pins. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 835f9652..dcd7b071 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -31,4 +31,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@66271d324b03861a8a9a33712c28894e39196da5 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5eb28d7d8790d5389b7b6a5233fe6265a775e3d0 diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 1d6417e2..bf6304a6 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -25,5 +25,5 @@ permissions: jobs: hypatia: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@97df762107501909f50bb770e9bc200b6c415600 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5eb28d7d8790d5389b7b6a5233fe6265a775e3d0 secrets: inherit