From 5c6180de983597a179189e3107b83162d48fa0c4 Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 30 May 2026 14:47:33 +0100
Subject: [PATCH] ci: consolidate erlef/setup-beam pins on v1.24.0 (3
 workflows)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Standards had two distinct setup-beam SHAs across canonical workflows:

  hypatia-scan.yml + hypatia-scan-reusable.yml
    fc68ffb90438ef2936bbb3251622353b3dcb2f93 (real v1.24.0 from 2026-03-30)
    annotated `# v1.18.2` — comment WRONG, SHA actually v1.24.0

  elixir-ci-reusable.yml
    5304e04ea2b355f03681464e683d92e3b2f18451 (real v1.18.2 from 2024-09-25)
    annotated `# v1.18.2` — comment matches SHA but pin is 18 months stale

Both verified real via `gh api repos/erlef/setup-beam/commits/<sha>`. The
fragmentation likely comes from incremental updates that didn't sweep all
three files together.

Consolidated to `fc68ffb...` (v1.24.0) across all three with corrected
version comments. The elixir-ci reusable is the load-bearing change here:
~12 estate repos call it as a wrapper, so this propagates the
v1.18.2 → v1.24.0 upgrade across the fleet.

Companion to rsr-template-repo#81 (template fakes fixed) + 3 downstream
PRs (odds-and-sods-package-manager#39, proven#93, proven-servers#19). All
fan-out from the SNIFS CI gate work (hyperpolymath/snifs#30).
---
 .github/workflows/elixir-ci-reusable.yml    | 2 +-
 .github/workflows/hypatia-scan-reusable.yml | 2 +-
 .github/workflows/hypatia-scan.yml          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/elixir-ci-reusable.yml b/.github/workflows/elixir-ci-reusable.yml
index bf4a57bc..d39dfd8d 100644
--- a/.github/workflows/elixir-ci-reusable.yml
+++ b/.github/workflows/elixir-ci-reusable.yml
@@ -118,7 +118,7 @@ jobs:
           ref: ${{ github.ref }}
 
       - name: Set up BEAM (OTP + Elixir)
-        uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # v1.18.2
+        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.24.0
         with:
           otp-version: ${{ inputs.otp-version }}
           elixir-version: ${{ inputs.elixir-version }}
diff --git a/.github/workflows/hypatia-scan-reusable.yml b/.github/workflows/hypatia-scan-reusable.yml
index f15df4d8..986d5f9c 100644
--- a/.github/workflows/hypatia-scan-reusable.yml
+++ b/.github/workflows/hypatia-scan-reusable.yml
@@ -94,7 +94,7 @@ jobs:
           fetch-depth: 0  # Full history for better pattern analysis
 
       - name: Setup Elixir for Hypatia scanner
-        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.18.2
+        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.24.0
         with:
           elixir-version: '1.18'
           otp-version: '27'
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index b4e5a851..d9f6669c 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -51,7 +51,7 @@ jobs:
           fetch-depth: 0  # Full history for better pattern analysis
 
       - name: Setup Elixir for Hypatia scanner
-        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.18.2
+        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.24.0
         with:
           elixir-version: '1.18'
           otp-version: '27'