v2.5.0
Queue actions now use the repository's default branch and accept explicit consumer inputs for package updater admission and comparison-base dispatch. Configure automation-branch for a same-repository github-actions bot updater and base-sha-workflows for workflows declaring base_sha.
The library's queue reconciler now uses hourly recovery and skips completion events from unrelated scans. PR and merge-group validation retain event-driven reconciliation, and dispatched queue runs retain completion callbacks. Consumer wrappers must adopt these trigger changes separately.
The new scripts/sync-release.py command checks or updates every shared CI reference across local workflows, composite actions and onboarding templates. It resolves published stable releases to immutable SHAs and supports read-only drift checks.
Validation passed on Linux locally and in both PR and merge-group CI, including 68 regression tests, real Nix attribute selection, workflow lint and security checks. Existing required statuses and bot admission restrictions remain enforced. Hourly recovery can delay progress after a missed callback.