Skip to content

e-pin the estate reusables to the last accepted standards ref - #12

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/repin-accepted
Sep 19, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
fix/repin-accepted

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

fix(ci): re-pin the estate reusables to the last accepted standards ref

Pins at 4e6ffe55-or-later are rejected by GitHub's dependency-lockfile validation, so the
callers that used them could not parse: conclusion=failure, 0 jobs, run name equal to the
file's path. 210f14e7 (2026-09-12T17:32:17Z) is the last ref whose pins are accepted — measured by
pinning a caller at each candidate and dispatching it, not inferred.

This re-points the refs here to that ref. Behaviour is otherwise unchanged; the lockfile in
hyperpolymath/standards is the thing that has to be regenerated before a forward re-point is safe
again, and the estate's own applier (.github/workflows/apply-workflow-pins.yml) is what should do
that re-pointing once it can run.

Pins at `4e6ffe55`-or-later are rejected by GitHub's dependency-lockfile validation, so the
callers that used them could not parse: `conclusion=failure`, **0 jobs**, run name equal to the
file's path. `210f14e7` (2026-09-12T17:32:17Z) is the last ref whose pins are accepted — measured by
pinning a caller at each candidate and dispatching it, not inferred.

This re-points the refs here to that ref. Behaviour is otherwise unchanged; the lockfile in
`hyperpolymath/standards` is the thing that has to be regenerated before a forward re-point is safe
again, and the estate's own applier (`.github/workflows/apply-workflow-pins.yml`) is what should do
that re-pointing once it can run.
@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

Next included review available in 24 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 4dfc5da7-4ceb-4730-b9ed-b181d6890039

📥 Commits

Reviewing files that changed from the base of the PR and between fba7446 and bae39f8.

📒 Files selected for processing (48)
  • .github/workflows/codeql.yml
  • .github/workflows/governance.yml
  • .github/workflows/hypatia-scan.yml
  • .github/workflows/mirror.yml
  • .github/workflows/scorecard.yml
  • .github/workflows/secret-scanner.yml
  • actions/validate/.github/workflows/codeql.yml
  • actions/validate/.github/workflows/governance.yml
  • actions/validate/.github/workflows/hypatia-scan.yml
  • actions/validate/.github/workflows/mirror.yml
  • actions/validate/.github/workflows/scorecard-enforcer.yml
  • actions/validate/.github/workflows/scorecard.yml
  • actions/validate/.github/workflows/secret-scanner.yml
  • bindings/deno/.github/workflows/codeql.yml
  • bindings/deno/.github/workflows/governance.yml
  • bindings/deno/.github/workflows/hypatia-scan.yml
  • bindings/deno/.github/workflows/mirror.yml
  • bindings/deno/.github/workflows/scorecard-enforcer.yml
  • bindings/deno/.github/workflows/scorecard.yml
  • bindings/deno/.github/workflows/secret-scanner.yml
  • bindings/haskell/.github/workflows/codeql.yml
  • bindings/haskell/.github/workflows/governance.yml
  • bindings/haskell/.github/workflows/hypatia-scan.yml
  • bindings/haskell/.github/workflows/mirror.yml
  • bindings/haskell/.github/workflows/scorecard-enforcer.yml
  • bindings/haskell/.github/workflows/scorecard.yml
  • bindings/haskell/.github/workflows/secret-scanner.yml
  • bindings/rust/.github/workflows/codeql.yml
  • bindings/rust/.github/workflows/governance.yml
  • bindings/rust/.github/workflows/hypatia-scan.yml
  • bindings/rust/.github/workflows/mirror.yml
  • bindings/rust/.github/workflows/scorecard-enforcer.yml
  • bindings/rust/.github/workflows/scorecard.yml
  • bindings/rust/.github/workflows/secret-scanner.yml
  • editors/vscode/.github/workflows/codeql.yml
  • editors/vscode/.github/workflows/governance.yml
  • editors/vscode/.github/workflows/hypatia-scan.yml
  • editors/vscode/.github/workflows/mirror.yml
  • editors/vscode/.github/workflows/scorecard-enforcer.yml
  • editors/vscode/.github/workflows/scorecard.yml
  • editors/vscode/.github/workflows/secret-scanner.yml
  • pandoc/.github/workflows/codeql.yml
  • pandoc/.github/workflows/governance.yml
  • pandoc/.github/workflows/hypatia-scan.yml
  • pandoc/.github/workflows/mirror.yml
  • pandoc/.github/workflows/scorecard-enforcer.yml
  • pandoc/.github/workflows/scorecard.yml
  • pandoc/.github/workflows/secret-scanner.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath merged commit c026c94 into main Sep 19, 2026
23 of 30 checks passed
@hyperpolymath
hyperpolymath deleted the fix/repin-accepted branch September 19, 2026 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant