From d27c71c447ae582658d78747d88d888e0a8230ec Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 12 Nov 2026 02:16:06 +0000 Subject: [PATCH] fix(ci): sync actions.lock with the Dependabot bumps from #9 Dependabot bumped 3 action refs in the workflow YAML but did not update actions.lock, so Lock Sync Gate failed on the mismatch. Re-pinned each bumped ref to the commit its tag points to (peeled commit for annotated tags), from git ls-remote: - actions/upload-artifact v7.0.2 cf430e0 - actions/download-artifact v8.0.2 9000827 - haskell-actions/setup v2.12.1 0f8e8c9 (annotated tag; peeled commit) Verified: ./scripts/check-lock-sync.sh exits 0. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_0136P7ZohGxQnA5cbBZyi8Wp --- .github/workflows/actions.lock | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index da9ccec..dfb8a14 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -60,7 +60,7 @@ workflows: - 'actions/configure-pages@v6.0.0' - 'actions/deploy-pages@v5.0.1' - 'actions/upload-pages-artifact@v5.0.0' - - 'haskell-actions/setup@v2.12.0' + - 'haskell-actions/setup@v2.12.1' '.github/workflows/push-email-notify.yml': - 'hyperpolymath/smtp-notify-action@v0.5.1' '.github/workflows/quality.yml': @@ -69,7 +69,7 @@ workflows: '.github/workflows/release.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' - 'softprops/action-gh-release@v3.0.3' '.github/workflows/rsr-compliance-canary.yml': - 'actions/checkout@v7.0.1' @@ -88,8 +88,8 @@ workflows: - 'sonarsource/sonarqube-scan-action@v8.4.1' '.github/workflows/static-analysis-gate.yml': - 'actions/checkout@v7.0.1' - - 'actions/download-artifact@v8.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/upload-artifact@v7.0.2' - 'erlef/setup-beam@v1.24.1' '.github/workflows/workflow-linter.yml': - 'actions/checkout@v7.0.1' @@ -137,9 +137,9 @@ dependencies: commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 - 'actions/download-artifact@v8.0.1': - ref: 'v8.0.1' - commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c' + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' owner_id: 44036562 repo_id: 192626254 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': @@ -152,9 +152,9 @@ dependencies: commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' owner_id: 44036562 repo_id: 192625955 - 'actions/upload-artifact@v7.0.1': - ref: 'v7.0.1' - commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' owner_id: 44036562 repo_id: 192625955 'actions/upload-pages-artifact@v5.0.0': @@ -209,9 +209,9 @@ dependencies: commit: 'sha1-abea47f85e598557f500fa1fd2ab7464fcb39406' owner_id: 1006268 repo_id: 212984112 - 'haskell-actions/setup@v2.12.0': - ref: 'v2.12.0' - commit: 'sha1-6037f33647c3f17758a2356c80fc4a53d7e0685d' + 'haskell-actions/setup@v2.12.1': + ref: 'v2.12.1' + commit: 'sha1-0f8e8c99d88aeb3fbfd523f1ef2c6f762d10d64d' owner_id: 75048950 repo_id: 623796603 'hyperpolymath/cicd-suite@0da816c05ae7486671d863e07935f93981c0c2d5':