From 32aac7439d4134b9d36e48c73f1a6c9584913580 Mon Sep 17 00:00:00 2001 From: hyperpolymath Date: Sun, 20 Sep 2026 02:08:19 +0000 Subject: [PATCH] fix(ci): key action refs already used by the workflows + actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 + actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c + actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 + dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 + erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124 + github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63 + goto-bus-stop/setup-zig@abea47f85e598557f500fa1fd2ab7464fcb39406 + hyperpolymath/a2ml-ecosystem@aa4b836bd969df2bc58128cb8e3d20bbc88d5e79 + hyperpolymath/k9-ecosystem@89f3c2702f4f650a92aa7411502f38da06abd562 + hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be + julia-actions/setup-julia@4c0cb0fce8556fdb04a90347310e5db8b1f98fb9 ... (2 more) Every SHA-pinned `uses:` ref in .github/workflows/ is now present in .github/workflows/actions.lock. Entry format matches gh actions-lock v0.0.2 (ref/commit/owner_id/repo_id); entries reuse the estate SSOT (hyperpolymath/standards) lock where the same ref is keyed there, owner/repo ids otherwise resolved from the GitHub API. No workflow files changed. Verified: validate-actions-lock.sh -> exit 0 (was: 16 missing ref(s)). --- .github/workflows/actions.lock | 114 +++++++++++++++++++++++++++++++++ 1 file changed, 114 insertions(+) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 6c17188..368f9d1 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -41,41 +41,86 @@ workflows: - 'actions/upload-artifact@v4.6.2' - 'erlef/setup-beam@v1.20.4' dependencies: + 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + + 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0': + ref: '9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' + commit: 'sha1-9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' + owner_id: 44036562 + repo_id: 197814629 + 'actions/checkout@v4.3.1': ref: 'v4.3.1' commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5' owner_id: 44036562 repo_id: 197814629 + 'actions/checkout@v6.0.2': ref: 'v6.0.2' commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd' owner_id: 44036562 repo_id: 197814629 + 'actions/checkout@v7.0.0': ref: 'v7.0.0' commit: 'sha1-9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' owner_id: 44036562 repo_id: 197814629 + + 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346': + ref: '368f82528645a54fb793d4d04e342629a3f51346' + commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' + owner_id: 44036562 + repo_id: 438112499 + 'actions/deploy-pages@v4.0.5': ref: 'v4.0.5' commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e' owner_id: 44036562 repo_id: 438112499 + + 'actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c': + ref: 'v8.0.1' + commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c' + owner_id: 44036562 + repo_id: 192626254 + 'actions/download-artifact@v4.1.8': ref: 'v4.1.8' commit: 'sha1-fa0a91b85d4f404e444e00e005971372dc801d16' owner_id: 44036562 repo_id: 192626254 + + 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': + ref: '043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + owner_id: 44036562 + repo_id: 192625955 + 'actions/upload-artifact@v4': ref: 'v4' commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02' owner_id: 44036562 repo_id: 192625955 + 'actions/upload-artifact@v4.6.2': ref: 'v4.6.2' commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02' owner_id: 44036562 repo_id: 192625955 + + 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9': + ref: 'fc324d3547104276b827a68afc52ff2a11cc49c9' + commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9' + owner_id: 44036562 + repo_id: 496012378 + uses: + - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' + 'actions/upload-pages-artifact@v3.0.1': ref: 'v3.0.1' commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa' @@ -83,46 +128,115 @@ dependencies: repo_id: 496012378 uses: - 'actions/upload-artifact@v4' + + 'dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98': + ref: '25dd0e34f4fe68f24cc83900b1fe3fe149efef98' + commit: 'sha1-25dd0e34f4fe68f24cc83900b1fe3fe149efef98' + owner_id: 27347476 + repo_id: 371068214 + 'dependabot/fetch-metadata@v2.2.0': ref: 'v2.2.0' commit: 'sha1-dbb049abf0d677abbd7f7eee0375145b417fdd34' owner_id: 27347476 repo_id: 371068214 + + 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': + ref: '54075bcc5e249e4758d363f27d099f55d843f124' + commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' + owner_id: 47606891 + repo_id: 331103973 + 'erlef/setup-beam@v1.20.4': ref: 'v1.20.4' commit: 'sha1-e6d7c94229049569db56a7ad5a540c051a010af9' owner_id: 47606891 repo_id: 331103973 + + 'github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63': + ref: 'b96794f015dfd88f77b49b1c93e0fa7110f94c63' + commit: 'sha1-b96794f015dfd88f77b49b1c93e0fa7110f94c63' + owner_id: 9919 + repo_id: 259445878 + 'github/codeql-action@v4.34.0': ref: 'v4.34.0' commit: 'sha1-c6f931105cb2c34c8f901cc885ba1e2e259cf745' owner_id: 9919 repo_id: 259445878 + + 'goto-bus-stop/setup-zig@abea47f85e598557f500fa1fd2ab7464fcb39406': + ref: 'v2.2.1' + commit: 'sha1-abea47f85e598557f500fa1fd2ab7464fcb39406' + owner_id: 1006268 + repo_id: 212984112 + 'goto-bus-stop/setup-zig@v2.2.1': ref: 'v2.2.1' commit: 'sha1-abea47f85e598557f500fa1fd2ab7464fcb39406' owner_id: 1006268 repo_id: 212984112 + + 'hyperpolymath/a2ml-ecosystem@aa4b836bd969df2bc58128cb8e3d20bbc88d5e79': + ref: 'aa4b836bd969df2bc58128cb8e3d20bbc88d5e79' + commit: 'sha1-aa4b836bd969df2bc58128cb8e3d20bbc88d5e79' + owner_id: 6759885 + repo_id: 1275649586 + 'hyperpolymath/deed-ecosystem@main': ref: 'main' commit: 'sha1-f7a40a4d5cc82b2e73f861119baa6818d77a448d' owner_id: 6759885 repo_id: 1275649586 + + 'hyperpolymath/k9-ecosystem@89f3c2702f4f650a92aa7411502f38da06abd562': + ref: '89f3c2702f4f650a92aa7411502f38da06abd562' + commit: 'sha1-89f3c2702f4f650a92aa7411502f38da06abd562' + owner_id: 6759885 + repo_id: 1275650185 + + 'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be': + ref: '22e7bdb322c430c1d0dac6b3bb307f4bb139d0be' + commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be' + owner_id: 6759885 + repo_id: 1352485172 + 'hyperpolymath/smtp-notify-action@v0.2.0': ref: 'v0.2.0' commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7' owner_id: 6759885 repo_id: 1352485172 + + 'julia-actions/setup-julia@4c0cb0fce8556fdb04a90347310e5db8b1f98fb9': + ref: '4c0cb0fce8556fdb04a90347310e5db8b1f98fb9' + commit: 'sha1-4c0cb0fce8556fdb04a90347310e5db8b1f98fb9' + owner_id: 53965732 + repo_id: 202020219 + 'julia-actions/setup-julia@v2.7.0': ref: 'v2.7.0' commit: 'sha1-4c0cb0fce8556fdb04a90347310e5db8b1f98fb9' owner_id: 53965732 repo_id: 202020219 + + 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697': + ref: 'v4.0.1' + commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' + owner_id: 18365890 + repo_id: 220359305 + 'peter-evans/repository-dispatch@v4.0.1': ref: 'v4.0.1' commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' owner_id: 18365890 repo_id: 220359305 + + 'softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64': + ref: 'efb35369e0ad2afab669f228072c1b0d510eae64' + commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' + owner_id: 2242 + repo_id: 204253808 + 'softprops/action-gh-release@v2.5.0': ref: 'v2.5.0' commit: 'sha1-a06a81a03ee405af7f2048a818ed3f03bbf83c7b'