ci: converge ci-workflows references on v0.22.2

[kyle-sexton]

No related issue: melodic-software/github-iac#378 tracks the ci-perf program (Phase 6b-ii convergence)

Summary

Moves every remaining melodic-software/ci-workflows/... reference this repository owns to v0.22.2 (5776760254f8b63cba44e896f51604cb755350d9), completing Phase 6b-ii convergence for melodic-software/.github.

This repository has no synced .github/standards/runner-policy/policy.json and runs no Runner policy step, so per the convergence rule every reusable was moved after diffing its on.workflow_call contract (and every composite after diffing its action.yml) between the old SHA and the new one, rather than gating on a policy-approved contract.

Fix

Diffed every distinct path's contract between 906ae7ef379ea4d2b8497f64475dce1d3d8715c4 (v0.22.0) and 5776760254f8b63cba44e896f51604cb755350d9 (v0.22.2) via gh api "repos/melodic-software/ci-workflows/contents/<path>?ref=<sha>" --jq .content | base64 -d. No diffs were found for any of the ten paths, so no caller inputs, secrets, or permissions required adjustment.

Moved (in .github/workflows/ci.yml, 14 pin sites across 10 composite paths, and .github/workflows/link-check.yml, 1 reusable pin):

• .github/actions/markdown
• .github/actions/typos
• .github/actions/editorconfig
• .github/actions/gitleaks
• .github/actions/lychee-offline
• .github/actions/actionlint
• .github/actions/check-jsonschema (5 call sites)
• .github/actions/shellcheck
• .github/actions/eol-renormalize
• .github/actions/pr-contract
• .github/workflows/link-check.yml

Left untouched, both already at v0.22.2 before this change:

• .github/actions/ci-status caller in ci.yml (re-pinned in ci: re-pin ci-status to ci-workflows v0.22.2 #120)
• .github/actions/managed-files-guard caller in .github/workflows/managed-files-guard.yml (SYNC-MANAGED file; the standards sync owns this pin, not this PR)

Verification

$ grep -rhoE "ci-workflows/[^@ ]+@[0-9a-f]{40}" .github/workflows .github/actions | sed -E 's/.*@//' | sort | uniq -c
     17 5776760254f8b63cba44e896f51604cb755350d9

All 17 references in this repository are now at v0.22.2; there are no other SHAs to explain.

• actionlint -shellcheck= -pyflakes=: clean, no findings.
• No Runner policy step exists in this repository (no synced policy.json); not applicable.
• No repository-specific pin tests are declared for .github in the convergence brief.

Related

Refs melodic-software/github-iac#378

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.