ci: converge ci-workflows references on v0.22.2

[kyle-sexton]

No related issue: melodic-software/github-iac#378 tracks the ci-perf program (Phase 6b-ii convergence)

Summary

Converges the remaining melodic-software/ci-workflows reference in this repository on v0.22.2 (5776760254f8b63cba44e896f51604cb755350d9), completing the Phase 6b-ii convergence sweep for cursor-plugins.

Fix

• Moved .github/workflows/ci.yml:251 pr-contract composite from 906ae7ef379ea4d2b8497f64475dce1d3d8715c4 (v0.22.0) to 5776760254f8b63cba44e896f51604cb755350d9 (v0.22.2). Diffed pr-contract/action.yml between the two SHAs (gh api repos/melodic-software/ci-workflows/contents/.github/actions/pr-contract/action.yml?ref=<sha>): byte-identical, so no input was added, removed, or renamed and the caller's with: token: block needed no change.
• Left .github/workflows/ci.yml:259 ci-status composite untouched: already 5776760254f8b63cba44e896f51604cb755350d9 (v0.22.2) from ci: re-pin ci-status to ci-workflows v0.22.2 #34.
• Left .github/workflows/managed-files-guard.yml:61 untouched: the file carries a SYNC-MANAGED FILE header (source of truth is melodic-software/standards), and its pin is already 5776760254f8b63cba44e896f51604cb755350d9 (v0.22.2). Its own comment at lines 56-57 still reads "v0.22.0" despite the pin already being v0.22.2; noting the mismatch for upstream, not fixing it here since the file is standards-managed.
• No .github/actions directory and no .github/standards/runner-policy/policy.json exist in this repository, and no Runner policy step runs in ci.yml, matching the brief's expectation for cursor-plugins. There are no melodic-software/ci-workflows/.github/workflows/... reusable-workflow references anywhere in the repository, so the reusable-workflow rule has no applicable lines.

Verification

grep -rhoE "ci-workflows/[^@ ]+@[0-9a-f]{40}" .github/workflows | sed -E 's/.*@//' | sort | uniq -c:

      3 5776760254f8b63cba44e896f51604cb755350d9

All three references (pr-contract, ci-status, managed-files-guard) are now on v0.22.2; no other SHA remains in the repository.

• actionlint -shellcheck= -pyflakes=: clean, no findings.
• No repository-specific pin test exists for cursor-plugins (no .github/actions, no policy.json, no pin-convention script); bash scripts/test-sync-local.sh is unrelated to this change (sync-local tooling, not CI pins) and was not affected by this diff.
• gh pr checks watched to completion (see PR conversation).
• Title-edit probe: edited the PR title and restored it, then confirmed the resulting contract-only ci-status run logged Carried forward (run id and log excerpt reported alongside this PR).

Related

Refs melodic-software/github-iac#378

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.