From 5b8a443cfc634c20b61edc032875535e48a953f0 Mon Sep 17 00:00:00 2001
From: "melodic-claude-lanes-repin[bot]"
 <315045210+melodic-claude-lanes-repin[bot]@users.noreply.github.com>
Date: Wed, 9 Sep 2026 14:46:02 +0000
Subject: [PATCH] chore(claude-lanes): re-pin callers to ci-workflows v0.24.0

Co-Authored-By: claude-lanes-repin <noreply@github.com>
---
 .github/workflows/claude-review.yml                        | 2 +-
 .github/workflows/standards-sync-stuck-automerge-alert.yml | 2 +-
 .github/workflows/sync.yml                                 | 2 +-
 components/claude-lanes/claude-review.yml                  | 2 +-
 components/claude-lanes/claude-security-review.yml         | 2 +-
 components/managed-files-guard/managed-files-guard.yml     | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 0b226920..4f1f1020 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -63,7 +63,7 @@ jobs:
     concurrency:
       group: claude-review-${{ github.repository }}
       queue: max
-    uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2
+    uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0
     with:
       # DEVIATION from the component, which resolves the runner through the
       # governed selector: this repository is PUBLIC, and runner-policy admits
diff --git a/.github/workflows/standards-sync-stuck-automerge-alert.yml b/.github/workflows/standards-sync-stuck-automerge-alert.yml
index 7b019d0e..6a32800e 100644
--- a/.github/workflows/standards-sync-stuck-automerge-alert.yml
+++ b/.github/workflows/standards-sync-stuck-automerge-alert.yml
@@ -61,7 +61,7 @@ concurrency:
 
 jobs:
   alert:
-    uses: melodic-software/ci-workflows/.github/workflows/standards-sync-stuck-automerge-alert.yml@0f8176e87e0be518f382664779655011bf95784a # v0.17.2
+    uses: melodic-software/ci-workflows/.github/workflows/standards-sync-stuck-automerge-alert.yml@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0
     with:
       runner: ubuntu-24.04
       # Bare name under this repository's own owner — `owner/repo` is rejected
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 12da8a60..819d3507 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -30,7 +30,7 @@ jobs:
   sync:
     # Real runs attest App access for the complete unfiltered manifest before
     # mutation; `targets` limits reconciliation only, never attestation.
-    uses: melodic-software/ci-workflows/.github/workflows/standards-sync.yml@0f8176e87e0be518f382664779655011bf95784a # v0.17.2
+    uses: melodic-software/ci-workflows/.github/workflows/standards-sync.yml@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0
     with:
       runner: ubuntu-24.04
       # Schedule and push run for real (inputs is empty on those events, so
diff --git a/components/claude-lanes/claude-review.yml b/components/claude-lanes/claude-review.yml
index 52c2b60c..7e13b2a0 100644
--- a/components/claude-lanes/claude-review.yml
+++ b/components/claude-lanes/claude-review.yml
@@ -101,7 +101,7 @@ jobs:
     concurrency:
       group: claude-review-${{ github.repository }}
       queue: max
-    uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2
+    uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0
     with:
       runner: melodic-review-ubuntu-24.04-x64
       # Empty on a pull_request event, where the payload supplies the number
diff --git a/components/claude-lanes/claude-security-review.yml b/components/claude-lanes/claude-security-review.yml
index d8a9ba5d..957d4faf 100644
--- a/components/claude-lanes/claude-security-review.yml
+++ b/components/claude-lanes/claude-security-review.yml
@@ -85,7 +85,7 @@ jobs:
     concurrency:
       group: claude-security-review-${{ github.event.pull_request.number || github.run_id }}
       cancel-in-progress: false
-    uses: melodic-software/ci-workflows/.github/workflows/claude-security-review.yml@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2
+    uses: melodic-software/ci-workflows/.github/workflows/claude-security-review.yml@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0
     with:
       runner: melodic-review-ubuntu-24.04-x64
       paths-file: .github/claude-security-paths
diff --git a/components/managed-files-guard/managed-files-guard.yml b/components/managed-files-guard/managed-files-guard.yml
index 589e6b30..3fe74e41 100644
--- a/components/managed-files-guard/managed-files-guard.yml
+++ b/components/managed-files-guard/managed-files-guard.yml
@@ -57,7 +57,7 @@ jobs:
         # now contains that commit, so the pin-comment takes the convention's
         # release-tag form rather than the short-SHA fallback
         # (components/managed-files-guard/README.md).
-        uses: melodic-software/ci-workflows/.github/actions/managed-files-guard@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2
+        uses: melodic-software/ci-workflows/.github/actions/managed-files-guard@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0
         with:
           # `main` for the soak, per the action's own input contract ("Pin to
           # a full SHA in callers once soak completes"): the guard must read