From 3b8b1935f6251b7e4bab6a8a620f5fe7ba6f4e2e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?=
 <207100624+BLCCoreStudio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 22:46:49 +0300
Subject: [PATCH 1/5] fix: resolve pinned action refs to matching release

---
 action-entrypoint.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/action-entrypoint.sh b/action-entrypoint.sh
index 375cd10..73fd3e7 100644
--- a/action-entrypoint.sh
+++ b/action-entrypoint.sh
@@ -1,7 +1,6 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-readonly AGENTCONTEXT_FALLBACK_TAG="v0.1.0"
 readonly AGENTCONTEXT_ASSET="agentcontext-linux-x86_64"
 
 action_ref="${AGENTCONTEXT_ACTION_REF:-}"
@@ -18,7 +17,13 @@ if [[ -z "$action_ref" ]]; then
 elif [[ "$action_ref" =~ ^v[0-9]+(\.[0-9]+){0,2}(-[0-9A-Za-z.-]+)?$ ]]; then
   AGENTCONTEXT_TAG="$action_ref"
 else
-  AGENTCONTEXT_TAG="$AGENTCONTEXT_FALLBACK_TAG"
+  [[ -n "${GITHUB_ACTION_PATH:-}" ]] \
+    || { printf 'AgentContextMap Action: cannot resolve a non-tag Action ref without GITHUB_ACTION_PATH.\n' >&2; exit 1; }
+  action_version="$(sed -n 's/^version = "\([0-9][0-9.]*\)"/\1/p' "${GITHUB_ACTION_PATH}/Cargo.toml" | head -n1)"
+  [[ "$action_version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] \
+    || { printf 'AgentContextMap Action: could not resolve the release version from Cargo.toml.\n' >&2; exit 1; }
+  AGENTCONTEXT_TAG="v${action_version}"
+  printf 'AgentContextMap Action: resolved ref %s to release %s.\n' "$action_ref" "$AGENTCONTEXT_TAG"
 fi
 
 fail() {

From 7d291a4eda1570d20374ecbe452c6e83f3904b0c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?=
 <207100624+BLCCoreStudio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 22:47:02 +0300
Subject: [PATCH 2/5] fix: dogfood current build in code scanning

---
 .github/workflows/code-scanning.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/code-scanning.yml b/.github/workflows/code-scanning.yml
index 1ce2e14..3f4fd2e 100644
--- a/.github/workflows/code-scanning.yml
+++ b/.github/workflows/code-scanning.yml
@@ -21,9 +21,17 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master
+        with:
+          toolchain: stable
+
+      - name: Build current AgentContextMap
+        run: cargo build --release --locked
+
       - name: Generate AgentContextMap SARIF
         id: agentcontext
-        uses: BLCCoreStudio/AgentContextMap@866757c427415040f9697d582c10e17b060e3415 # v0.2.0
+        uses: ./
         with:
           path: .
           sarif: agentcontext.sarif

From c37640b4d6aded69ded426117fdbf05fcc45ef6d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?=
 <207100624+BLCCoreStudio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 22:47:11 +0300
Subject: [PATCH 3/5] chore: bump AgentContextMap to v0.2.3

---
 Cargo.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Cargo.toml b/Cargo.toml
index 5641346..b912bc8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "agentcontextmap"
-version = "0.2.2"
+version = "0.2.3"
 edition = "2021"
 rust-version = "1.74"
 description = "Map repository instructions that can affect coding agents."

From 7b58993f512ed3307a81e4865d206261d839694f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?=
 <207100624+BLCCoreStudio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 22:47:21 +0300
Subject: [PATCH 4/5] chore: sync lockfile for v0.2.3

---
 Cargo.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Cargo.lock b/Cargo.lock
index 1862f53..3de006a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4,4 +4,4 @@ version = 4
 
 [[package]]
 name = "agentcontextmap"
-version = "0.2.2"
+version = "0.2.3"

From d6443eaa7f9dd6e373f795fad3b0c7b2068a3e5a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?=
 <207100624+BLCCoreStudio@users.noreply.github.com>
Date: Sun, 30 Aug 2026 22:47:36 +0300
Subject: [PATCH 5/5] test: cover v0.2.3 action wrapper

---
 .github/workflows/action-smoke.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/action-smoke.yml b/.github/workflows/action-smoke.yml
index d0c57d4..a4b0562 100644
--- a/.github/workflows/action-smoke.yml
+++ b/.github/workflows/action-smoke.yml
@@ -32,7 +32,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          test "$(./target/release/agentcontext --version)" = "agentcontext 0.2.2"
+          test "$(./target/release/agentcontext --version)" = "agentcontext 0.2.3"
 
       - name: Create instruction fixture
         shell: bash