build(deps)+ci: hash-pin the CI scanner toolchain via PEP 735 groups - #63

Merged

wshallwshall merged 7 commits into

mainfrom

Jul 30, 2026

Commits on Jul 30, 2026

build(deps): declare the CI toolchain as PEP 735 dependency groups + two hashed exports
wshallwshall
committed
319661c
fix(security): the anti-slopsquat gate could not see [dependency-groups]
wshallwshall
committed
78f3cf1
ci(security): install the CI toolchain hash-pinned, and teach the guards that see it
wshallwshall
committed
553018a
docs(adr): amend 0034 -- section 3's convergence target is built; name every residual
wshallwshall
committed
7a340c7
test(pins): close seven guard holes the toolchain move opened
wshallwshall
committed
f1c2e72
docs(pins): correct four claims this change shipped that are not true
wshallwshall
committed
6990783
Merge branch 'main' into pins
wshallwshall
authored
4230ac7