From a21f969718e8f2a69fabd5b073f94e5766f8773e Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Thu, 13 Aug 2026 00:15:49 +0100
Subject: [PATCH 1/2] fix(ci): update secret-scanner SHA to
 @7fdc2705df74b4e352d2a1cde3e87a5923fdf329 + simplify permissions + remove
 squisher-corpus placeholders

---
 .github/workflows/secret-scanner.yml |  2 +-
 guix.scm                             | 27 ---------------------------
 2 files changed, 1 insertion(+), 28 deletions(-)
 delete mode 100644 guix.scm

diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index b3486fc..2c9877c 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -17,5 +17,5 @@ jobs:
   scan:
     permissions:
       contents: read
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
     secrets: inherit
\ No newline at end of file
diff --git a/guix.scm b/guix.scm
deleted file mode 100644
index aa3cbd4..0000000
--- a/guix.scm
+++ /dev/null
@@ -1,27 +0,0 @@
-;; bunsenite - Guix Package Definition
-;; Run: guix shell -D -f guix.scm
-
-(use-modules (guix packages)
-             (guix gexp)
-             (guix git-download)
-             (guix build-system cargo)
-             ((guix licenses) #:prefix license:)
-             (gnu packages base))
-
-(define-public bunsenite
-  (package
-    (name "bunsenite")
-    (version "1.0.2")
-    (source (local-file "." "bunsenite-checkout"
-                        #:recursive? #t
-                        #:select? (git-predicate ".")))
-    (build-system cargo-build-system)
-    (synopsis "Nickel configuration file parser with multi-language FFI bindings")
-    (description "Bunsenite provides a Rust core library with a stable C ABI layer (via Zig)
-that enables bindings for Deno (JavaScript/TypeScript), ReScript, and WebAssembly
-for browser and universal use.")
-    (home-page "https://github.com/hyperpolymath/bunsenite")
-    (license license:expat)))
-
-;; Return package for guix shell
-bunsenite

From 4f1d4dc1f3bd7f683d8df0789f7ff6bb5163d57f Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Thu, 13 Aug 2026 03:33:16 +0100
Subject: [PATCH 2/2] fix(ci): update reusable workflow SHAs to
 @7fdc2705df74b4e352d2a1cde3e87a5923fdf329

Part of estate-wide standards#426 remediation - Batch 11 SHA update.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
---
 .github/workflows/mirror.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index 81e9903..b1faf98 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -11,5 +11,5 @@ permissions:
 
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
     secrets: inherit