Skip to content

chore(ci): re-point standards reusable-workflow pins to 11ba299dca22 - #36

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/re-point-standards-workflow-pins
Oct 2, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
chore/re-point-standards-workflow-pins

Conversation

@hyperpolymath

Copy link
Copy Markdown
Contributor

Opened by the standards pin applier (scripts/apply-workflow-pins-remote.sh).

Re-points this repository's pinned references to hyperpolymath/standards reusable
workflows at 11ba299dca221b6d4e970eeb58dd17ccbb825a9a, which is proven reachable from standards main.

Co-Authored-By: Claude Opus 5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01HfgwLCdKNd5iZVo6VTiSim

🤖 Generated with Claude Code

https://claude.ai/code/session_01HfgwLCdKNd5iZVo6VTiSim

Opened by the standards pin applier (scripts/apply-workflow-pins-remote.sh).

Re-points this repository's pinned references to hyperpolymath/standards reusable
workflows at 11ba299dca221b6d4e970eeb58dd17ccbb825a9a, which is proven reachable from standards main.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HfgwLCdKNd5iZVo6VTiSim
@coderabbitai

coderabbitai Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 4e09b2e5-7e18-46d7-b76a-d451aae04cca

📥 Commits

Reviewing files that changed from the base of the PR and between 787507e and 8be015d.

📒 Files selected for processing (5)
  • .github/workflows/governance.yml
  • .github/workflows/hypatia-scan.yml
  • .github/workflows/mirror.yml
  • .github/workflows/scorecard.yml
  • .github/workflows/secret-scanner.yml
 ___________________________________________________________________
< Your PR title says 'refactor'. My diff viewer says 'crime scene'. >
 -------------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath merged commit 143c8c6 into main Oct 2, 2026
41 of 50 checks passed
@hyperpolymath
hyperpolymath deleted the chore/re-point-standards-workflow-pins branch October 2, 2026 01:16
hyperpolymath added a commit to hyperpolymath/standards that referenced this pull request Oct 2, 2026
Until now, `scripts/apply-workflow-pins-remote.sh --fix` could not land
a commit on any repo. That covers both the scheduled
`apply-workflow-pins.yml` job and manual runs. A live canary on
`metadatastician/_pathroot` found two defects:

1. **`createCommitOnBranch` input passed as a string.** `-F
input=<json>` makes gh send a JSON *string*, and GitHub rejects it:
`Variable $input of type CreateCommitOnBranchInput! was provided invalid
value`. The new `commit_payload` builds the whole request body with
`jq`, and it is sent with `gh api graphql --input -`. The returned oid
must be 40 hex characters.
2. **A 404 was read as "the branch exists".** On a 404, `gh api
…/git/ref/heads/<b> --jq .object.sha` prints the error body on stdout.
The applier took that as the branch's head and never created the branch.
Now only a 40-hex SHA counts.

If the commit fails, the applier now deletes the branch it just created.

**Evidence**
- `--self-test`: all controls pass, including the new `commit_payload
sends input as an object` control.
- Mutant check: a valid mutant that sends `input` as a string (`|
.variables.input |= tojson`) is caught by that control.
- Live run of this branch: `--fix --only metadatastician/_pathroot`
opened metadatastician/_pathroot#36. Its commit is GitHub-Verified and
changes only the 5 standards pins.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_016L7GFo3yGQ2vK9YgKL2wsP

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant