Skip to content

Commit fa36a84

Browse files
hyperpolymathclaude
hyperpolymath
and
claude
authored
chore(ci): generate actions.lock ahead of the 2026-10-01 lock gate (#217)
## Summary - Adds `.github/workflows/actions.lock`. It was generated by `gh actions-lock --no-narrow` v0.1.6 from the refs already SHA-pinned here, so no `uses:` line changes. - Moves the tool's banner to line 2 in each workflow, keeping SPDX on line 1. ## Why From 2026-10-01 the governance "Actions lockfile verify" gate fails any repo that lacks a lockfile. Changing the date on standards `main` would not help, because this repo pins the reusable workflow by SHA. ## Verification - The gate script at the pinned standards SHA passes with `LOCK_TODAY=2026-10-01`. - This PR's own runs are the runtime test. Every workflow must create jobs, with no `startup_failure`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_019aa9y32JcBuZ85KXe2jb8R Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
1 parent d0704af commit fa36a84

15 files changed

Lines changed: 94 additions & 0 deletions

‎.github/workflows/actions.lock‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
# This file is machine-generated by `gh actions-lock`.
2+
# Do not edit by hand; run `gh actions-lock` to update.
3+
# Docs: https://gh.io/actions-lockfile
4+
version: 'v0.0.2'
5+
workflows:
6+
'.github/workflows/boj-build.yml':
7+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
8+
'.github/workflows/casket-pages.yml':
9+
- 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
10+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
11+
- 'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d'
12+
- 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128'
13+
- 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9'
14+
- 'haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553'
15+
'.github/workflows/codeql.yml':
16+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
17+
- 'github/codeql-action@7188fc363630916deb702c7fdcf4e481b751f97a'
18+
'.github/workflows/dogfood-gate.yml':
19+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
20+
'.github/workflows/instant-sync.yml':
21+
- 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697'
22+
'.github/workflows/pages.yml':
23+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
24+
- 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128'
25+
- 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9'
26+
'.github/workflows/push-email-notify.yml':
27+
- 'hyperpolymath/smtp-notify-action@ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
28+
dependencies:
29+
'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
30+
ref: 'v6.1.0'
31+
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
32+
owner_id: 44036562
33+
repo_id: 215566462
34+
'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
35+
ref: 'v7.0.1'
36+
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
37+
owner_id: 44036562
38+
repo_id: 197814629
39+
'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d':
40+
ref: 'v6.0.0'
41+
commit: 'sha1-45bfe0192ca1faeb007ade9deae92b16b8254a0d'
42+
owner_id: 44036562
43+
repo_id: 513659658
44+
'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128':
45+
ref: 'v5.0.0'
46+
commit: 'sha1-cd2ce8fcbc39b97be8ca5fce6e763baed58fa128'
47+
owner_id: 44036562
48+
repo_id: 438112499
49+
'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
50+
ref: 'v7.0.0'
51+
commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
52+
owner_id: 44036562
53+
repo_id: 192625955
54+
'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9':
55+
ref: 'v5.0.0'
56+
commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9'
57+
owner_id: 44036562
58+
repo_id: 496012378
59+
uses:
60+
- 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
61+
'github/codeql-action@7188fc363630916deb702c7fdcf4e481b751f97a':
62+
ref: 'v4.37.1'
63+
commit: 'sha1-7188fc363630916deb702c7fdcf4e481b751f97a'
64+
owner_id: 9919
65+
repo_id: 259445878
66+
'haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553':
67+
ref: 'v2.11.0'
68+
commit: 'sha1-cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553'
69+
owner_id: 75048950
70+
repo_id: 623796603
71+
'hyperpolymath/smtp-notify-action@ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7':
72+
ref: 'v0.2.0'
73+
commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
74+
owner_id: 6759885
75+
repo_id: 1352485172
76+
'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697':
77+
ref: 'v4.0.1'
78+
commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
79+
owner_id: 18365890
80+
repo_id: 220359305

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: BoJ Server Build Trigger
34
on:
45
push:

‎.github/workflows/casket-pages.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: GitHub Pages
34
on:
45
push:

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: CodeQL Security Analysis
34
on:
45
push:

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
34
#
45
# dogfood-gate.yml — Hyperpolymath Dogfooding Quality Gate

‎.github/workflows/governance.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# governance.yml — single wrapper calling the shared estate governance bundle
34
# in hyperpolymath/standards instead of carrying per-repo copies.
45
#

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Thin wrapper around hyperpolymath/standards hypatia-scan-reusable.yml.
34
# See standards#191 for the reusable's purpose and design.
45

‎.github/workflows/instant-sync.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Instant Forge Sync - Triggers propagation to all forges on push/release
34
name: Instant Sync
45
on:

‎.github/workflows/label-triage.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: Label Triage
34

45
# Classify newly-filed issues against the estate label taxonomy.

‎.github/workflows/labels.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: Labels
34

45
# Applies the canonical estate label set from .github/labels.json.

0 commit comments

Comments
 (0)