From 41ee16cd3d0dac3d43bc6be2297855105ff213b8 Mon Sep 17 00:00:00 2001
From: hyperpolymath-ci <ci@hyperpolymath.dev>
Date: Tue, 22 Sep 2026 08:58:19 +0000
Subject: [PATCH] chore(ci): pin standards reusables to lock metadata fix
 (8fd6c91)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Standards PR hyperpolymath/standards#898 added the two missing
'dependencies:' metadata entries in actions.lock
(denoland/setup-deno@22d081f, tailscale/github-action@780049a)
that GitHub's called-workflow validator requires. Without them the
governance wrapper fails at parse time (0 jobs) with:
  governance-reusable.yml references action "denoland/setup-deno@…"
  not present in the lockfile

Repins the four wrappers b1a3b7b → 8fd6c91 (standards#898 merge):
  governance.yml, hypatia-scan.yml, scorecard.yml, secret-scanner.yml
---
 .github/workflows/governance.yml     | 2 +-
 .github/workflows/hypatia-scan.yml   | 2 +-
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/secret-scanner.yml | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index f069dc8..94f87b2 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -30,7 +30,7 @@ permissions:
   contents: read
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8fd6c915c96073c818bfc42089a95936e80f265c
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index 8ad25fd..db72a8f 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -39,5 +39,5 @@ permissions:
   pull-requests: write
 jobs:
   hypatia:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@8fd6c915c96073c818bfc42089a95936e80f265c
     secrets: inherit
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index f701623..ede4582 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -37,4 +37,4 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@8fd6c915c96073c818bfc42089a95936e80f265c
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index 1e5316d..8a45c8e 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -19,7 +19,7 @@ permissions:
   contents: read
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@8fd6c915c96073c818bfc42089a95936e80f265c
     secrets: inherit
     permissions:
       actions: read