Skip to content

Commit edc0408

Browse files
hyperpolymathclaude
hyperpolymath
and
claude
committed
chore(ci): generate actions.lock ahead of the 2026-10-01 lock gate
The governance "Actions lockfile verify" gate requires .github/workflows/actions.lock from 2026-10-01. Every ref here is already SHA-pinned; `gh actions-lock --no-narrow` (v0.1.6) records those same SHAs and their transitive composite deps, with no ref rewritten. The tool's "managed by gh actions-lock" banner is placed on line 2 so SPDX stays on line 1. Verified locally: the gate script at the pinned standards SHA passes with LOCK_TODAY=2026-10-01. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019aa9y32JcBuZ85KXe2jb8R
1 parent 56f45c5 commit edc0408

18 files changed

Lines changed: 179 additions & 0 deletions

‎.github/workflows/actions.lock‎

Lines changed: 162 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,162 @@
1+
# This file is machine-generated by `gh actions-lock`.
2+
# Do not edit by hand; run `gh actions-lock` to update.
3+
# Docs: https://gh.io/actions-lockfile
4+
version: 'v0.0.2'
5+
workflows:
6+
'.github/workflows/boj-build.yml':
7+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
8+
'.github/workflows/casket-pages.yml':
9+
- 'actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7'
10+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
11+
- 'actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b'
12+
- 'actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
13+
- 'actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b'
14+
- 'haskell-actions/setup@f9150cb1d140e9a9271700670baa38991e6fa25c'
15+
'.github/workflows/cflite_batch.yml':
16+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
17+
- 'github/codeql-action@c6f931105cb2c34c8f901cc885ba1e2e259cf745'
18+
- 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1'
19+
'.github/workflows/cflite_pr.yml':
20+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
21+
- 'github/codeql-action@c6f931105cb2c34c8f901cc885ba1e2e259cf745'
22+
- 'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1'
23+
'.github/workflows/codeql.yml':
24+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
25+
- 'github/codeql-action@c6f931105cb2c34c8f901cc885ba1e2e259cf745'
26+
'.github/workflows/dogfood-gate.yml':
27+
- 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5'
28+
- 'hyperpolymath/deed-ecosystem@aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
29+
- 'hyperpolymath/k9-ecosystem@89f3c2702f4f650a92aa7411502f38da06abd562'
30+
'.github/workflows/hypatia-scan.yml':
31+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
32+
- 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd'
33+
- 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02'
34+
- 'erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93'
35+
- 'github/codeql-action@0d579ffd059c29b07949a3cce3983f0780820c98'
36+
'.github/workflows/instant-sync.yml':
37+
- 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697'
38+
'.github/workflows/mirror.yml':
39+
- 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd'
40+
- 'dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9'
41+
- 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555'
42+
'.github/workflows/pages.yml':
43+
- 'actions/checkout@11d5960a326750d5838078e36cf38b85af677262'
44+
- 'actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
45+
- 'actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa'
46+
'.github/workflows/push-email-notify.yml':
47+
- 'hyperpolymath/smtp-notify-action@ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
48+
dependencies:
49+
'actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7':
50+
ref: 'v5.0.4'
51+
commit: 'sha1-668228422ae6a00e4ad889ee87cd7109ec5666a7'
52+
owner_id: 44036562
53+
repo_id: 215566462
54+
'actions/checkout@11d5960a326750d5838078e36cf38b85af677262':
55+
ref: 'v4.4.0'
56+
commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
57+
owner_id: 44036562
58+
repo_id: 197814629
59+
'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5':
60+
ref: 'v4.3.1'
61+
commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5'
62+
owner_id: 44036562
63+
repo_id: 197814629
64+
'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd':
65+
ref: 'v6.0.2'
66+
commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd'
67+
owner_id: 44036562
68+
repo_id: 197814629
69+
'actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b':
70+
ref: 'v5.0.0'
71+
commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b'
72+
owner_id: 44036562
73+
repo_id: 513659658
74+
'actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e':
75+
ref: 'v4.0.5'
76+
commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
77+
owner_id: 44036562
78+
repo_id: 438112499
79+
'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd':
80+
ref: 'v8.0.0'
81+
commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
82+
owner_id: 44036562
83+
repo_id: 205262760
84+
'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02':
85+
ref: 'v4.6.2'
86+
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
87+
owner_id: 44036562
88+
repo_id: 192625955
89+
'actions/upload-artifact@v4':
90+
ref: 'v4'
91+
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
92+
owner_id: 44036562
93+
repo_id: 192625955
94+
'actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa':
95+
ref: 'v3.0.1'
96+
commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
97+
owner_id: 44036562
98+
repo_id: 496012378
99+
uses:
100+
- 'actions/upload-artifact@v4'
101+
'actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b':
102+
ref: 'v4.0.0'
103+
commit: 'sha1-7b1f4a764d45c48632c6b24a0339c27f5614fb0b'
104+
owner_id: 44036562
105+
repo_id: 496012378
106+
uses:
107+
- 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02'
108+
'dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9':
109+
ref: 'master'
110+
commit: 'sha1-efa25f7f19611383d5b0ccf2d1c8914531636bf9'
111+
owner_id: 1940490
112+
repo_id: 260749683
113+
'erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93':
114+
ref: 'v1.24.0'
115+
commit: 'sha1-fc68ffb90438ef2936bbb3251622353b3dcb2f93'
116+
owner_id: 47606891
117+
repo_id: 331103973
118+
'github/codeql-action@0d579ffd059c29b07949a3cce3983f0780820c98':
119+
ref: 'v4.32.6'
120+
commit: 'sha1-0d579ffd059c29b07949a3cce3983f0780820c98'
121+
owner_id: 9919
122+
repo_id: 259445878
123+
'github/codeql-action@c6f931105cb2c34c8f901cc885ba1e2e259cf745':
124+
ref: 'v4.34.0'
125+
commit: 'sha1-c6f931105cb2c34c8f901cc885ba1e2e259cf745'
126+
owner_id: 9919
127+
repo_id: 259445878
128+
'google/clusterfuzzlite@884713a6c30a92e5e8544c39945cd7cb630abcd1':
129+
ref: 'v1'
130+
commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1'
131+
owner_id: 1342004
132+
repo_id: 400046858
133+
'haskell-actions/setup@f9150cb1d140e9a9271700670baa38991e6fa25c':
134+
ref: 'v2.10.3'
135+
commit: 'sha1-f9150cb1d140e9a9271700670baa38991e6fa25c'
136+
owner_id: 75048950
137+
repo_id: 623796603
138+
'hyperpolymath/deed-ecosystem@aa4b836bd969df2bc58128cb8e3d20bbc88d5e79':
139+
ref: 'main'
140+
commit: 'sha1-aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
141+
owner_id: 6759885
142+
repo_id: 1275649586
143+
'hyperpolymath/k9-ecosystem@89f3c2702f4f650a92aa7411502f38da06abd562':
144+
ref: 'main'
145+
commit: 'sha1-89f3c2702f4f650a92aa7411502f38da06abd562'
146+
owner_id: 6759885
147+
repo_id: 1275650185
148+
'hyperpolymath/smtp-notify-action@ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7':
149+
ref: 'v0.2.0'
150+
commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
151+
owner_id: 6759885
152+
repo_id: 1352485172
153+
'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697':
154+
ref: 'v4.0.1'
155+
commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
156+
owner_id: 18365890
157+
repo_id: 220359305
158+
'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
159+
ref: 'v0.10.0'
160+
commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555'
161+
owner_id: 135788
162+
repo_id: 208510314

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: BoJ Server Build Trigger
34
on:
45
push:

‎.github/workflows/casket-pages.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: GitHub Pages
34
on:
45
push:

‎.github/workflows/cflite_batch.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: ClusterFuzzLite Batch
34
on:
45
schedule:

‎.github/workflows/cflite_pr.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: ClusterFuzzLite PR
34
on:
45
pull_request:

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: CodeQL Security Analysis
34
on:
45
push:

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
34
#
45
# dogfood-gate.yml — Hyperpolymath Dogfooding Quality Gate

‎.github/workflows/governance.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# governance.yml — single wrapper calling the shared estate governance bundle
34
# in hyperpolymath/standards instead of carrying per-repo copies.
45
#

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Hypatia Neurosymbolic CI/CD Security Scan
34
name: Hypatia Security Scan
45
on:

‎.github/workflows/instant-sync.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Instant Forge Sync - Triggers propagation to all forges on push/release
34
name: Instant Sync
45
on:

0 commit comments

Comments
 (0)