fix(ci): SPDX headers + actions.lock codeql drift; handoff package - #106
Merged
Merged
Conversation
…odeql; add handoff package
- gh actions-lock pushed SPDX off line 1 in all 15 workflows (linter exit 15)
- codeql.yml: use codeql-action@v4.38.1 (was a SHA mislabelled '# v3'); fix its
lock list; prune 5 superseded lock entries left by the dependabot bump
- tools/ci/{linter-verify,lockcheck}.sh: offline re-verification
- docs/handoff/: CI evidence, issue bodies, DEED/K9 canon extract, next-session prompt
Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
arena-ai-coding-agent
Bot
requested a review
from hyperpolymath
as a code owner
September 25, 2026 21:58
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
hyperpolymath
approved these changes
Sep 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes two of the three red workflows on main after #105 (evidence: docs/handoff/CI-EVIDENCE.md).
gh actions-lockmoved the SPDX line off line 1 in all 15 workflows. Restored. Reproduced locally: 15 errors before, pass after.codeql.ymlusedcodeql-action@1c5b675…(v4.38.1, mislabelled# v3) while the lock listed@b96794…(v4.38.0). It's now@v4.38.1like ci.yml; the lock list is fixed and 5 superseded entries are pruned. Reusable-workflow coverage entries are kept on purpose.Verified with
bash tools/ci/linter-verify.sh. The real gate binary couldn't be downloaded here, so merging is the authoritative check (only owner merges trigger Actions).Also adds
docs/handoff/(next-session prompt, issue bodies, DEED/K9 canon extract @ standards 2479cf76).