From e2b8b48089756b91a2743872bfb4f88c8a81c970 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 8 Sep 2026 19:16:32 +0100 Subject: [PATCH] fix(ci): resync actions.lock with the workflow refs Dependabot bumped PR #746 ("bump the actions group across 1 directory with 2 updates") changed the pinned refs inside governance-reusable.yml, pages.yml and casket-pages.yml but did not regenerate .github/workflows/actions.lock. The lockfile therefore disagreed with the workflows, and GitHub refuses to parse a workflow whose actions are absent from its lockfile. The consequence reached the whole estate: ANY repo pinning a standards reusable at main HEAD (257869d3) got HTTP 422 - failed to parse workflow: error parsing called workflow Invalid dependency lockfile ...: workflow ".github/workflows/governance-reusable.yml" references actions not present in the lockfile: editorconfig-checker/action-editorconfig-checker@51f63319... so the run died at startup with zero jobs and zero check runs - the gate went ABSENT, not red, and main looked green. This blocked the consolidation pin-bump campaign. Resynced both stale entries to the shas the workflows actually reference: editorconfig-checker/action-editorconfig-checker 840e866d (v2.2.0) -> 51f63319 (v3.0.0) actions/deploy-pages cd2ce8fc -> 368f8252 (v5.0.1) owner_id/repo_id are unchanged; both shas verified to exist and to carry those tags. Audited every non-standards `uses:` ref in .github/workflows against the lockfile (matching on sha, case-insensitively, and on the action root for subpath actions such as github/codeql-action/init): zero remaining mismatches. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01QMTyDv9CoJo5PfeNzyp519 --- .github/workflows/actions.lock | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index bce8bbfd9..5a7db6cb5 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -14,7 +14,7 @@ workflows: - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - 'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d' - - 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' + - 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346' - 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' - 'haskell-actions/setup@6037f33647c3f17758a2356c80fc4a53d7e0685d' '.github/workflows/changelog-reusable.yml': @@ -42,7 +42,7 @@ workflows: '.github/workflows/governance-reusable.yml': - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c' + - 'editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393' - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' '.github/workflows/governance.yml': [] '.github/workflows/hypatia-scan-reusable.yml': @@ -74,7 +74,7 @@ workflows: - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/pages.yml': - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' + - 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346' - 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9' '.github/workflows/readme-derive-reusable.yml': - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' @@ -127,9 +127,9 @@ dependencies: commit: 'sha1-bcd2ba49218906704ab6c1aa796996da409d3eb1' owner_id: 44036562 repo_id: 642580244 - 'actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128': - ref: 'cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' - commit: 'sha1-cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' + 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346': + ref: '368f82528645a54fb793d4d04e342629a3f51346' + commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 'actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c': @@ -171,9 +171,9 @@ dependencies: commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772' owner_id: 1940490 repo_id: 260749683 - 'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c': - ref: 'v2.2.0' - commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c' + 'editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393': + ref: 'v3.0.0' + commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393' owner_id: 26415196 repo_id: 297874902 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124':