From 904381b75299643f750e9413709ee99798dbcd05 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 7 Sep 2026 19:43:50 +0100 Subject: [PATCH 1/2] chore(ci): bump governance-reusable pin to standards main The pinned revision carries bugs that make Governance red on every consumer: the Workflow security linter runs update-actions-lock.sh from the CALLER's checkout where it does not exist (exit 127), and Allowlist Preflight runs check-actions-policy.sh with an empty GH_TOKEN (exit 3). Both are fixed on standards main. Witnessed green on hyperpolymath/blocky-writer at this exact SHA: governance run completed/success, 15/15 jobs. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/governance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index a925364..81855e2 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -21,4 +21,4 @@ permissions: contents: read jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2 From 526339dd426d5f31984efa1611344a7c44770f9f Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 8 Sep 2026 08:42:34 +0100 Subject: [PATCH 2/2] chore(ci): re-point governance-reusable pin to standards main 9e9513b1 standards #747 merged 2026-09-08 as 9e9513b11fff182b08cf8cd6c9c2272460636586, carrying the Hypatia clone pin and the GH_TOKEN preflight fix (E-2). fad242d3 predates that merge, so this PR re-targets the pin at the fix. actions.lock is untouched: a reusable-workflow re-pin needs no lock change. Co-Authored-By: Claude Fable 5.1 --- .github/workflows/governance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 81855e2..37aacff 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -21,4 +21,4 @@ permissions: contents: read jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@9e9513b11fff182b08cf8cd6c9c2272460636586