Skip to content

Commit bda2c3d

Browse files
author
Arena Agent
committed
fix(ci): reconcile actions.lock so the lockfile validates\n\nWorkflows here fail at creation with 'The lockfile could not be validated. Regenerate it by running gh actions-lock' (or 'Workflow must use a lockfile'). This runs the official extension, completes the workflows: map so every onboarded file has an entry (the shape healthy repos carry), and adds the SHA-form transitive pins reached through called reusables. Every workflow re-parses before commit; gh actions-lock --verify is rc=0.
1 parent 93b866e commit bda2c3d

19 files changed

Lines changed: 339 additions & 54 deletions

‎.github/workflows/abi-contract.yml‎

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
# This workflow is managed by gh actions-lock.
12
# SPDX-License-Identifier: MPL-2.0
23
# ABI contract gate — keeps the Zig FFI and the Idris2 model in lockstep.
34
#
@@ -31,10 +32,10 @@ jobs:
3132
timeout-minutes: 15
3233
steps:
3334
- name: Checkout
34-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
35+
uses: actions/checkout@v4.2.2
3536

3637
- name: Install Zig 0.15.2
37-
uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
38+
uses: mlugg/setup-zig@v2.2.1
3839
with:
3940
version: 0.15.2
4041

@@ -75,15 +76,15 @@ jobs:
7576
image: ghcr.io/stefan-hoeck/idris2-pack@sha256:370e2ab066251cf278ac6928d9201ade0aca70c4e7ee1cc434d25bcea1669b29
7677
steps:
7778
- name: Checkout
78-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
79+
uses: actions/checkout@v4.2.2
7980

8081
- name: Install Zig archive prerequisite in the Idris image
8182
run: |
8283
apt-get update
8384
apt-get install --no-install-recommends -y xz-utils
8485
8586
- name: Install Zig 0.15.2 for the real shared-library boundary
86-
uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
87+
uses: mlugg/setup-zig@v2.2.1
8788
with:
8889
version: 0.15.2
8990

@@ -96,7 +97,7 @@ jobs:
9697
timeout-minutes: 5
9798
steps:
9899
- name: Checkout
99-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
100+
uses: actions/checkout@v4.2.2
100101

101102
# Symbol-level contract only (pure grep/comm — no toolchain): every
102103
# extern in src/ui/tea/gsa_ffi.affine must be a real Zig export, and

‎.github/workflows/actions.lock‎

Lines changed: 268 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,268 @@
1+
# This file is machine-generated by `gh actions-lock`.
2+
# Do not edit by hand; run `gh actions-lock` to update.
3+
# Docs: https://gh.io/actions-lockfile
4+
version: 'v0.0.2'
5+
workflows:
6+
'.github/workflows/abi-contract.yml':
7+
- 'actions/checkout@v4.2.2'
8+
- 'mlugg/setup-zig@v2.2.1'
9+
'.github/workflows/boj-build.yml':
10+
- 'actions/checkout@v4.1.7'
11+
'.github/workflows/casket-pages.yml':
12+
- 'actions/cache@v4.3.0'
13+
- 'actions/checkout@v4.1.1'
14+
- 'actions/configure-pages@v5.0.0'
15+
- 'actions/deploy-pages@v4.0.5'
16+
- 'actions/upload-pages-artifact@v3.0.1'
17+
- 'haskell-actions/setup@v2.7.5'
18+
'.github/workflows/codeql.yml':
19+
- 'actions/checkout@v6.0.2'
20+
- 'github/codeql-action@v4.34.0'
21+
'.github/workflows/cross-platform.yml':
22+
- 'actions/cache@v4.2.0'
23+
- 'actions/checkout@v4.2.2'
24+
- 'mlugg/setup-zig@v2.2.1'
25+
'.github/workflows/dogfood-gate.yml':
26+
- 'actions/checkout@v4.3.1'
27+
- 'hyperpolymath/deed-ecosystem@main'
28+
- 'hyperpolymath/k9-ecosystem@main'
29+
'.github/workflows/governance.yml': []
30+
'.github/workflows/hypatia-scan.yml':
31+
- 'actions/checkout@v6.0.2'
32+
- 'actions/github-script@v8.0.0'
33+
- 'actions/upload-artifact@v4.6.2'
34+
- 'erlef/setup-beam@v1.24.0'
35+
- 'github/codeql-action@v4.32.6'
36+
'.github/workflows/instant-sync.yml':
37+
- 'peter-evans/repository-dispatch@v4.0.1'
38+
'.github/workflows/label-triage.yml': []
39+
'.github/workflows/labels.yml': []
40+
'.github/workflows/mirror.yml': []
41+
'.github/workflows/push-email-notify.yml':
42+
- 'hyperpolymath/smtp-notify-action@v0.2.0'
43+
'.github/workflows/release.yml':
44+
- 'actions/attest-build-provenance@v2.4.0'
45+
- 'actions/checkout@v6.0.2'
46+
- 'actions/download-artifact@v4.3.0'
47+
- 'actions/upload-artifact@v4.6.2'
48+
- 'softprops/action-gh-release@v2.5.0'
49+
'.github/workflows/rhodibot.yml':
50+
- 'actions/checkout@v7.0.1'
51+
'.github/workflows/scorecard.yml': []
52+
'.github/workflows/secret-scanner.yml': []
53+
'.github/workflows/static-analysis-gate.yml':
54+
- 'actions/checkout@v6.0.2'
55+
- 'actions/download-artifact@v4.1.8'
56+
- 'actions/upload-artifact@v4.6.2'
57+
- 'erlef/setup-beam@v1.20.4'
58+
dependencies:
59+
'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01':
60+
ref: 'predicate@1.1.5'
61+
commit: 'sha1-1176ef556905f349f669722abf30bce1a6e16e01'
62+
owner_id: 44036562
63+
repo_id: 760702757
64+
'actions/attest-build-provenance@v2.4.0':
65+
ref: 'v2.4.0'
66+
commit: 'sha1-e8998f949152b193b063cb0ec769d69d929409be'
67+
owner_id: 44036562
68+
repo_id: 760702757
69+
uses:
70+
- 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01'
71+
- 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
72+
'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc':
73+
ref: 'v2.4.0'
74+
commit: 'sha1-ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
75+
owner_id: 44036562
76+
repo_id: 760701061
77+
'actions/cache@v4.2.0':
78+
ref: 'v4.2.0'
79+
commit: 'sha1-1bd1e32a3bdc45362d1e726936510720a7c30a57'
80+
owner_id: 44036562
81+
repo_id: 215566462
82+
'actions/cache@v4.3.0':
83+
ref: 'v4.3.0'
84+
commit: 'sha1-0057852bfaa89a56745cba8c7296529d2fc39830'
85+
owner_id: 44036562
86+
repo_id: 215566462
87+
'actions/checkout@v4.1.1':
88+
ref: 'v4.1.1'
89+
commit: 'sha1-b4ffde65f46336ab88eb53be808477a3936bae11'
90+
owner_id: 44036562
91+
repo_id: 197814629
92+
'actions/checkout@v4.1.7':
93+
ref: 'v4.1.7'
94+
commit: 'sha1-692973e3d937129bcbf40652eb9f2f61becf3332'
95+
owner_id: 44036562
96+
repo_id: 197814629
97+
'actions/checkout@v4.2.2':
98+
ref: 'v4.2.2'
99+
commit: 'sha1-11bd71901bbe5b1630ceea73d27597364c9af683'
100+
owner_id: 44036562
101+
repo_id: 197814629
102+
'actions/checkout@v4.3.1':
103+
ref: 'v4.3.1'
104+
commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5'
105+
owner_id: 44036562
106+
repo_id: 197814629
107+
'actions/checkout@v6.0.2':
108+
ref: 'v6.0.2'
109+
commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd'
110+
owner_id: 44036562
111+
repo_id: 197814629
112+
'actions/checkout@v7.0.1':
113+
ref: 'v7.0.1'
114+
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
115+
owner_id: 44036562
116+
repo_id: 197814629
117+
'actions/configure-pages@v5.0.0':
118+
ref: 'v5.0.0'
119+
commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b'
120+
owner_id: 44036562
121+
repo_id: 513659658
122+
'actions/deploy-pages@v4.0.5':
123+
ref: 'v4.0.5'
124+
commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
125+
owner_id: 44036562
126+
repo_id: 438112499
127+
'actions/download-artifact@v4.1.8':
128+
ref: 'v4.1.8'
129+
commit: 'sha1-fa0a91b85d4f404e444e00e005971372dc801d16'
130+
owner_id: 44036562
131+
repo_id: 192626254
132+
'actions/download-artifact@v4.3.0':
133+
ref: 'v4.3.0'
134+
commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093'
135+
owner_id: 44036562
136+
repo_id: 192626254
137+
'actions/github-script@v8.0.0':
138+
ref: 'v8.0.0'
139+
commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
140+
owner_id: 44036562
141+
repo_id: 205262760
142+
'actions/upload-artifact@v4':
143+
ref: 'v4'
144+
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
145+
owner_id: 44036562
146+
repo_id: 192625955
147+
'actions/upload-artifact@v4.6.2':
148+
ref: 'v4.6.2'
149+
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
150+
owner_id: 44036562
151+
repo_id: 192625955
152+
'actions/upload-pages-artifact@v3.0.1':
153+
ref: 'v3.0.1'
154+
commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
155+
owner_id: 44036562
156+
repo_id: 496012378
157+
uses:
158+
- 'actions/upload-artifact@v4'
159+
'erlef/setup-beam@v1.20.4':
160+
ref: 'v1.20.4'
161+
commit: 'sha1-e6d7c94229049569db56a7ad5a540c051a010af9'
162+
owner_id: 47606891
163+
repo_id: 331103973
164+
'erlef/setup-beam@v1.24.0':
165+
ref: 'v1.24.0'
166+
commit: 'sha1-fc68ffb90438ef2936bbb3251622353b3dcb2f93'
167+
owner_id: 47606891
168+
repo_id: 331103973
169+
'github/codeql-action@v4.32.6':
170+
ref: 'v4.32.6'
171+
commit: 'sha1-0d579ffd059c29b07949a3cce3983f0780820c98'
172+
owner_id: 9919
173+
repo_id: 259445878
174+
'github/codeql-action@v4.34.0':
175+
ref: 'v4.34.0'
176+
commit: 'sha1-c6f931105cb2c34c8f901cc885ba1e2e259cf745'
177+
owner_id: 9919
178+
repo_id: 259445878
179+
'haskell-actions/setup@v2.7.5':
180+
ref: 'v2.7.5'
181+
commit: 'sha1-ec49483bfc012387b227434aba94f59a6ecd0900'
182+
owner_id: 75048950
183+
repo_id: 623796603
184+
'hyperpolymath/deed-ecosystem@main':
185+
ref: 'main'
186+
commit: 'sha1-aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
187+
owner_id: 6759885
188+
repo_id: 1275649586
189+
'hyperpolymath/k9-ecosystem@main':
190+
ref: 'main'
191+
commit: 'sha1-89f3c2702f4f650a92aa7411502f38da06abd562'
192+
owner_id: 6759885
193+
repo_id: 1275650185
194+
'hyperpolymath/smtp-notify-action@v0.2.0':
195+
ref: 'v0.2.0'
196+
commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
197+
owner_id: 6759885
198+
repo_id: 1352485172
199+
'mlugg/setup-zig@v2.2.1':
200+
ref: 'v2.2.1'
201+
commit: 'sha1-d1434d08867e3ee9daa34448df10607b98908d29'
202+
owner_id: 7289241
203+
repo_id: 812112570
204+
'peter-evans/repository-dispatch@v4.0.1':
205+
ref: 'v4.0.1'
206+
commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
207+
owner_id: 18365890
208+
repo_id: 220359305
209+
'softprops/action-gh-release@v2.5.0':
210+
ref: 'v2.5.0'
211+
commit: 'sha1-a06a81a03ee405af7f2048a818ed3f03bbf83c7b'
212+
owner_id: 2242
213+
repo_id: 204253808
214+
'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
215+
ref: 'v6.1.0'
216+
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
217+
owner_id: 44036562
218+
repo_id: 215566462
219+
'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
220+
ref: 'v7.0.1'
221+
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
222+
owner_id: 44036562
223+
repo_id: 197814629
224+
'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a':
225+
ref: 'v7.0.1'
226+
commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
227+
owner_id: 44036562
228+
repo_id: 192625955
229+
'actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08':
230+
ref: 'v4.6.0'
231+
commit: 'sha1-65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08'
232+
owner_id: 44036562
233+
repo_id: 192625955
234+
'denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed':
235+
ref: 'v2.0.5'
236+
commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed'
237+
owner_id: 42048915
238+
repo_id: 356423100
239+
'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772':
240+
ref: 'stable'
241+
commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
242+
owner_id: 1940490
243+
repo_id: 260749683
244+
'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c':
245+
ref: 'v2.2.0'
246+
commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c'
247+
owner_id: 26415196
248+
repo_id: 297874902
249+
'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124':
250+
ref: 'v1.24.1'
251+
commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
252+
owner_id: 47606891
253+
repo_id: 331103973
254+
'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc':
255+
ref: 'v2.4.4'
256+
commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc'
257+
owner_id: 67707773
258+
repo_id: 421101922
259+
'softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda':
260+
ref: 'v2.2.1'
261+
commit: 'sha1-c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
262+
owner_id: 2242
263+
repo_id: 204253808
264+
'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
265+
ref: 'v0.10.0'
266+
commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555'
267+
owner_id: 135788
268+
repo_id: 208510314

‎.github/workflows/boj-build.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
# This workflow is managed by gh actions-lock.
12
# SPDX-License-Identifier: MPL-2.0
23
#
34
# OPTIONAL: BoJ Server Build Trigger
@@ -17,7 +18,7 @@ jobs:
1718
timeout-minutes: 10
1819
steps:
1920
- name: Checkout
20-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
21+
uses: actions/checkout@v4.1.7
2122
- name: Trigger BoJ Server (Casket/ssg-mcp)
2223
env:
2324
BOJ_URL: ${{ secrets.BOJ_SERVER_URL || vars.BOJ_SERVER_URL }}

‎.github/workflows/casket-pages.yml‎

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
# This workflow is managed by gh actions-lock.
12
# SPDX-License-Identifier: MPL-2.0
23
name: GitHub Pages
34

@@ -22,22 +23,22 @@ jobs:
2223
timeout-minutes: 30
2324
steps:
2425
- name: Checkout
25-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
26+
uses: actions/checkout@v4.1.1
2627

2728
- name: Checkout casket-ssg
28-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
29+
uses: actions/checkout@v4.1.1
2930
with:
3031
repository: hyperpolymath/casket-ssg
3132
path: .casket-ssg
3233

3334
- name: Setup GHCup
34-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
35+
uses: haskell-actions/setup@v2.7.5
3536
with:
3637
ghc-version: '9.8.2'
3738
cabal-version: '3.10'
3839

3940
- name: Cache Cabal
40-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
41+
uses: actions/cache@v4.3.0
4142
with:
4243
path: |
4344
~/.cabal/packages
@@ -99,10 +100,10 @@ jobs:
99100
touch ../_site/.nojekyll
100101
101102
- name: Setup Pages
102-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
103+
uses: actions/configure-pages@v5.0.0
103104

104105
- name: Upload artifact
105-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
106+
uses: actions/upload-pages-artifact@v3.0.1
106107
with:
107108
path: '_site'
108109

@@ -116,4 +117,4 @@ jobs:
116117
steps:
117118
- name: Deploy to GitHub Pages
118119
id: deployment
119-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
120+
uses: actions/deploy-pages@v4.0.5

0 commit comments

Comments
 (0)