From 48d8c3cdcafee81a28efae1b15039e86d16ea2ed Mon Sep 17 00:00:00 2001
From: ryan-morris <ryan.morris@angeltrax.com>
Date: Tue, 10 Nov 2026 19:22:02 -0600
Subject: [PATCH] ffmpeg-build 0.0.24: complete SBOMs and notices; retry pinned
 to a release

Engine 0.0.24 (devenvy/ffmpeg-build #128, #129, #130) records everything the
toolchain puts into the shipped binaries, in the SBOM and in
THIRD-PARTY-NOTICES.txt: statically linked C++ and GCC runtimes, the
mingw-w64 C runtime, glibc's and musl's static parts, the NDK's and Apple's
compiler-rt and libunwind. The SBOM also lists the system libraries the
binaries load. Toolchain image builds outlast a package mirror's sync.

Every engine workflow is pinned to v0.0.24, retry.yml included: it was
pinned to a pull-request commit until the engine was released. ffmpeg.lock
from `ffmpeg-build update` (engine 0.0.23 -> 0.0.24; no library changes),
so every release is due and is built again with the new engine.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml          | 4 ++--
 .github/workflows/release.yml     | 2 +-
 .github/workflows/retry.yml       | 2 +-
 .github/workflows/update-lock.yml | 2 +-
 ffmpeg.lock                       | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 11d0d21..30f135c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ permissions: {}
 
 jobs:
   check:
-    uses: devenvy/ffmpeg-build/.github/workflows/check.yml@06aa5d9ff5efc47b7ea4804dcdc2a59bddf4f10d # v0.0.22
+    uses: devenvy/ffmpeg-build/.github/workflows/check.yml@85cbcfa3ee4973492f17051f4c71484155a4755f # v0.0.24
     permissions:
       contents: read
   # the workflows: actionlint (mistakes) and zizmor (GitHub Actions security)
@@ -50,7 +50,7 @@ jobs:
         run: test "${CHECK}" = success && test "${LINT}" = success
   merge:
     needs: result
-    uses: devenvy/ffmpeg-build/.github/workflows/automerge.yml@06aa5d9ff5efc47b7ea4804dcdc2a59bddf4f10d # v0.0.22
+    uses: devenvy/ffmpeg-build/.github/workflows/automerge.yml@85cbcfa3ee4973492f17051f4c71484155a4755f # v0.0.24
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 41abb4d..9058b98 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ permissions: {}
 
 jobs:
   release:
-    uses: devenvy/ffmpeg-build/.github/workflows/build.yml@06aa5d9ff5efc47b7ea4804dcdc2a59bddf4f10d # v0.0.22
+    uses: devenvy/ffmpeg-build/.github/workflows/build.yml@85cbcfa3ee4973492f17051f4c71484155a4755f # v0.0.24
     permissions:
       contents: write # the GitHub releases
     with:
diff --git a/.github/workflows/retry.yml b/.github/workflows/retry.yml
index af2330f..9a197e3 100644
--- a/.github/workflows/retry.yml
+++ b/.github/workflows/retry.yml
@@ -15,7 +15,7 @@ permissions: {}
 jobs:
   retry:
     if: github.event.workflow_run.conclusion == 'failure'
-    uses: devenvy/ffmpeg-build/.github/workflows/retry.yml@acbec8058c9429b152d6bde3e898f07e8d532bd8 # sbom-static-cxx-runtime; re-pin to the engine release
+    uses: devenvy/ffmpeg-build/.github/workflows/retry.yml@85cbcfa3ee4973492f17051f4c71484155a4755f # v0.0.24
     permissions:
       actions: write
       checks: read
diff --git a/.github/workflows/update-lock.yml b/.github/workflows/update-lock.yml
index 37defb2..de9c7d3 100644
--- a/.github/workflows/update-lock.yml
+++ b/.github/workflows/update-lock.yml
@@ -14,7 +14,7 @@ permissions: {}
 
 jobs:
   update:
-    uses: devenvy/ffmpeg-build/.github/workflows/update-lock.yml@06aa5d9ff5efc47b7ea4804dcdc2a59bddf4f10d # v0.0.22
+    uses: devenvy/ffmpeg-build/.github/workflows/update-lock.yml@85cbcfa3ee4973492f17051f4c71484155a4755f # v0.0.24
     permissions:
       actions: write
       contents: write
diff --git a/ffmpeg.lock b/ffmpeg.lock
index ddf2f85..ea125b4 100644
--- a/ffmpeg.lock
+++ b/ffmpeg.lock
@@ -1,5 +1,5 @@
 # ffmpeg.lock - written only by `ffmpeg-build update` / `ffmpeg-build lock`. Do not edit.
-engine: 0.0.23
+engine: 0.0.24
 ffmpeg:
   "8": { version: 8.1.3, sha256: 7138d28c96d9d3e3af4ee3d8cad72741f8ffb40da90c1112235dea3ecd3178a3 }
   "9": { version: 9.0.2, sha256: 8c3850283eb25fa026482078a04051e0be17347b09ef81a0849bec15a96e002e }