Skip to content

fix(ci): repair broken standards pin(s) - #98

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/e1-complete-pin-repair
Sep 18, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
fix/e1-complete-pin-repair

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

This branch replaces standards reusable-workflow pin(s) that no longer resolve (the referenced commits were removed from hyperpolymath/standards), so the affected workflows could not run.

Verified: every pin on this branch resolves; every replaced pin does not.

Prepared during the 2026-09-18 estate branch triage.

Every reusable-workflow ref in this repo pointed at a SHA that is not a
commit. Six of the seven distinct dead refs across the estate are BLOB
oids -- the generator that wrote them called `git hash-object` on the
reusable workflow FILE where it needed `git rev-parse` on the commit.

A caller pinned at a non-commit dies at workflow STARTUP: conclusion
`failure` (not `startup_failure`), ZERO jobs, run name == run path, and
neither REST nor GraphQL carries a reason -- only the run page does. A
required context whose workflow dies that way never reports at all, so
the gate reads as ABSENT rather than failing, and the branch looks clean.

Repinned to da2c748aad55c1a1dcba00b60fe4a35017bc6540.

That SHA is NOT the standards default-branch tip, deliberately. GitHub
validates a reusable against the CALLEE repo own .github/workflows/
actions.lock as it exists at that SHA. Dependabot routinely bumps a
`uses:` inside a reusable without regenerating that lock, which makes the
newer commit startup-fatal for every caller. Measured across the last 84
standards commits: 43 POISON / 41 SELF-CONSISTENT, alternating. Capability
is not monotonic in time, so "bump to HEAD" is the wrong reflex; the tip
(317101e0) is itself POISON on four refs. da2c748aad55 is the newest commit that
validates against its own lock, and all six reusables this estate calls
exist there.

Rows repaired in this repo:
  governance.yml               -> governance-reusable.yml
  hypatia-scan.yml             -> hypatia-scan-reusable.yml
  scorecard.yml                -> scorecard-reusable.yml

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WgqXnnNWBkiKMyUeLqzcuN
@hyperpolymath
hyperpolymath merged commit a44768b into main Sep 18, 2026
2 checks passed
@hyperpolymath
hyperpolymath deleted the fix/e1-complete-pin-repair branch September 18, 2026 13:18
@coderabbitai

coderabbitai Bot commented Sep 18, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 7d217843-7f57-4735-b891-06a11d9806a6

📥 Commits

Reviewing files that changed from the base of the PR and between f5bef55 and 25a5e77.

📒 Files selected for processing (3)
  • .github/workflows/governance.yml
  • .github/workflows/hypatia-scan.yml
  • .github/workflows/scorecard.yml
 ______________________________________________________________________________________________
< Rabbits with frickin' laser beams attached to their heads. And they're pointed at your bugs. >
 ----------------------------------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant