From 7568c17720fb1bc9e756ec8fb684256c28a99a57 Mon Sep 17 00:00:00 2001
From: Constantin <74049135+constantin-jais@users.noreply.github.com>
Date: Sat, 10 Oct 2026 06:01:06 +0200
Subject: [PATCH] chore(pins): move to governance generation Q (5ef12472)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Move every project-governance pin surface of this repository from
generation P (1c8b37c8) to generation Q (5ef12472), as planned by
project-governance tools/fleet/bump-generation.ts: reusable workflow
`uses:`, `tooling_ref:`, governance checkout refs and the card
`pinned:`, where present.

Q composes schemas-and-contracts at a82d7b54 and project-governance at
d94081cc.

Owner-arbitration: 2026-10-10 — fleet migration to generation Q arbitrated in chat.

Claude-Session: https://claude.ai/code/session_01F18JyLzoGrRpt7efAr4E92
Signed-off-by: Constantin <74049135+constantin-jais@users.noreply.github.com>
---
 .github/workflows/code-validation.yml | 4 ++--
 project.v1.yaml                       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/code-validation.yml b/.github/workflows/code-validation.yml
index 75d09b8..b605751 100644
--- a/.github/workflows/code-validation.yml
+++ b/.github/workflows/code-validation.yml
@@ -10,8 +10,8 @@ permissions:
   contents: read
 jobs:
   composition:
-    uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@1c8b37c80beb41f640982768ec27304a911e0b8e
+    uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@5ef12472d043f3ed1799ca09cff89c27ff024d79
     with:
       target: capability-authorization
       target_ref: ${{ github.sha }}
-      tooling_ref: 1c8b37c80beb41f640982768ec27304a911e0b8e
+      tooling_ref: 5ef12472d043f3ed1799ca09cff89c27ff024d79
diff --git a/project.v1.yaml b/project.v1.yaml
index 658decf..6fe3268 100644
--- a/project.v1.yaml
+++ b/project.v1.yaml
@@ -48,7 +48,7 @@ dependencies:
     # révision qui existe. Aucun manifeste de ce dépôt ne dépendait du retiré :
     # mesuré sur 105 manifestes des 29 dépôts de l'organisation.
     why: "gabarit de gates consommé en workflows réutilisables et git-dep d'outillage — jamais dupliqué"
-    pinned: "github:libre-ai/project-governance#1c8b37c80beb41f640982768ec27304a911e0b8e"
+    pinned: "github:libre-ai/project-governance#5ef12472d043f3ed1799ca09cff89c27ff024d79"
   - on: biscuit-auth
     why: "primitives Biscuit Ed25519 — release exacte 6.0.0, default-features désactivées, résolue vers une copie vendorée (archive publiée + correctif amont #306, third_party/biscuit-auth-6.0.0/PATCH.md) retirée dès qu'une version publiée porte le correctif"
     pinned: "=6.0.0 via [patch.crates-io] (avec biscuit-parser =0.2.0, grammaire datalog 3.3 correspondante — preuve d'injectivité evidence/reviews/bfc2c0d/)"