Skip to content

Commit 2f6f3aa

Browse files
hyperpolymathclaude
hyperpolymath
and
claude
authored
chore(ci): generate actions.lock ahead of the 2026-10-01 lock gate (#94)
## Summary - Adds `.github/workflows/actions.lock`. It was generated by `gh actions-lock --no-narrow` v0.1.6 from the refs already SHA-pinned here, so no `uses:` line changes. - Moves the tool's banner to line 2 in each workflow, keeping SPDX on line 1. ## Why From 2026-10-01 the governance "Actions lockfile verify" gate fails any repo that lacks a lockfile. Changing the date on standards `main` would not help, because this repo pins the reusable workflow by SHA. ## Verification - The gate script at the pinned standards SHA passes with `LOCK_TODAY=2026-10-01`. - This PR's own runs are the runtime test. Every workflow must create jobs, with no `startup_failure`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_019aa9y32JcBuZ85KXe2jb8R Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
1 parent 7c768b6 commit 2f6f3aa

18 files changed

Lines changed: 160 additions & 3 deletions

‎.github/workflows/actions.lock‎

Lines changed: 140 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,140 @@
1+
# This file is machine-generated by `gh actions-lock`.
2+
# Do not edit by hand; run `gh actions-lock` to update.
3+
# Docs: https://gh.io/actions-lockfile
4+
version: 'v0.0.2'
5+
workflows:
6+
'.github/workflows/boj-build.yml':
7+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
8+
'.github/workflows/casket-pages.yml':
9+
- 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
10+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
11+
- 'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d'
12+
- 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346'
13+
- 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9'
14+
- 'haskell-actions/setup@6037f33647c3f17758a2356c80fc4a53d7e0685d'
15+
'.github/workflows/codeql.yml':
16+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
17+
- 'github/codeql-action@1c5b675653bb5c22dbe9b12b556ec555138e09fd'
18+
'.github/workflows/dependabot-automerge.yml':
19+
- 'dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98'
20+
'.github/workflows/dogfood-gate.yml':
21+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
22+
- 'hyperpolymath/deed-ecosystem@aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
23+
- 'hyperpolymath/k9-ecosystem@89f3c2702f4f650a92aa7411502f38da06abd562'
24+
'.github/workflows/instant-sync.yml':
25+
- 'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697'
26+
'.github/workflows/pages.yml':
27+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
28+
- 'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346'
29+
- 'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9'
30+
'.github/workflows/publish-image.yml':
31+
- 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8'
32+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
33+
- 'docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc'
34+
- 'docker/login-action@dbcb813823bdd20940b903addbd779551569679f'
35+
- 'docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302'
36+
- 'docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069'
37+
'.github/workflows/push-email-notify.yml':
38+
- 'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be'
39+
'.github/workflows/workflow-linter.yml':
40+
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
41+
dependencies:
42+
'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8':
43+
ref: 'v4.2.2'
44+
commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8'
45+
owner_id: 44036562
46+
repo_id: 760702757
47+
uses:
48+
- 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d'
49+
'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d':
50+
ref: 'v4.2.1'
51+
commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d'
52+
owner_id: 44036562
53+
repo_id: 760701061
54+
'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
55+
ref: 'v6.1.0'
56+
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
57+
owner_id: 44036562
58+
repo_id: 215566462
59+
'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
60+
ref: 'v7.0.1'
61+
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
62+
owner_id: 44036562
63+
repo_id: 197814629
64+
'actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d':
65+
ref: 'v6.0.0'
66+
commit: 'sha1-45bfe0192ca1faeb007ade9deae92b16b8254a0d'
67+
owner_id: 44036562
68+
repo_id: 513659658
69+
'actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346':
70+
ref: 'v5.0.1'
71+
commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
72+
owner_id: 44036562
73+
repo_id: 438112499
74+
'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
75+
ref: 'v7.0.0'
76+
commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
77+
owner_id: 44036562
78+
repo_id: 192625955
79+
'actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9':
80+
ref: 'v5.0.0'
81+
commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9'
82+
owner_id: 44036562
83+
repo_id: 496012378
84+
uses:
85+
- 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
86+
'dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98':
87+
ref: 'v3.1.0'
88+
commit: 'sha1-25dd0e34f4fe68f24cc83900b1fe3fe149efef98'
89+
owner_id: 27347476
90+
repo_id: 371068214
91+
'docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc':
92+
ref: 'v7.4.0'
93+
commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc'
94+
owner_id: 5429470
95+
repo_id: 241092383
96+
'docker/login-action@dbcb813823bdd20940b903addbd779551569679f':
97+
ref: 'v4.6.0'
98+
commit: 'sha1-dbcb813823bdd20940b903addbd779551569679f'
99+
owner_id: 5429470
100+
repo_id: 287743349
101+
'docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302':
102+
ref: 'v6.2.0'
103+
commit: 'sha1-dc802804100637a589fabce1cb79ff13a1411302'
104+
owner_id: 5429470
105+
repo_id: 306769011
106+
'docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069':
107+
ref: 'v4.4.1'
108+
commit: 'sha1-f87e5991a6d7451dcb8d9637bfbc97413f497069'
109+
owner_id: 5429470
110+
repo_id: 288485773
111+
'github/codeql-action@1c5b675653bb5c22dbe9b12b556ec555138e09fd':
112+
ref: 'v4.38.1'
113+
commit: 'sha1-1c5b675653bb5c22dbe9b12b556ec555138e09fd'
114+
owner_id: 9919
115+
repo_id: 259445878
116+
'haskell-actions/setup@6037f33647c3f17758a2356c80fc4a53d7e0685d':
117+
ref: 'v2.12.0'
118+
commit: 'sha1-6037f33647c3f17758a2356c80fc4a53d7e0685d'
119+
owner_id: 75048950
120+
repo_id: 623796603
121+
'hyperpolymath/deed-ecosystem@aa4b836bd969df2bc58128cb8e3d20bbc88d5e79':
122+
ref: 'main'
123+
commit: 'sha1-aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
124+
owner_id: 6759885
125+
repo_id: 1275649586
126+
'hyperpolymath/k9-ecosystem@89f3c2702f4f650a92aa7411502f38da06abd562':
127+
ref: 'main'
128+
commit: 'sha1-89f3c2702f4f650a92aa7411502f38da06abd562'
129+
owner_id: 6759885
130+
repo_id: 1275650185
131+
'hyperpolymath/smtp-notify-action@22e7bdb322c430c1d0dac6b3bb307f4bb139d0be':
132+
ref: 'v0.3.0'
133+
commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be'
134+
owner_id: 6759885
135+
repo_id: 1352485172
136+
'peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697':
137+
ref: 'v4.0.1'
138+
commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
139+
owner_id: 18365890
140+
repo_id: 220359305

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: BoJ Server Build Trigger
34
on:
45
push:

‎.github/workflows/casket-pages.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: GitHub Pages
34

45
on:

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: CodeQL Security Analysis
34

45
on:

‎.github/workflows/dependabot-automerge.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
#
34
# dependabot-automerge.yml — enable GitHub's native auto-merge on
45
# Dependabot pull requests that match a declared severity / ecosystem

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
34
#
45
# dogfood-gate.yml — Hyperpolymath Dogfooding Quality Gate

‎.github/workflows/governance.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: Governance
34

45
on:
@@ -14,4 +15,4 @@ permissions:
1415

1516
jobs:
1617
governance:
17-
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
18+
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: Hypatia Security Scan
34

45
on:
@@ -17,4 +18,4 @@ permissions:
1718

1819
jobs:
1920
hypatia:
20-
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
21+
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c

‎.github/workflows/instant-sync.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Instant Forge Sync - Triggers propagation to all forges on push/release
34
name: Instant Sync
45

‎.github/workflows/label-triage.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: Label Triage
34

45
# Classify newly-filed issues against the estate label taxonomy.

0 commit comments

Comments
 (0)