From e1d7423154e391c84889d35147b4d3f9315be330 Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Sun, 9 Aug 2026 05:56:39 -0400 Subject: [PATCH] chore(claude-lanes): re-pin the review lanes to ci-workflows v0.11.0 Same major version as the pins they replace (v0.10.2). The v0.11.0 lane contracts add or remove no input, secret, or caller permission; the lane deltas are internal (fail-closed on a workflow-validation self-skip, drop-proof inline-comment grant in the security lane, and a claude-code-action bump to 1.0.187). The runner-policy materialization here is managed and arrives by standards sync; this bump touches only the two locally-owned callers. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01HCJfVqDNYt92YRyvKUMgYW --- .github/workflows/claude-review.yml | 2 +- .github/workflows/claude-security-review.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 27d0caa74d..3e49b07a22 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -32,7 +32,7 @@ jobs: concurrency: group: claude-review-${{ github.repository }} queue: max - uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@e94438746c300b02385a7f8a2a2dcd19a7f4ad4a # v0.10.2 + uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@ee96bd28a43eebfa06b61aee8b518cc5b1b195b3 # v0.11.0 with: runner: ubuntu-24.04 # Pass only the one named secret (least privilege) rather than `secrets: diff --git a/.github/workflows/claude-security-review.yml b/.github/workflows/claude-security-review.yml index 6478ba55a6..1cb505be43 100644 --- a/.github/workflows/claude-security-review.yml +++ b/.github/workflows/claude-security-review.yml @@ -31,7 +31,7 @@ jobs: contents: read # checkout + read the diff pull-requests: write # post the security review id-token: write # OIDC — mints the Claude GitHub App token - uses: melodic-software/ci-workflows/.github/workflows/claude-security-review.yml@e94438746c300b02385a7f8a2a2dcd19a7f4ad4a # v0.10.2 + uses: melodic-software/ci-workflows/.github/workflows/claude-security-review.yml@ee96bd28a43eebfa06b61aee8b518cc5b1b195b3 # v0.11.0 with: runner: ubuntu-24.04 paths-file: .github/claude-security-paths