diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2b6b542e4..fb3ab568d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,7 +29,7 @@ jobs: with: persist-credentials: false - name: Lint markdown - uses: melodic-software/ci-workflows/.github/actions/markdown@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/markdown@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: config: .markdownlint-cli2.jsonc @@ -42,7 +42,7 @@ jobs: with: persist-credentials: false - name: Spell-check - uses: melodic-software/ci-workflows/.github/actions/typos@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/typos@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: config: _typos.toml @@ -55,7 +55,7 @@ jobs: with: persist-credentials: false - name: Scan for secrets - uses: melodic-software/ci-workflows/.github/actions/gitleaks@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/gitleaks@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: config: .gitleaks.toml @@ -68,7 +68,7 @@ jobs: with: persist-credentials: false - name: Check editorconfig conformance - uses: melodic-software/ci-workflows/.github/actions/editorconfig@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/editorconfig@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: config: .editorconfig-checker.json @@ -81,7 +81,7 @@ jobs: with: persist-credentials: false - name: Lint shell scripts - uses: melodic-software/ci-workflows/.github/actions/shellcheck@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/shellcheck@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: rcfile: .shellcheckrc @@ -94,7 +94,7 @@ jobs: with: persist-credentials: false - name: Lint workflows - uses: melodic-software/ci-workflows/.github/actions/actionlint@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/actionlint@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 jsonschema: runs-on: ubuntu-latest @@ -105,22 +105,22 @@ jobs: with: persist-credentials: false - name: Validate marketplace manifest - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: schemafile: https://json.schemastore.org/claude-code-marketplace.json files: .claude-plugin/marketplace.json - name: Validate plugin manifests - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: schemafile: https://json.schemastore.org/claude-code-plugin-manifest.json files: plugins/*/.claude-plugin/plugin.json - name: Validate dependabot.yml - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: builtin-schema: vendor.dependabot files: .github/dependabot.yml - name: Validate workflows - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: builtin-schema: vendor.github-workflows files: >- @@ -136,7 +136,7 @@ jobs: with: persist-credentials: false - name: Verify shebang files are executable - uses: melodic-software/ci-workflows/.github/actions/exec-bit@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/exec-bit@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 machine-specific-paths: runs-on: ubuntu-latest @@ -147,7 +147,7 @@ jobs: with: persist-credentials: false - name: Check for machine-specific paths - uses: melodic-software/ci-workflows/.github/actions/machine-specific-paths@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/machine-specific-paths@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 eol-renormalize: runs-on: ubuntu-latest @@ -158,7 +158,7 @@ jobs: with: persist-credentials: false - name: Check index-level EOL drift - uses: melodic-software/ci-workflows/.github/actions/eol-renormalize@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/eol-renormalize@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 comment-hygiene: runs-on: ubuntu-latest @@ -171,7 +171,7 @@ jobs: - name: Scan comment hygiene # The vendored policy library references the literal marker tokens in its # own comments, so skip the module to avoid self-matching. - uses: melodic-software/ci-workflows/.github/actions/comment-hygiene@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/actions/comment-hygiene@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: exclude: ':(exclude)modules/comment-hygiene/**' @@ -179,7 +179,7 @@ jobs: permissions: contents: read # Advisory Actions security lint; findings annotate without blocking. - uses: melodic-software/ci-workflows/.github/workflows/zizmor.yml@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/workflows/zizmor.yml@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 with: paths: . diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml index f18def6ad..2d74d2b00 100644 --- a/.github/workflows/link-check.yml +++ b/.github/workflows/link-check.yml @@ -19,4 +19,4 @@ jobs: permissions: contents: read issues: write - uses: melodic-software/ci-workflows/.github/workflows/link-check.yml@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26 + uses: melodic-software/ci-workflows/.github/workflows/link-check.yml@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26 diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml index e009ba144..dd6b05b11 100644 --- a/.github/workflows/pr-title.yml +++ b/.github/workflows/pr-title.yml @@ -20,4 +20,4 @@ jobs: pr-title: permissions: pull-requests: read - uses: melodic-software/ci-workflows/.github/workflows/semantic-pr.yml@f82733b00c623254e2d2d2407aca205ae58fb7e4 + uses: melodic-software/ci-workflows/.github/workflows/semantic-pr.yml@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb