From a982a80b3840f13268819721a476d5178a8fdd8e Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Wed, 7 Oct 2026 10:00:06 -0400 Subject: [PATCH] ci: repin ci-workflows to v0.39.0 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/pr-automerge-dependabot.yml | 2 +- .github/workflows/pr-require-checks.yml | 30 +++++++++---------- 2 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/pr-automerge-dependabot.yml b/.github/workflows/pr-automerge-dependabot.yml index c8438f2..1f3a82c 100644 --- a/.github/workflows/pr-automerge-dependabot.yml +++ b/.github/workflows/pr-automerge-dependabot.yml @@ -23,6 +23,6 @@ jobs: permissions: contents: write # enablePullRequestAutoMerge requires it. pull-requests: write # Arm or disarm auto-merge on the PR. - uses: melodic-software/ci-workflows/.github/workflows/pr-automerge-dependabot.yml@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/workflows/pr-automerge-dependabot.yml@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: runner: ubuntu-24.04 diff --git a/.github/workflows/pr-require-checks.yml b/.github/workflows/pr-require-checks.yml index 4f09491..6e1f639 100644 --- a/.github/workflows/pr-require-checks.yml +++ b/.github/workflows/pr-require-checks.yml @@ -94,7 +94,7 @@ jobs: with: persist-credentials: false - name: Lint Markdown - uses: melodic-software/ci-workflows/.github/actions/markdownlint@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/markdownlint@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .markdownlint-cli2.jsonc @@ -108,7 +108,7 @@ jobs: with: persist-credentials: false - name: Spell-check - uses: melodic-software/ci-workflows/.github/actions/typos@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/typos@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: _typos.toml - name: Spell-check hidden tracked paths @@ -147,7 +147,7 @@ jobs: with: persist-credentials: false - name: Check editorconfig conformance - uses: melodic-software/ci-workflows/.github/actions/editorconfig-checker@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/editorconfig-checker@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .editorconfig-checker.json @@ -161,7 +161,7 @@ jobs: with: persist-credentials: false - name: Scan for secrets - uses: melodic-software/ci-workflows/.github/actions/gitleaks@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/gitleaks@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .gitleaks.toml @@ -175,7 +175,7 @@ jobs: with: persist-credentials: false - name: Check links and anchors (offline) - uses: melodic-software/ci-workflows/.github/actions/lychee-offline@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/lychee-offline@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: lychee.toml # The action's default `**/*.md` skips hidden directories, so Markdown @@ -198,7 +198,7 @@ jobs: with: persist-credentials: false - name: Lint workflows - uses: melodic-software/ci-workflows/.github/actions/actionlint@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/actionlint@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 jsonschema: if: ${{ !(github.event.pull_request.head.repo.full_name == github.repository && (contains(fromJSON('["labeled","unlabeled"]'), github.event.action) || (github.event.action == 'edited' && !github.event.changes.base))) }} @@ -210,12 +210,12 @@ jobs: with: persist-credentials: false - name: Validate dependabot.yml - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: builtin-schema: vendor.dependabot files: .github/dependabot.yml - name: Validate workflows - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: builtin-schema: vendor.github-workflows files: .github/workflows/*.yml @@ -255,12 +255,12 @@ jobs: fi echo "files=${forms[*]}" >> "$GITHUB_OUTPUT" - name: Validate issue forms - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: builtin-schema: vendor.github-issue-forms files: ${{ steps.issue-forms.outputs.files }} - name: Validate issue-template chooser config - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: builtin-schema: vendor.github-issue-config files: .github/ISSUE_TEMPLATE/config.yml @@ -270,7 +270,7 @@ jobs: # breaking schemastore change reddens the lane without this repo changing; # swap to a builtin if one ever ships. - name: Validate Claude Code settings - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: schemafile: https://json.schemastore.org/claude-code-settings.json files: .claude/settings.json @@ -292,7 +292,7 @@ jobs: with: persist-credentials: false - name: Lint shell scripts - uses: melodic-software/ci-workflows/.github/actions/shellcheck@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/shellcheck@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: rcfile: .shellcheckrc @@ -306,7 +306,7 @@ jobs: with: persist-credentials: false - name: Check index-level EOL drift - uses: melodic-software/ci-workflows/.github/actions/check-line-endings@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-line-endings@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 # Compares `.github/PULL_REQUEST_TEMPLATE.md` headings and # `.claude/source-control.md`'s `pr_body_required_sections` to the @@ -353,7 +353,7 @@ jobs: statuses: write steps: - name: Check the pull-request contract - uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/check-contract@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/check-contract@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: token: ${{ github.token }} - name: Aggregate lane results @@ -361,7 +361,7 @@ jobs: # aggregation: the job still fails on the contract step's exit code, and # the `ci-lanes` status is on the SHA for the next contract-only run. if: ${{ !cancelled() }} - uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/aggregate-results@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/aggregate-results@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: # Derived from `needs:` rather than restating it. Hand-listing the # results let a lane be dropped from this input alone: still gated via