From d13760043d407abbe0f28280365a0fbafcf1e31e Mon Sep 17 00:00:00 2001 From: "melodic-claude-lanes-repin[bot]" <315045210+melodic-claude-lanes-repin[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 14:49:05 +0000 Subject: [PATCH] chore(claude-lanes): re-pin callers to ci-workflows v0.58.0 Co-Authored-By: claude-lanes-repin --- .github/workflows/maintenance-sync-standards.yml | 2 +- .github/workflows/pr-review-security.yml | 2 +- .github/workflows/pr-review.yml | 2 +- components/claude-lanes-hosted/claude-review.yml | 2 +- components/claude-lanes-hosted/claude-security-review.yml | 2 +- components/claude-lanes/claude-review.yml | 2 +- components/claude-lanes/claude-security-review.yml | 2 +- components/managed-files-guard/managed-files-guard-fleet.yml | 2 +- components/managed-files-guard/managed-files-guard.yml | 2 +- 9 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/maintenance-sync-standards.yml b/.github/workflows/maintenance-sync-standards.yml index 81809182..f6944921 100644 --- a/.github/workflows/maintenance-sync-standards.yml +++ b/.github/workflows/maintenance-sync-standards.yml @@ -30,7 +30,7 @@ jobs: maintenance-sync-standards: # Real runs attest App access for the complete unfiltered manifest before # mutation; `targets` limits reconciliation only, never attestation. - uses: melodic-software/ci-workflows/.github/workflows/maintenance-sync-standards.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/maintenance-sync-standards.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: runner: ubuntu-24.04 # Schedule and push run for real (inputs is empty on those events, so diff --git a/.github/workflows/pr-review-security.yml b/.github/workflows/pr-review-security.yml index ce7f90c0..58770233 100644 --- a/.github/workflows/pr-review-security.yml +++ b/.github/workflows/pr-review-security.yml @@ -39,7 +39,7 @@ jobs: pull-requests: write # post the security review + tracking comment id-token: write # OIDC, mints the Claude GitHub App token (required # even with an OAuth/API-key credential) - uses: melodic-software/ci-workflows/.github/workflows/pr-review-security.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/pr-review-security.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: # DEVIATION from the component, which names the managed fleet label: # this repository is PUBLIC, and runner-policy admits a managed label diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml index 116b5358..ade50af7 100644 --- a/.github/workflows/pr-review.yml +++ b/.github/workflows/pr-review.yml @@ -49,7 +49,7 @@ jobs: pull-requests: write # post review + track_progress tracking comment id-token: write # OIDC — mints the Claude GitHub App token (required # even with an OAuth/API-key credential) - uses: melodic-software/ci-workflows/.github/workflows/pr-review.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/pr-review.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: # DEVIATION from the component, which names the managed fleet label: # this repository is PUBLIC, and runner-policy admits a fleet label only diff --git a/components/claude-lanes-hosted/claude-review.yml b/components/claude-lanes-hosted/claude-review.yml index 8ed8d042..313c2025 100644 --- a/components/claude-lanes-hosted/claude-review.yml +++ b/components/claude-lanes-hosted/claude-review.yml @@ -81,7 +81,7 @@ jobs: # reviewed-head marker comment id-token: write # OIDC, mints the Claude GitHub App token (required # even with an OAuth/API-key credential) - uses: melodic-software/ci-workflows/.github/workflows/pr-review.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/pr-review.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: runner: ubuntu-24.04 # Bot senders this lane reviews, by numeric user id: the diff --git a/components/claude-lanes-hosted/claude-security-review.yml b/components/claude-lanes-hosted/claude-security-review.yml index 29c220fe..a17069de 100644 --- a/components/claude-lanes-hosted/claude-security-review.yml +++ b/components/claude-lanes-hosted/claude-security-review.yml @@ -74,7 +74,7 @@ jobs: # the lane's reviewed-head marker comment id-token: write # OIDC, mints the Claude GitHub App token (required # even with an OAuth/API-key credential) - uses: melodic-software/ci-workflows/.github/workflows/pr-review-security.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/pr-review-security.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: runner: ubuntu-24.04 # Bot senders this lane reviews, by numeric user id: the diff --git a/components/claude-lanes/claude-review.yml b/components/claude-lanes/claude-review.yml index 63f44644..532218ea 100644 --- a/components/claude-lanes/claude-review.yml +++ b/components/claude-lanes/claude-review.yml @@ -76,7 +76,7 @@ jobs: # reviewed-head marker comment id-token: write # OIDC, mints the Claude GitHub App token (required # even with an OAuth/API-key credential) - uses: melodic-software/ci-workflows/.github/workflows/pr-review.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/pr-review.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: runner: melodic-review-ubuntu-24.04-x64 # Bot senders this lane reviews, by numeric user id: the diff --git a/components/claude-lanes/claude-security-review.yml b/components/claude-lanes/claude-security-review.yml index c4e4308f..8bb33933 100644 --- a/components/claude-lanes/claude-security-review.yml +++ b/components/claude-lanes/claude-security-review.yml @@ -70,7 +70,7 @@ jobs: # the lane's reviewed-head marker comment id-token: write # OIDC, mints the Claude GitHub App token (required # even with an OAuth/API-key credential) - uses: melodic-software/ci-workflows/.github/workflows/pr-review-security.yml@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/workflows/pr-review-security.yml@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: runner: melodic-review-ubuntu-24.04-x64 # Bot senders this lane reviews, by numeric user id: the diff --git a/components/managed-files-guard/managed-files-guard-fleet.yml b/components/managed-files-guard/managed-files-guard-fleet.yml index a1efb6ee..b86179f5 100644 --- a/components/managed-files-guard/managed-files-guard-fleet.yml +++ b/components/managed-files-guard/managed-files-guard-fleet.yml @@ -128,7 +128,7 @@ jobs: # now contains that commit, so the pin-comment takes the convention's # release-tag form rather than the short-SHA fallback # (components/managed-files-guard/README.md). - uses: melodic-software/ci-workflows/.github/actions/check-managed-files@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/actions/check-managed-files@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: # `main` for the soak, per the action's own input contract ("Pin to # a full SHA in callers once soak completes"): the guard must read diff --git a/components/managed-files-guard/managed-files-guard.yml b/components/managed-files-guard/managed-files-guard.yml index 5888e0e0..8f64ff4c 100644 --- a/components/managed-files-guard/managed-files-guard.yml +++ b/components/managed-files-guard/managed-files-guard.yml @@ -113,7 +113,7 @@ jobs: # now contains that commit, so the pin-comment takes the convention's # release-tag form rather than the short-SHA fallback # (components/managed-files-guard/README.md). - uses: melodic-software/ci-workflows/.github/actions/check-managed-files@3a2c748fdef9cfb9ceec5a66289e21842189689f # v0.55.0 + uses: melodic-software/ci-workflows/.github/actions/check-managed-files@5e18f3d6cebd6fa5e66b0941ee0f7ed6ba288d6c # v0.58.0 with: # `main` for the soak, per the action's own input contract ("Pin to # a full SHA in callers once soak completes"): the guard must read