From fb468d506cc8fe757cdf9dc6ec86551d7812b495 Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 21 Jun 2026 14:01:54 +0000 Subject: [PATCH] ci(governance): refresh stale hyperpolymath/standards reusable pins The governance / Hypatia / Scorecard reusables were pinned at 5a93d9d (stale), which failed two estate-governance checks on every PR off main: - "governance / Check Workflow Staleness" (pins behind current standards SHA) - "scan / Hypatia Neurosymbolic Analysis" (the old Hypatia reusable referenced actions/cache@d4373f2, a SHA that no longer resolves) Bump governance-reusable, hypatia-scan-reusable and scorecard-reusable from 5a93d9d -> d72fe5a (the SHA the staleness check compares against; it carries the cache/baseline-delay fix and keeps Scorecard out of Code Scanning). The legacy scorecard-enforcer.yml flagged by the same check was already removed on main. The secret-scanner and mirror reusables are pinned at different SHAs, were not flagged, and are left unchanged. Note: hyperpolymath/standards is not in this session's scope, so the target SHA is taken from the staleness check's own output rather than verified against the standards repo directly. This PR's own staleness check is the verification. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01MWPX7iyvHf5AuwBAn1sJPy --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 8161ec2..0cf9233 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -13,4 +13,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20 diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index e715848..c41c010 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -16,4 +16,4 @@ permissions: jobs: scan: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 47acbb5..1c822b8 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -13,4 +13,4 @@ permissions: jobs: scorecard: - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d72fe5a14e841ac6d78514b53624b6173038ee20