fix(ci): re-pin standards reusables to 333b06a0; reset the lock for a full regen

The callers were on 84355587 and fad242d3. 84355587's rust-ci reusable
pins dtolnay/rust-toolchain@6c977a6c ('stable' branch, no tag), which the
repair chain cannot lock. 333b06a0 is current standards main. The
scorecard job's own permissions block now grants actions: read, which the
333b06a0 reusable requests. actions.lock goes back to main's version so
the next commit regenerates it from a clean base (the previous attempt
left two spellings of Swatinem/rust-cache that gh actions-lock rejects).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019a95kk88TZ1iegsBK3kox3

Author: claude

.github/workflows/actions.lock

@@ -4,91 +4,74 @@
 version: 'v0.0.2'
 workflows:
     '.github/workflows/boj-build.yml':
-        - 'actions/checkout@v7.0.1'
+        - 'actions/checkout@v4.1.7'
     '.github/workflows/bridge-gate.yml':
-        - 'actions/checkout@v7.0.1'
+        - 'actions/checkout@v4.3.1'
     '.github/workflows/cargo-audit.yml':
-        - 'actions/checkout@v7.0.1'
+        - 'actions/checkout@v5.0.1'
         - 'dtolnay/rust-toolchain@v1'
     '.github/workflows/casket-pages.yml':
-        - 'actions/cache@v6.1.0'
-        - 'actions/checkout@v7.0.1'
-        - 'actions/configure-pages@v6.0.0'
-        - 'actions/deploy-pages@v5.0.1'
-        - 'actions/upload-pages-artifact@v5.0.0'
-        - 'haskell-actions/setup@v2.12.1'
+        - 'actions/cache@v4.3.0'
+        - 'actions/checkout@v4.1.1'
+        - 'actions/configure-pages@v5.0.0'
+        - 'actions/deploy-pages@v4.0.5'
+        - 'actions/upload-pages-artifact@v3.0.1'
+        - 'haskell-actions/setup@v2.7.5'
     '.github/workflows/chapel-ci.yml':
-        - 'actions/cache@v6.1.0'
-        - 'actions/checkout@v7.0.1'
-        - 'actions/download-artifact@v8.0.1'
-        - 'actions/upload-artifact@v7.0.1'
+        - 'actions/cache@v4.3.0'
+        - 'actions/checkout@v6.0.2'
+        - 'actions/download-artifact@v4.1.8'
+        - 'actions/upload-artifact@v4.6.2'
         - 'dtolnay/rust-toolchain@v1'
     '.github/workflows/codeql.yml':
         - 'actions/checkout@v7.0.1'
         - 'github/codeql-action@v4.38.2'
     '.github/workflows/coverage.yml':
-        - 'actions/checkout@v7.0.1'
+        - 'actions/checkout@v5.0.1'
         - 'dtolnay/rust-toolchain@v1'
     '.github/workflows/dependency-review.yml':
-        - 'actions/checkout@v7.0.1'
-        - 'actions/dependency-review-action@v5.0.0'
+        - 'actions/checkout@v5.0.1'
+        - 'actions/dependency-review-action@v4.3.4'
     '.github/workflows/dogfood-gate.yml':
-        - 'actions/checkout@v7.0.1'
+        - 'actions/checkout@v4.3.1'
     '.github/workflows/e2e.yml':
-        - 'Swatinem/rust-cache@v2.9.2'
-        - 'actions/checkout@v7.0.1'
-        - 'actions/upload-artifact@v7.0.1'
+        - 'actions/checkout@v4.3.1'
+        - 'actions/upload-artifact@v4.6.2'
         - 'dtolnay/rust-toolchain@v1'
-    '.github/workflows/governance.yml':
-        - 'hyperpolymath/standards@fad242d35291de1898242d6737ba02b74a59a2f2'
-    '.github/workflows/hypatia-scan.yml':
-        - 'hyperpolymath/standards@84355587cb2a1f86e6882de83514a32db2646e7a'
+        - 'swatinem/rust-cache@v2.8.2'
+    '.github/workflows/governance.yml': []
+    '.github/workflows/hypatia-scan.yml': []
     '.github/workflows/instant-sync.yml':
         - 'peter-evans/repository-dispatch@v4.0.1'
     '.github/workflows/label-triage.yml': []
     '.github/workflows/labels.yml': []
-    '.github/workflows/mirror.yml':
-        - 'hyperpolymath/standards@84355587cb2a1f86e6882de83514a32db2646e7a'
+    '.github/workflows/mirror.yml': []
     '.github/workflows/pages.yml':
-        - 'actions/checkout@v7.0.1'
-        - 'actions/deploy-pages@v5.0.1'
-        - 'actions/upload-pages-artifact@v5.0.0'
+        - 'actions/checkout@v4.4.0'
+        - 'actions/deploy-pages@v4.0.5'
+        - 'actions/upload-pages-artifact@v3.0.1'
     '.github/workflows/push-email-notify.yml':
-        - 'hyperpolymath/smtp-notify-action@v0.5.0'
+        - 'hyperpolymath/smtp-notify-action@v0.2.0'
     '.github/workflows/release.yml':
-        - 'Swatinem/rust-cache@v2.9.2'
-        - 'actions/checkout@v7.0.1'
-        - 'actions/download-artifact@v8.0.1'
-        - 'actions/upload-artifact@v7.0.1'
+        - 'actions/checkout@v5.0.1'
+        - 'actions/download-artifact@v4.1.8'
+        - 'actions/upload-artifact@v4.6.2'
         - 'dtolnay/rust-toolchain@v1'
-        - 'slsa-framework/slsa-github-generator@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
-        - 'softprops/action-gh-release@v3.0.3'
-    '.github/workflows/rust-ci.yml':
-        - 'hyperpolymath/standards@84355587cb2a1f86e6882de83514a32db2646e7a'
+        - 'softprops/action-gh-release@v2.5.0'
+        - 'swatinem/rust-cache@v2.8.2'
+    '.github/workflows/rust-ci.yml': []
     '.github/workflows/scan-and-report.yml':
-        - 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
         - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-        - 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8'
-    '.github/workflows/scorecard.yml':
-        - 'hyperpolymath/standards@84355587cb2a1f86e6882de83514a32db2646e7a'
-    '.github/workflows/secret-scanner.yml':
-        - 'hyperpolymath/standards@84355587cb2a1f86e6882de83514a32db2646e7a'
+        - 'dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de'
+        - 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
+    '.github/workflows/scorecard.yml': []
+    '.github/workflows/secret-scanner.yml': []
 dependencies:
-    'Swatinem/rust-cache@v2.9.2':
-        ref: 'v2.9.2'
-        commit: 'sha1-6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
-        owner_id: 580492
-        repo_id: 298565987
     'actions/cache@v4.3.0':
         ref: 'v4.3.0'
         commit: 'sha1-0057852bfaa89a56745cba8c7296529d2fc39830'
         owner_id: 44036562
         repo_id: 215566462
-    'actions/cache@v6.1.0':
-        ref: 'v6.1.0'
-        commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
-        owner_id: 44036562
-        repo_id: 215566462
     'actions/checkout@v4.1.1':
         ref: 'v4.1.1'
         commit: 'sha1-b4ffde65f46336ab88eb53be808477a3936bae11'
@@ -129,41 +112,21 @@ dependencies:
         commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b'
         owner_id: 44036562
         repo_id: 513659658
-    'actions/configure-pages@v6.0.0':
-        ref: 'v6.0.0'
-        commit: 'sha1-45bfe0192ca1faeb007ade9deae92b16b8254a0d'
-        owner_id: 44036562
-        repo_id: 513659658
     'actions/dependency-review-action@v4.3.4':
         ref: 'v4.3.4'
         commit: 'sha1-5a2ce3f5b92ee19cbb1541a4984c76d921601d7c'
         owner_id: 44036562
         repo_id: 476372928
-    'actions/dependency-review-action@v5.0.0':
-        ref: 'v5.0.0'
-        commit: 'sha1-a1d282b36b6f3519aa1f3fc636f609c47dddb294'
-        owner_id: 44036562
-        repo_id: 476372928
     'actions/deploy-pages@v4.0.5':
         ref: 'v4.0.5'
         commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
         owner_id: 44036562
         repo_id: 438112499
-    'actions/deploy-pages@v5.0.1':
-        ref: 'v5.0.1'
-        commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
-        owner_id: 44036562
-        repo_id: 438112499
     'actions/download-artifact@v4.1.8':
         ref: 'v4.1.8'
         commit: 'sha1-fa0a91b85d4f404e444e00e005971372dc801d16'
         owner_id: 44036562
         repo_id: 192626254
-    'actions/download-artifact@v8.0.1':
-        ref: 'v8.0.1'
-        commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
-        owner_id: 44036562
-        repo_id: 192626254
     'actions/upload-artifact@v4':
         ref: 'v4'
         commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
@@ -174,48 +137,23 @@ dependencies:
         commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
         owner_id: 44036562
         repo_id: 192625955
-    'actions/upload-artifact@v7.0.1':
-        ref: 'v7.0.1'
-        commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-        owner_id: 44036562
-        repo_id: 192625955
     'actions/upload-pages-artifact@v3.0.1':
         ref: 'v3.0.1'
         commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
         owner_id: 44036562
         repo_id: 496012378
         uses:
             - 'actions/upload-artifact@v4'
-    'actions/upload-pages-artifact@v5.0.0':
-        ref: 'v5.0.0'
-        commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9'
-        owner_id: 44036562
-        repo_id: 496012378
-    'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8':
-        ref: 'v1'
-        commit: 'sha1-683b588c487a69d01f6c6ddf40f036ff682cc2c8'
-        owner_id: 1940490
-        repo_id: 260749683
     'dtolnay/rust-toolchain@v1':
         ref: 'v1'
         commit: 'sha1-02cb101ec7c40f2c49e1d9714d64511d8e1b74de'
         owner_id: 1940490
         repo_id: 260749683
-    'github/codeql-action@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28':
-        ref: 'v4.37.8'
-        commit: 'sha1-db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28'
-        owner_id: 9919
-        repo_id: 259445878
     'github/codeql-action@v4.38.2':
         ref: 'v4.38.2'
         commit: 'sha1-2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2'
         owner_id: 9919
         repo_id: 259445878
-    'haskell-actions/setup@v2.12.1':
-        ref: 'v2.12.1'
-        commit: 'sha1-0f8e8c99d88aeb3fbfd523f1ef2c6f762d10d64d'
-        owner_id: 75048950
-        repo_id: 623796603
     'haskell-actions/setup@v2.7.5':
         ref: 'v2.7.5'
         commit: 'sha1-ec49483bfc012387b227434aba94f59a6ecd0900'
@@ -226,65 +164,16 @@ dependencies:
         commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
         owner_id: 6759885
         repo_id: 1352485172
-    'hyperpolymath/smtp-notify-action@v0.5.0':
-        ref: 'v0.5.0'
-        commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef'
-        owner_id: 6759885
-        repo_id: 1352485172
-    'hyperpolymath/standards@84355587cb2a1f86e6882de83514a32db2646e7a':
-        ref: '84355587cb2a1f86e6882de83514a32db2646e7a'
-        commit: 'sha1-84355587cb2a1f86e6882de83514a32db2646e7a'
-        owner_id: 6759885
-        repo_id: 1116521501
-        uses:
-            - 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
-            - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
-            - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-            - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
-            - 'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
-            - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124'
-            - 'github/codeql-action@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28'
-            - 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc'
-            - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555'
-    'hyperpolymath/standards@fad242d35291de1898242d6737ba02b74a59a2f2':
-        ref: 'fad242d35291de1898242d6737ba02b74a59a2f2'
-        commit: 'sha1-fad242d35291de1898242d6737ba02b74a59a2f2'
-        owner_id: 6759885
-        repo_id: 1116521501
-        uses:
-            - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
-            - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
-            - 'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c'
-            - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124'
     'peter-evans/repository-dispatch@v4.0.1':
         ref: 'v4.0.1'
         commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
         owner_id: 18365890
         repo_id: 220359305
-    'slsa-framework/slsa-github-generator@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a':
-        ref: 'f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
-        commit: 'sha1-f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
-        owner_id: 80431187
-        repo_id: 475074978
-        uses:
-            - 'actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08'
-            - 'slsa-framework/slsa-github-generator@v2.1.0'
-            - 'softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
-    'slsa-framework/slsa-github-generator@v2.1.0':
-        ref: 'v2.1.0'
-        commit: 'sha1-f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
-        owner_id: 80431187
-        repo_id: 475074978
     'softprops/action-gh-release@v2.5.0':
         ref: 'v2.5.0'
         commit: 'sha1-a06a81a03ee405af7f2048a818ed3f03bbf83c7b'
         owner_id: 2242
         repo_id: 204253808
-    'softprops/action-gh-release@v3.0.3':
-        ref: 'v3.0.3'
-        commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64'
-        owner_id: 2242
-        repo_id: 204253808
     'swatinem/rust-cache@v2.8.2':
         ref: 'v2.8.2'
         commit: 'sha1-779680da715d629ac1d338a641029a2f4372abb5'

.github/workflows/governance.yml

@@ -17,4 +17,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7

.github/workflows/hypatia-scan.yml

@@ -20,4 +20,4 @@ permissions:
 
 jobs:
   hypatia:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7

.github/workflows/mirror.yml

@@ -15,5 +15,5 @@ permissions:
 
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7
     secrets: inherit

.github/workflows/rust-ci.yml

@@ -18,4 +18,4 @@ permissions:
 
 jobs:
   rust-ci:
-    uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a # re-pinned 2026-07-01: toolchain-required-input fix (standards#439)
+    uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7 # re-pinned 2026-07-01: toolchain-required-input fix (standards#439)

.github/workflows/scorecard.yml

@@ -15,8 +15,9 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7
     permissions:
+      actions: read
       contents: read
       security-events: write
       id-token: write

.github/workflows/secret-scanner.yml

@@ -21,5 +21,5 @@ jobs:
   scan:
     permissions:
       contents: read
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@333b06a01db1874ffedb2de1bfabb195640927c7
     secrets: inherit