From cb6face02ef10f6e52be566a864f2ddc22ab55dc Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 6 Oct 2026 17:44:07 +0100 Subject: [PATCH] fix(ci): lock record with nested uses for mirror.yml (startup_failure) mirror.yml has been startup_failure on every head since 2026-10-05. Its lock record hyperpolymath/standards@571cc734 carries no nested `uses:`, and the callee at that SHA pins dtolnay/rust-toolchain@6c977a6, which has no record. Working peers (cicd-squabbler, mirror green; burble) key the same kind of record WITH a nested uses list. Relates to #992. Repin mirror.yml to b935e63 (its mirror-reusable pins only recorded refs) and generate the record via the repair chain: complete-job-refs -> build-dep-records -> close-lock -> prune-stale. close-lock also closed a pre-existing dangling transitive edge, actions/setup-python@v2, named by the asana/push-signed-commits record. The 571cc734 record stays: ci-pipeline.yml still names it. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_012kgrMQRhSmZMBbF9Ui1zBw --- .github/workflows/actions.lock | 16 +++++++++++++++- .github/workflows/mirror.yml | 2 +- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 3bd04c292..bc597cfc3 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -99,7 +99,7 @@ workflows: - 'dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067' - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555' '.github/workflows/mirror.yml': - - 'hyperpolymath/standards@571cc734cd69fb846032ec77a662aa8ee4fc32cd' + - 'hyperpolymath/standards@b935e63937b1f1b5cbaeea7e375947d7b924038f' '.github/workflows/no-js-scan.yml': - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/pages-archive.yml': @@ -199,6 +199,11 @@ dependencies: commit: 'sha1-3a2844b7e9c422d3c10d287c895573f7108da1b3' owner_id: 44036562 repo_id: 205262760 + 'actions/setup-python@v2': + ref: 'v2' + commit: 'sha1-e9aba2c848f5ebd159c070c61ea2c4e2b122355e' + owner_id: 44036562 + repo_id: 192625525 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': ref: '043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' @@ -258,6 +263,15 @@ dependencies: commit: 'sha1-571cc734cd69fb846032ec77a662aa8ee4fc32cd' owner_id: 6759885 repo_id: 1116521501 + 'hyperpolymath/standards@b935e63937b1f1b5cbaeea7e375947d7b924038f': + ref: 'b935e63937b1f1b5cbaeea7e375947d7b924038f' + commit: 'sha1-b935e63937b1f1b5cbaeea7e375947d7b924038f' + owner_id: 6759885 + repo_id: 1116521501 + uses: + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067' + - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555' 'ocaml/setup-ocaml@93303b622b2522e4411e295f9e77411a24912ac7': ref: '93303b622b2522e4411e295f9e77411a24912ac7' commit: 'sha1-93303b622b2522e4411e295f9e77411a24912ac7' diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index 5440e4683..aeef0a14e 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -14,5 +14,5 @@ permissions: jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@b935e63937b1f1b5cbaeea7e375947d7b924038f secrets: inherit