From 0477d38d891904ad8ea33e3841dd02f9f443ac33 Mon Sep 17 00:00:00 2001 From: IanHollow <72767437+IanHollow@users.noreply.github.com> Date: Mon, 12 Oct 2026 20:19:44 -0700 Subject: [PATCH] ci: advance automated queues with verified v2.12 release Signed-off-by: IanHollow <72767437+IanHollow@users.noreply.github.com> --- .github/workflows/ci.yml | 6 +++--- .github/workflows/codeql.yml | 4 ++-- .github/workflows/dco.yml | 2 +- .github/workflows/reconcile-merge-queue.yml | 2 +- .github/workflows/retry-scorecard.yml | 2 +- workflow-templates/dependency-review.yml | 2 +- workflow-templates/nix-checks.yml | 10 +++++----- workflow-templates/retry-scorecard.yml | 2 +- 8 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 10a7d57..ba71262 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,9 +18,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: nix-forge/ci/actions/setup-nix@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + - uses: nix-forge/ci/actions/setup-nix@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 - name: Validate workflows and template contracts - uses: nix-forge/ci/actions/validate-workflows@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/validate-workflows@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 queue-completion: continue-on-error: true name: Queue completion callback @@ -32,4 +32,4 @@ jobs: actions: write # Notify the trusted default-branch reconciler. steps: - name: Notify trusted queue reconciler - uses: nix-forge/ci/actions/queue-completion@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/queue-completion@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 51e3ff0..c88d218 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -23,7 +23,7 @@ jobs: actions: read # Read workflow metadata for Actions analysis. contents: read security-events: write # Upload code scanning results. - uses: nix-forge/ci/.github/workflows/codeql.yml@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/.github/workflows/codeql.yml@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 with: languages: actions queue-completion: @@ -37,4 +37,4 @@ jobs: actions: write # Dispatch trusted queue validation. steps: - name: Notify trusted queue reconciler - uses: nix-forge/ci/actions/queue-completion@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/queue-completion@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml index c44c01d..74bd9e6 100644 --- a/.github/workflows/dco.yml +++ b/.github/workflows/dco.yml @@ -149,4 +149,4 @@ jobs: actions: write # Notify the trusted default-branch reconciler. steps: - name: Notify trusted queue reconciler - uses: nix-forge/ci/actions/queue-completion@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/queue-completion@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 diff --git a/.github/workflows/reconcile-merge-queue.yml b/.github/workflows/reconcile-merge-queue.yml index f34e072..6939dad 100644 --- a/.github/workflows/reconcile-merge-queue.yml +++ b/.github/workflows/reconcile-merge-queue.yml @@ -32,7 +32,7 @@ jobs: statuses: write # Report verified queue job results. steps: - name: Reconcile verified automation - uses: nix-forge/ci/actions/reconcile-queue@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/reconcile-queue@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 with: workflows: '["ci.yml", "codeql.yml", "dco.yml"]' base-sha-workflows: '["dco.yml"]' diff --git a/.github/workflows/retry-scorecard.yml b/.github/workflows/retry-scorecard.yml index 8d931dc..3361df7 100644 --- a/.github/workflows/retry-scorecard.yml +++ b/.github/workflows/retry-scorecard.yml @@ -13,6 +13,6 @@ jobs: permissions: actions: write # Retry only verified transient service failures. contents: read - uses: nix-forge/ci/.github/workflows/retry-scorecard.yml@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/.github/workflows/retry-scorecard.yml@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 with: source-run-id: ${{ format('{0}', github.event.workflow_run.id) }} diff --git a/workflow-templates/dependency-review.yml b/workflow-templates/dependency-review.yml index 825a648..f3660fc 100644 --- a/workflow-templates/dependency-review.yml +++ b/workflow-templates/dependency-review.yml @@ -12,4 +12,4 @@ jobs: name: Dependency review permissions: contents: read - uses: nix-forge/ci/.github/workflows/dependency-review.yml@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/.github/workflows/dependency-review.yml@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 diff --git a/workflow-templates/nix-checks.yml b/workflow-templates/nix-checks.yml index e230934..83d532a 100644 --- a/workflow-templates/nix-checks.yml +++ b/workflow-templates/nix-checks.yml @@ -23,7 +23,7 @@ jobs: with: persist-credentials: false - id: inventory - uses: nix-forge/ci/actions/discover-lockfiles@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/discover-lockfiles@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 lock-health: name: Flake lock health needs: [lock] @@ -45,7 +45,7 @@ jobs: fail-fast: false matrix: lockfile: ${{ fromJSON(needs.discover.outputs.lockfiles) }} - uses: nix-forge/ci/.github/workflows/flake-lock.yml@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/.github/workflows/flake-lock.yml@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 with: lockfile: ${{ matrix.lockfile }} checks: @@ -58,10 +58,10 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: nix-forge/ci/actions/setup-nix@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + - uses: nix-forge/ci/actions/setup-nix@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 - name: Validate workflow contracts - uses: nix-forge/ci/actions/validate-workflows@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/validate-workflows@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 - name: Materialize discovered partitions - uses: nix-forge/ci/actions/materialize-partitions@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/actions/materialize-partitions@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 - name: Run declared repository checks run: nix flake check --keep-going --print-build-logs diff --git a/workflow-templates/retry-scorecard.yml b/workflow-templates/retry-scorecard.yml index 8d931dc..3361df7 100644 --- a/workflow-templates/retry-scorecard.yml +++ b/workflow-templates/retry-scorecard.yml @@ -13,6 +13,6 @@ jobs: permissions: actions: write # Retry only verified transient service failures. contents: read - uses: nix-forge/ci/.github/workflows/retry-scorecard.yml@32dec0910e46dda3568ef5a494ed5fb6a9a08f31 # v2.10.0 + uses: nix-forge/ci/.github/workflows/retry-scorecard.yml@ab8e486d3d1c48edd116578e097a46eb0c8f5097 # v2.12.0 with: source-run-id: ${{ format('{0}', github.event.workflow_run.id) }}