From fd91919a269976cbb15f6e975dcc1eacd1842e34 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 8 Oct 2026 19:42:32 +0100 Subject: [PATCH] fix(ci): relock smtp-notify-action at v0.5.0 (#604) Dependabot #595 bumped hyperpolymath/smtp-notify-action from v0.3.0 to v0.5.0 in push-email-notify.yml without regenerating actions.lock, so the lock-sync gate, governance's lockfile verify and Scorecard's reconciliation all failed on main. Regenerated with hyperpolymath/standards scripts/update-actions-lock.sh (origin/main 900c42c7, gh-actions-lock v0.1.6). The lock now records v0.5.0 at its commit c1c9fa07 (the peeled tag, not the tag object c6a2a6dc) and drops the stale v0.3.0 entry. No workflow file changed. Closes #604 Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_015bTuGfwCcvjrmNFejydTML --- .github/workflows/actions.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 106dc900..dda12a26 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -50,7 +50,7 @@ workflows: - 'dtolnay/rust-toolchain@v1' - 'swatinem/rust-cache@v2.9.2' '.github/workflows/push-email-notify.yml': - - 'hyperpolymath/smtp-notify-action@v0.3.0' + - 'hyperpolymath/smtp-notify-action@v0.5.0' '.github/workflows/repo-integrity-guard.yml': - 'actions/checkout@v7.0.1' '.github/workflows/rust.yml': @@ -166,9 +166,9 @@ dependencies: commit: 'sha1-c1a34884054fabf0e9de81dbf68f4ba7874e85f1' owner_id: 6759885 repo_id: 1275650185 - 'hyperpolymath/smtp-notify-action@v0.3.0': - ref: 'v0.3.0' - commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be' + 'hyperpolymath/smtp-notify-action@v0.5.0': + ref: 'v0.5.0' + commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' owner_id: 6759885 repo_id: 1352485172 'hyperpolymath/standards@571cc734cd69fb846032ec77a662aa8ee4fc32cd':