ci(estate-audit): pin the caller to cicd-suite main (376898b)

[hyperpolymath]

Not a rung (CI). Follow-up to #44.

hyperpolymath/cicd-suite#50 merged as 376898b. This moves the caller's pin from afa28ff, #50's head, to that merge commit. The trailing comment goes back to # cicd-suite main.

Behaviour is unchanged. git diff --stat afa28ff 376898b in cicd-suite is empty, so the reusable audit marches calls is byte-identical. Only the commit the pin names has changed: it now names a commit on cicd-suite's main, which is what track-estate-audit.yml compares against when it advances the pin each week.

Changes

• .github/workflows/main-estate-audit.yml: one line, the SHA plus its comment.
• STATE.adoc: a dated entry.

Checks

• actionlint 1.7.7 is clean on the caller.
• lake build → Build completed successfully (15 jobs). No Lean file changed.
• This PR's own pull_request run of estate / * is the end-to-end check at the new pin.

CI and CodeQL still end in startup_failure, as they do on main, because of the actions.lock drift. The relock that fixes it needs the AUTOMATION_TOKEN secret: the first Actions lock run on main computed the relock but could not push it with GITHUB_TOKEN.

🤖 Generated with Claude Code

https://claude.ai/code/session_01VTeVWDEJgdYKsUNr4uhnXX

---

Generated by Claude Code

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: ce08ddea-72f9-4b79-a935-24cbd14e68e2

📥 Commits

Reviewing files that changed from the base of the PR and between 37abf67 and db25594.

📒 Files selected for processing: 2

• .github/workflows/main-estate-audit.yml
• STATE.adoc

 _________________________________________________________________
< Never bring a script to a dependency battle - bring a lockfile. >
 -----------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}