From e4641cae27a56264ea3e731d893a07ed5bbbe03b Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 6 Oct 2026 14:44:44 +0100 Subject: [PATCH] fix(lock): restore Asana/push-signed-commits entry dropped by #1160 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The #1160 relock regenerated actions.lock from .github/workflows/ only and dropped the dependency used by the composite action .github/actions/signed-push/action.yml:42. `uses ⊆ actions.lock` has been red on main since ce92a8cd ("not in actions.lock: Asana/push-signed-commits@d615ca88"). This restores the entry byte for byte as it stood on 5751b97e (ref v1.3, same commit and ids, same transitive uses). Verified: .githooks/validate-actions-lock.sh rc=1 before (1 ref missing), rc=0 after (26/26); scripts/check-lock-sync.sh rc=0. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01P48P9ErT8UFFeDUfEQiYV7 --- .github/workflows/actions.lock | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 779b73296..a28bbd2e2 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -215,6 +215,13 @@ dependencies: repo_id: 496012378 uses: - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' + 'asana/push-signed-commits@d615ca88d8e1a946734c24970d1e7a6c56f34897': + ref: 'v1.3' + commit: 'sha1-d615ca88d8e1a946734c24970d1e7a6c56f34897' + owner_id: 1472111 + repo_id: 772313726 + uses: + - 'actions/setup-python@v2' 'dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067': ref: 'v1' commit: 'sha1-7e38f4b43b4db5c8dd498af069a4f6196df1d067'