From 7c3655bcfe3a4eb766a9c4859bb7abb12019abce Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 19 Oct 2026 12:09:32 +0000 Subject: [PATCH 1/3] fix(ci): re-pin standards reusables and repair actions.lock GitHub now enforces the actions lockfile for reusable-workflow callers. The lock had no record for hyperpolymath/standards, so every caller failed at startup with "invalid lockfile pin". Moves the six standards pins (governance, hypatia-scan, mirror, scorecard, secret-scanner, spark-theatre-gate) from 571cc734 to 75bd5994 and regenerates the lock with the estate repair chain (relock-sha-keys, complete-job-refs with the standards#1294 case fix, close-lock, prune-stale). The job-level refs to slsa-framework/slsa-github-generator and hyperpolymath/panic-attack are now listed under their workflows, but close-lock could not write their records here (it needs GitHub API reads of those repositories); see the PR. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_019a95kk88TZ1iegsBK3kox3 --- .github/workflows/actions.lock | 94 ++++++++++++++++++++++-- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/mirror.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- .github/workflows/spark-theatre-gate.yml | 2 +- 7 files changed, 93 insertions(+), 13 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 3625f60e..404b96f4 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -41,11 +41,14 @@ workflows: - 'swatinem/rust-cache@v2.9.2' '.github/workflows/generator-generic-ossf-slsa3-publish.yml': - 'actions/checkout@v7.0.1' + - 'slsa-framework/slsa-github-generator@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a' '.github/workflows/ghcr-publish.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' - '.github/workflows/governance.yml': [] - '.github/workflows/hypatia-scan.yml': [] + '.github/workflows/governance.yml': + - 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' + '.github/workflows/hypatia-scan.yml': + - 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' '.github/workflows/idris2-abi-ci.yml': - 'actions/checkout@v7.0.1' '.github/workflows/label-triage.yml': [] @@ -54,7 +57,8 @@ workflows: - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' - 'swatinem/rust-cache@v2.9.2' - '.github/workflows/mirror.yml': [] + '.github/workflows/mirror.yml': + - 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' '.github/workflows/mvp-smoke.yml': - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' @@ -76,14 +80,18 @@ workflows: - 'dtolnay/rust-toolchain@v1' - 'swatinem/rust-cache@v2.9.2' - 'taiki-e/install-action@v2.87.28' - '.github/workflows/scorecard.yml': [] - '.github/workflows/secret-scanner.yml': [] - '.github/workflows/security-scan.yml': [] + '.github/workflows/scorecard.yml': + - 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' + '.github/workflows/secret-scanner.yml': + - 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' + '.github/workflows/security-scan.yml': + - 'hyperpolymath/panic-attack@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea' '.github/workflows/server-boot-gate.yml': - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' - 'swatinem/rust-cache@v2.9.2' - '.github/workflows/spark-theatre-gate.yml': [] + '.github/workflows/spark-theatre-gate.yml': + - 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66' '.github/workflows/static-analysis-gate.yml': - 'actions/checkout@v7.0.1' - 'actions/download-artifact@v8.0.2' @@ -110,11 +118,21 @@ dependencies: commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d' owner_id: 44036562 repo_id: 760701061 + 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9': + ref: 'v6.1.0' + commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + owner_id: 44036562 + repo_id: 215566462 'actions/cache@v6.1.0': ref: 'v6.1.0' commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' owner_id: 44036562 repo_id: 215566462 + 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 'actions/checkout@v7.0.1': ref: 'v7.0.1' commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' @@ -135,6 +153,11 @@ dependencies: commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' owner_id: 44036562 repo_id: 192625955 + 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 'actions/upload-artifact@v7.0.2': ref: 'v7.0.2' commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' @@ -147,16 +170,41 @@ dependencies: repo_id: 496012378 uses: - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' + 'denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed': + ref: 'v2.0.5' + commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed' + owner_id: 42048915 + repo_id: 356423100 + 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f': + ref: 'v1' + commit: 'sha1-e2a55d2ffb04f378e9626c28d38b36d230d1e12f' + owner_id: 1940490 + repo_id: 260749683 'dtolnay/rust-toolchain@v1': ref: 'v1' commit: 'sha1-7e38f4b43b4db5c8dd498af069a4f6196df1d067' owner_id: 1940490 repo_id: 260749683 + 'editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393': + ref: 'v3.0.0' + commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393' + owner_id: 26415196 + repo_id: 297874902 + 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': + ref: 'v1.24.1' + commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' + owner_id: 47606891 + repo_id: 331103973 'erlef/setup-beam@v1.24.1': ref: 'v1.24.1' commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' owner_id: 47606891 repo_id: 331103973 + 'github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63': + ref: 'v4.38.0' + commit: 'sha1-b96794f015dfd88f77b49b1c93e0fa7110f94c63' + owner_id: 9919 + repo_id: 259445878 'github/codeql-action@v4.38.2': ref: 'v4.38.2' commit: 'sha1-2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2' @@ -177,11 +225,38 @@ dependencies: commit: 'sha1-4c772eb235b04455307d5c03cbbc4f45130f7f0f' owner_id: 6759885 repo_id: 1326697643 + 'hyperpolymath/standards@75bd5994470661a099df562d6d5ad2fe744dbd66': + ref: '75bd5994470661a099df562d6d5ad2fe744dbd66' + commit: 'sha1-75bd5994470661a099df562d6d5ad2fe744dbd66' + owner_id: 6759885 + repo_id: 1116521501 + uses: + - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' + - 'denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed' + - 'dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f' + - 'editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393' + - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' + - 'github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63' + - 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc' + - 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6' + - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555' 'mlugg/setup-zig@v2.2.1': ref: 'v2.2.1' commit: 'sha1-d1434d08867e3ee9daa34448df10607b98908d29' owner_id: 7289241 repo_id: 812112570 + 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc': + ref: 'v2.4.4' + commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc' + owner_id: 67707773 + repo_id: 421101922 + 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6': + ref: 'v2.2.0' + commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' + owner_id: 108928776 + repo_id: 512644635 'oven-sh/setup-bun@v2.2.0': ref: 'v2.2.0' commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' @@ -197,3 +272,8 @@ dependencies: commit: 'sha1-1168f6810a3cb30a3514bf5756a3b7f0422c6df8' owner_id: 43724913 repo_id: 442947557 + 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555': + ref: 'v0.10.0' + commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555' + owner_id: 135788 + repo_id: 208510314 diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index d29d77de..e02ca45f 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -18,4 +18,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 220a6d90..21dfce00 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -21,5 +21,5 @@ permissions: jobs: hypatia: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) secrets: inherit diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index 72f69c35..b2365460 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -24,5 +24,5 @@ permissions: jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) secrets: inherit diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index d30a4a1c..03a75536 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -26,5 +26,5 @@ jobs: security-events: write id-token: write contents: read - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) secrets: inherit diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 82b73b42..ab077e29 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -23,5 +23,5 @@ jobs: # caller must grant at least that or the run startup-fails. permissions: contents: read - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) secrets: inherit diff --git a/.github/workflows/spark-theatre-gate.yml b/.github/workflows/spark-theatre-gate.yml index 96143b0e..d36bbd52 100644 --- a/.github/workflows/spark-theatre-gate.yml +++ b/.github/workflows/spark-theatre-gate.yml @@ -20,7 +20,7 @@ permissions: jobs: spark-theatre-gate: - uses: hyperpolymath/standards/.github/workflows/spark-theatre-gate.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) + uses: hyperpolymath/standards/.github/workflows/spark-theatre-gate.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) with: paths: "." enforce_zero_contract: false From fcb5de3d8fa7a397dc79e8681b2da28be581cdca Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 19 Oct 2026 13:01:57 +0000 Subject: [PATCH 2/3] fix(ci): pass the re-pinned standards reusables only the secrets they declare At 75bd5994 the secret-scanner, scorecard and codeql reusables declare no workflow_call secrets, mirror declares seven optional forge keys, and hypatia-scan declares only HYPATIA_SCAN_PAT. `secrets: inherit` forwarded every repository and organisation secret regardless. Drop it where nothing is declared, map the declared keys explicitly elsewhere, and grant the scorecard caller `actions: read`, which the reusable needs for the Packaging check and cannot raise itself. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_019a95kk88TZ1iegsBK3kox3 --- .github/workflows/hypatia-scan.yml | 3 ++- .github/workflows/mirror.yml | 9 ++++++++- .github/workflows/scorecard.yml | 1 - .github/workflows/secret-scanner.yml | 1 - 4 files changed, 10 insertions(+), 4 deletions(-) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 21dfce00..cc0b7276 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -22,4 +22,5 @@ permissions: jobs: hypatia: uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) - secrets: inherit + secrets: + HYPATIA_SCAN_PAT: ${{ secrets.HYPATIA_SCAN_PAT }} diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index b2365460..16b1ac1d 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -25,4 +25,11 @@ permissions: jobs: mirror: uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) - secrets: inherit + secrets: + GITLAB_SSH_KEY: ${{ secrets.GITLAB_SSH_KEY }} + BITBUCKET_SSH_KEY: ${{ secrets.BITBUCKET_SSH_KEY }} + CODEBERG_SSH_KEY: ${{ secrets.CODEBERG_SSH_KEY }} + SOURCEHUT_SSH_KEY: ${{ secrets.SOURCEHUT_SSH_KEY }} + DISROOT_SSH_KEY: ${{ secrets.DISROOT_SSH_KEY }} + GITEA_SSH_KEY: ${{ secrets.GITEA_SSH_KEY }} + RADICLE_KEY: ${{ secrets.RADICLE_KEY }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 03a75536..73f52da2 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -27,4 +27,3 @@ jobs: id-token: write contents: read uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) - secrets: inherit diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index ab077e29..c81b6352 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -24,4 +24,3 @@ jobs: permissions: contents: read uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 (lockfile-bearing ref: actions.lock required by caller-side enforcement, standards#570) - secrets: inherit From a0a311389fc97375ca342a4a9d731051a64f3551 Mon Sep 17 00:00:00 2001 From: "coderabbitai[bot]" <136622811+coderabbitai[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 15:12:20 +0000 Subject: [PATCH 3/3] =?UTF-8?q?Fix=2010=20failing=20CI=20check(s):=20GitHu?= =?UTF-8?q?b=20Actions:=20Rust=20CI=20/=203=5Frust-ci=20=5F=20Cargo=20audi?= =?UTF-8?q?t=20(security).txt,=20GitHub=20Actions:=20Governance=20/=200=5F?= =?UTF-8?q?governance=20=5F=20Validate=20Hypatia=20Baseline.txt,=20GitHub?= =?UTF-8?q?=20Actions:=20Governance=20/=201=5Fgovernance=20=5F=20Actions?= =?UTF-8?q?=20lockfile=20verify.txt,=20GitHub=20Actions:=20Governance=20/?= =?UTF-8?q?=204=5Fgovernance=20=5F=20Security=20policy=20checks.txt,=20Git?= =?UTF-8?q?Hub=20Actions:=20Governance=20/=207=5Fgovernance=20=5F=20JS=20r?= =?UTF-8?q?untimes=20=E2=80=94=20environment=20provisions=20Bun=20first.tx?= =?UTF-8?q?t,=20GitHub=20Actions:=20Governance=20/=209=5Fgovernance=20=5F?= =?UTF-8?q?=20Well-Known=20(RFC=209116=20+=20RSR).txt,=20GitHub=20Actions:?= =?UTF-8?q?=20Governance=20/=2011=5Fgovernance=20=5F=20Workflow=20security?= =?UTF-8?q?=20linter.txt,=20GitHub=20Actions:=20Governance=20/=2012=5Fgove?= =?UTF-8?q?rnance=20=5F=20UUID=20v7=20conformance.txt,=20GitHub=20Actions:?= =?UTF-8?q?=20Governance=20/=2014=5Fgovernance=20=5F=20Code=20quality=20+?= =?UTF-8?q?=20docs.txt,=20GitHub=20Actions:=20Governance=20/=2019=5Fgovern?= =?UTF-8?q?ance=20=5F=20UUID=20v8=20conformance.txt?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: CodeRabbit --- .cargo/audit.toml | 15 +++++++++++++++ Cargo.lock | 4 ++-- Project.toml | 2 +- 3 files changed, 18 insertions(+), 3 deletions(-) create mode 100644 .cargo/audit.toml diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 00000000..002e847c --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: MPL-2.0 +# cargo-audit configuration (read by `cargo audit` from .cargo/audit.toml). + +[advisories] +# zip 8.6.0 extraction advisories. zip is reached only as a *build* +# dependency of utoipa-swagger-ui (src/interfaces/rest), whose build script +# unpacks the pinned Swagger UI archive; no echidna binary links zip or +# extracts untrusted archives at runtime. Every utoipa-swagger-ui release up +# to 10.0.1 requires zip ^8.6, so the >=9.0.0 fix cannot be selected yet. +# Remove these entries once utoipa-swagger-ui accepts zip >=9. +ignore = [ + "RUSTSEC-2026-0367", # SUID/SGID bits preserved during extraction + "RUSTSEC-2026-0368", # extract() symlinks pointing outside destination + "RUSTSEC-2026-0369", # extract() applies permissions through symlinks +] diff --git a/Cargo.lock b/Cargo.lock index e9c7c7fb..e60041f2 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3085,9 +3085,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "log", "once_cell", diff --git a/Project.toml b/Project.toml index 421d7422..3b466517 100644 --- a/Project.toml +++ b/Project.toml @@ -2,7 +2,7 @@ # SPDX-FileCopyrightText: 2024-2025 ECHIDNA Project Contributors name = "ECHIDNA" -uuid = "c2e75152-b2c9-4188-ae72-40d8a7dc1cd0" # UUIDv4: Julia package UUIDs are random v4 by ecosystem convention (Pkg.generate); exempt from the estate v7 standard as an externally-defined format +uuid = "e660a1bb-4cb4-887a-8b95-c2e82dfacbb5" # ESTATE-UUID-V8 profile C (ADR-008): SHA-256("julia-package:hyperpolymath/echidna"); unregistered package, so the ID is ours to mint authors = ["ECHIDNA Project Contributors"] version = "0.1.0"