Skip to content

fix(ci): retarget standards pin to current main ae8492ae - #115

Merged
hyperpolymath merged 1 commit into
mainfrom
arena/083cd6ac-polyglot-i18n
Nov 1, 2026
Merged

fix(ci): retarget standards pin to current main ae8492ae#115
hyperpolymath merged 1 commit into
mainfrom
arena/083cd6ac-polyglot-i18n

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Oct 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Why

#114 merged. Governance on main is still startup_failure (0 jobs). Annotation on this PR:

The reusable workflow metadatastician/standards/.github/workflows/governance-reusable.yml@… is not allowed in hyperpolymath/polyglot-i18n because all reusable workflows must be from a repository owned by hyperpolymath or match one of the allowlist patterns.

That is why both slugs 0-job: hyperpolymath/standards no longer resolves after the transfer; metadatastician/standards resolves but is not on the allowlist. This token cannot write Actions permissions (403 Resource not accessible by integration).

What this PR does

Retarget the five callers from 7e9b1de (#1381) to current standards main ae8492aefec9166af2c6b9ed8f494082d31c183d (#1378) and close the lock (SHA as ref on the job-level record). Needed anyway so ref: main / HEAD cannot drift.

What you need to do (one setting)

https://github.com/hyperpolymath/polyglot-i18n/settings/actions

Add this pattern (or set “Allow all actions and reusable workflows”):

metadatastician/standards@*

Then re-run Governance on this PR. Jobs should start. I cannot click that with the session token.

@hyperpolymath @arena-agent
fix(ci): retarget standards pin to current main ae8492ae
9351eae 
#114 merged with 7e9b1de and lock ref: main. standards main then moved
(#1378, ae8492ae), so that named ref no longer peels to the pin.
Governance on main is startup_failure (0 jobs).

Repin the five callers to ae8492ae and close the lock. The job-level
record uses the SHA as ref (caller-side reusable exemption in
check-lock-pin-contract).

Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 31, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-01T00:00:25.287000Z 9351eae PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Oct 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Caution

Review failed

The pull request is closed.

Summary

Summary by CodeRabbit

  • Chores
    • Updated the versions used by the repository’s governance, security scanning, mirroring and scorecard checks.

Five GitHub Actions workflow jobs now reference reusable workflows at commit ae8492aefec9166af2c6b9ed8f494082d31c183d instead of the previous commit.

Changes: Reusable workflow pins

Layer / File(s) Summary
Update reusable workflow references
.github/workflows/*.yml		 The governance, Hypatia, mirror, scorecard, and secret scanner jobs now reference commit ae8492aefec9166af2c6b9ed8f494082d31c183d.

Estimated code review effort: 1 (Trivial) | ~4 minutes

Change: Bug fix

Possibly related PRs

Suggested reviewers: metadatastician

Merge Risk: Moderate · up to 9351e

The Scorecard check may not run until the caller grants its required actions permission.

- [ ] Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-actions

github-actions Bot commented Oct 31, 2026

Copy link
Copy Markdown

Benchmark Results

Translation Benchmarks

skipped

Configuration Comparison

skipped

@sonarqubecloud

sonarqubecloud Bot commented Oct 31, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@hyperpolymath
hyperpolymath merged commit db0907c into main Nov 1, 2026
18 of 19 checks passed
@hyperpolymath
hyperpolymath deleted the arena/083cd6ac-polyglot-i18n branch November 1, 2026 00:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath