From 7d4c1882880c98b68edcad8524daaa5c5a93aa41 Mon Sep 17 00:00:00 2001
From: rldyourmnd <danil@nddev.it.com>
Date: Mon, 21 Sep 2026 14:34:59 +0500
Subject: [PATCH] chore(release): 0.1.25

Fold the workflow_call local-action guard and the 2026-09-21 tool refresh into release 0.1.25.
---
 CHANGELOG.md | 7 +++++++
 VERSION      | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 27ef6c6..504f156 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,13 @@ The project follows Semantic Versioning.
 
 ## [Unreleased]
 
+## [0.1.25] - 2026-09-21
+
+- **Refuse `./action` refs inside `workflow_call` workflows.** `./` in a
+  called workflow resolves against the caller's workspace, never this
+  repository's, so `uses: ./actions/x` in a reusable fails at job setup for
+  every cross-repository consumer. `check_pinned_actions.py` now rejects the
+  pattern; the affected workflows were repaired in 0.1.24.
 - **Scheduled tool refresh, 2026-09-21.** Bumped twelve action pins and three
   CLI pins to their current upstream releases: codeql-action v4.38.1,
   setup-android v4.0.4, setup-r v2.14.0, codecov-action v7.1.1, typos
diff --git a/VERSION b/VERSION
index 5a48b6b..0e7400f 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.1.24
+0.1.25