fix(ci): restore reachable standards workflow pins

[hyperpolymath]

Replace the unreachable standards reusable-workflow commit 7fdc2705df74b4e352d2a1cde3e87a5923fdf329 with reachable standards main commit 092dedada188f56c5915f74a5fd40aac093742c3. The old SHA is an intermediate commit from squash-merged standards PR #596: it exists, but GitHub rejects it for cross-repository reusable workflows before creating jobs. This restores Hypatia/SARIF and the other affected workflows without weakening SHA pinning or branch protection. Estate incident: 251 active workflow files across 70 repositories in hyperpolymath and metadatastician.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 7b557115-23d8-4fd8-89fc-1d1f6c9a0a73

📥 Commits

Reviewing files that changed from the base of the PR and between 8643f69 and b560f3d.

📒 Files selected for processing (3)

• .github/workflows/governance.yml
• .github/workflows/mirror.yml
• .github/workflows/spark-theatre-gate.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (24)

• GitHub Check: governance / Security policy checks
• GitHub Check: governance / Exemption ratchet
• GitHub Check: governance / Check Workflow Staleness
• GitHub Check: governance / Allowlist Preflight
• GitHub Check: governance / Workflow security linter
• GitHub Check: governance / Well-Known (RFC 9116 + RSR)
• GitHub Check: governance / Debt ratchet
• GitHub Check: governance / Live Actions policy (credentialed advisory)
• GitHub Check: governance / Trusted-base reduction policy
• GitHub Check: governance / Licence consistency
• GitHub Check: governance / Actions lockfile verify
• GitHub Check: governance / Code quality + docs
• GitHub Check: governance / Guix packaging policy (Nix retired)
• GitHub Check: governance / Language / package anti-pattern policy
• GitHub Check: rust-ci / Detect Cargo.toml
• GitHub Check: scan / gitleaks
• GitHub Check: scan / shell-secrets
• GitHub Check: hypatia / Hypatia Neurosymbolic Analysis
• GitHub Check: scan / rust-secrets
• GitHub Check: cargo test --features git-integration
• GitHub Check: spark-theatre-gate / SPARK Theatre Gate
• GitHub Check: idris2 0.8.0 --build git-reticulator-proofs
• GitHub Check: estate-audit
• GitHub Check: CodeQL Analysis (actions, none)

🔇 Additional comments (3)

.github/workflows/governance.yml (1)

35-35: LGTM!

.github/workflows/mirror.yml (1)

15-15: LGTM!

.github/workflows/spark-theatre-gate.yml (1)

19-19: LGTM!

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Updated automated governance checks to use the latest approved workflow version.
  • Refreshed mirroring automation to maintain compatibility with the current shared workflow.
  • Updated SPARK Theatre Gate automation to use the latest approved workflow version.
  • These maintenance updates keep repository checks and automated processes aligned with current standards.

Walkthrough

Three GitHub Actions workflows update their pinned reusable workflow commit references. The governance, mirror, and SPARK Theatre Gate workflows now use commit 092dedada188f56c5915f74a5fd40aac093742c3.

Changes

Reusable workflow pin updates

Layer / File(s)	Summary
Repin reusable workflows .github/workflows/governance.yml, .github/workflows/mirror.yml, .github/workflows/spark-theatre-gate.yml	The three reusable workflow references now use commit 092dedada188f56c5915f74a5fd40aac093742c3 instead of 7fdc2705df74b4e352d2a1cde3e87a5923fdf329.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to b560f

The affected governance, mirror, and SPARK Theatre workflows now use the updated pinned standards commit, restoring reusable workflow resolution without changing workflow behavior or permissions.

Poem

A rabbit checks each workflow pin
The newer commit hops right in
Governance joins the mirrored trail
Theatre Gate follows without fail
Three tidy lines now point ahead

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description clearly explains the workflow pin updates, the unreachable commit, the replacement commit, and the intended restoration of affected workflows.
Title check	✅ Passed	The title clearly summarises the main change: restoring reachable pins for standards workflows.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}