From 41bc6546aeb2a7aa39ed4ad76788eaeb6e76edc0 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 15 May 2026 21:07:53 +0000 Subject: [PATCH 1/2] ci: trigger verification run of hypatia-scan setup-beam pins No-op comment to exercise the corrected elixir 1.18 / otp 27 pins in a PR context and confirm the Hypatia dogfooding job is green. https://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn --- .github/workflows/hypatia-scan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 84de183..06ba515 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -34,6 +34,7 @@ jobs: # the dogfooding job red estate-wide regardless of PR content. # Major/minor (loose) so patch availability cannot re-break it. # Bump deliberately to whatever Hypatia's scanner actually requires. + # (no-op touch to trigger a verification run of these pins) elixir-version: '1.18' otp-version: '27' From 94bb85da54ea22b066f9ae5e6d8545763c59b8a7 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 15 May 2026 21:11:02 +0000 Subject: [PATCH 2/2] ci(hypatia-scan): repin actions/checkout to the repo-wide known-good SHA MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Real root cause of the dogfooding fast-fail: this workflow alone pinned actions/checkout@34e114876b… (used by no other workflow); the job died ~12s at the first step regardless of content or setup-beam pins. Repin to actions/checkout@de0fac2e… as used by every other passing workflow. https://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn --- .github/workflows/hypatia-scan.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 06ba515..8e821ea 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -21,7 +21,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + # Repinned from 34e114876b… (unique to this workflow, job fast-failed + # ~12s at this first step) to the SHA used by every other passing + # workflow in the repo. The setup-beam pins were a red herring. + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4 with: fetch-depth: 0