From f148255acea0291a8ccfecb43f0f3400cc4ad39e Mon Sep 17 00:00:00 2001 From: cluade-reviewer-andresmgsl Date: Tue, 4 Aug 2026 10:31:03 +0000 Subject: [PATCH] drill(0.4.1): rewrite the self-ref pin to the candidate SHA MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The pure consumer path cannot resolve CEREMONY_SELF_REF: "0.4.1" before the candidate creates that tag, and release.yml's self-checkout is hardcoded to heavy-duty/ceremony — so the pin is rewritten to the candidate SHA, which resolves there today. Drill scaffolding only; this ref is never merged. --- .github/workflows/labels.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml index 6e2b194..56d7fd1 100644 --- a/.github/workflows/labels.yml +++ b/.github/workflows/labels.yml @@ -28,7 +28,7 @@ on: env: # A called workflow arrives without its repository. Keep this literal pin # aligned with the ceremony release consumed by callers (issue #9 D3). - CEREMONY_SELF_REF: "0.4.1" + CEREMONY_SELF_REF: "9a229ee643291c27dbd404fa97e4dcc7e6ed3b17" jobs: scope: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9081740..b6d467e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -129,7 +129,7 @@ env: # `ref:` accepts ${{ env }}; `uses:` strings do not — which is why the # shared logic arrives as script files via checkout, not as inner `uses:` # references. - CEREMONY_SELF_REF: "0.4.1" + CEREMONY_SELF_REF: "9a229ee643291c27dbd404fa97e4dcc7e6ed3b17" VERSION_SOURCE: ${{ inputs.version-source }} jobs: