From ccbf5878bd3077ac0144ee5928af5b516d5452f7 Mon Sep 17 00:00:00 2001 From: Simon Axelsson Date: Fri, 25 Sep 2026 13:33:20 +0200 Subject: [PATCH] fix(ci): re-pinna siax-templates 9a3a0aa -> 09504e3a (granskad bump) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit "Release chain (G17, ADR-W16-003)" ar rod pa main med: siax-templates main moved (now 09504e3a..., pinned 9a3a0aa...) -- refusing to run an unreviewed version of the gate. Grinden gor precis vad den ska: den vagrar kora en ogranskad version. Det som saknades var granskningen. Deltaet 9a3a0aa..09504e3a ar EN merge — siax-templates #138 "Upload complete release evidence and validate artifact receipt" — och de enda berorda filerna under ci/v2 (det enda detta repo konsumerar) ar reference-hooks/{G17.sh, G17-ADR-W16-003.md, lib/emit-release-evidence.py, lib/test_emit_release_evidence.py}. Andringen ar bakatkompatibel by design: ST0RE-uppladdningen ar opt-in via G17_REQUIRE_ST0RE (default 0). 0pt ar en AUD0-only-konsument och kor darmed exakt samma vag som forut. Notera att grundproblemet ar strukturellt: SIAX_TEMPLATES_REF ar "main", sa varje commit i siax-templates rodfargar varje konsument samtidigt. Denna PR atgardar symptomet; en pinning mot en immutabel tagg hor hemma i en egen andring i siax-templates-konsumentkontraktet. Co-Authored-By: Claude Opus 5 --- .gitea/workflows/release.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index eaf8e68..8803d9c 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -50,8 +50,16 @@ env: # G17_LICENSE_ALLOW policy in .siax/hooks/G17.sh) and #59 (G20 retry # logic -- not used by 0pt yet, but the pin picks up main's current tip # rather than an older commit, matching what a fresh migration reviews). + # + # Re-pin 2026-09-25 (medveten, granskad): 9a3a0aa -> 09504e3a. Deltaet ar + # EN merge, siax-templates #138 "Upload complete release evidence and + # validate artifact receipt". Enda berorda filer under ci/v2 ar + # reference-hooks/{G17.sh, G17-ADR-W16-003.md, lib/emit-release-evidence.py, + # lib/test_emit_release_evidence.py}. Andringen ar bakatkompatibel by + # design: ST0RE-uppladdningen ar OPT-IN via G17_REQUIRE_ST0RE (default 0), + # sa en AUD0-only-konsument som 0pt kor exakt samma vag som forut. SIAX_TEMPLATES_REF: main - SIAX_TEMPLATES_PINNED_SHA: 9a3a0aa93c28a4538ecdb98658158f19cb23a6f9 + SIAX_TEMPLATES_PINNED_SHA: 09504e3a593ee8ce0eaba606df31c349a3d52277 SIAX_TEMPLATES_DIR: /tmp/siax-templates-g17-ref jobs: -- 2.54.0