From b7c4d03b5d7aa8b9699ec85db5be7f7d88e8f832 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?= Date: Wed, 14 Oct 2026 16:42:44 -0300 Subject: [PATCH 1/2] fix(wiki): pin the merged reusable workflow revision --- .github/workflows/wiki.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/wiki.yml b/.github/workflows/wiki.yml index 2d6122b..f37625e 100644 --- a/.github/workflows/wiki.yml +++ b/.github/workflows/wiki.yml @@ -11,4 +11,4 @@ permissions: jobs: wiki: - uses: php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml@c44339acd9b09b1a7f2249cceb8928e5e93cf42b # dev-tools#366 + uses: php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml@c637e7f9d8ae6059b8655996e56f6d17f874792c # dev-tools#366 (merged) From 8585d5b2bc765e1aed748d3b117c74730753e01b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?= Date: Wed, 14 Oct 2026 16:45:59 -0300 Subject: [PATCH 2/2] docs(changelog): record stable Wiki workflow pin --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1338565..f6385c8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed +- Pin Wiki publication to the merged DevTools workflow so a squash merge cannot invalidate its source revision. (#8) - Mirror verified Dependabot push test outcomes through a separate completion workflow so required statuses are available with the bot's restricted token. - Allow the isolated CI status publisher to read workflow job outcomes without granting write permissions to test jobs.