chore(deps): update stranske/workflows digest to a525e6e

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
stranske/Workflows (changelog)	action	digest	6c3391d → a525e6e

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

📝 Walkthrough

Walkthrough

The pinned commit SHA for the stranske/Workflows/.github/actions/setup-api-client fallback action is updated to 6c3391d38bbc20a4577ac42b9aa6c9dc4e462c09 in two steps within .github/workflows/agents-guard.yml: one in the pull_request_target job and one in the pull_request job.

Changes

SHA Pin Bump for setup-api-client Fallback Action

Layer / File(s)	Summary
Update pinned SHA in both fallback steps .github/workflows/agents-guard.yml	The uses: reference for stranske/Workflows/.github/actions/setup-api-client is changed to the new pinned SHA 6c3391d38bbc20a4577ac42b9aa6c9dc4e462c09 in both the pull_request_target and pull_request fallback steps. No other logic is modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Counter_Risk#757: Performs the same type of change — updating the pinned uses: SHA for stranske/Workflows/.github/actions/setup-api-client in the same two fallback steps of .github/workflows/agents-guard.yml.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title matches the main change: a dependency digest update for stranske/Workflows.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/stranske-workflows-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.

[github-actions]

Workflow state fingerprint for Agents Gate Followups. Do not edit.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/agents-guard.yml:
- Line 114: Remove the local changes made to the agents-guard.yml workflow file
at lines 114 and 183 where you updated the setup-api-client action SHA
reference. These agents-*.yml workflow files must be modified upstream in the
stranske/Workflows repository, not locally in this consumer repository. Make the
SHA bump change in the upstream stranske/Workflows repository instead, and it
will be automatically consumed here when that upstream repository is updated.
Revert this file to match the upstream version without any local modifications
to the GitHub action versions.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 0389ad34-2bec-4b00-ad6a-69a1ea9fdfe5

📥 Commits

Reviewing files that changed from the base of the PR and between cafcdea and a3a8858.

📒 Files selected for processing (1)

• .github/workflows/agents-guard.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Review details

🧰 Additional context used

📓 Path-based instructions (2)

.github/workflows/**/*.yml

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

.github/workflows/**/*.yml: Do not add top-level permissions: block on workflow_call reusable workflows - this conflicts with caller permissions
Avoid invalid YAML syntax, invalid permission scopes, and circular workflow references when creating GitHub Actions workflows

Files:

• .github/workflows/agents-guard.yml

.github/workflows/agents-*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Agent workflow files (agents-*.yml) should be fixed in stranske/Workflows, not edited locally in the consumer repository

agents-*.yml workflow files should be fixed in stranske/Workflows, not edited locally in the consumer repo

Files:

• .github/workflows/agents-guard.yml

[coderabbitai]

📐 Maintainability & Code Quality | 🟠 Major | 🏗️ Heavy lift

Do not modify agents-*.yml in this repository.

Line 114 and Line 183 update an agents-*.yml workflow locally, but these files are required to be changed upstream in stranske/Workflows and then consumed here. Please move this SHA bump to the upstream workflows repo instead of landing it in this consumer repo.

As per coding guidelines, .github/workflows/agents-*.yml workflow files should be fixed in stranske/Workflows, not edited locally in the consumer repo.

Also applies to: 183-183

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/agents-guard.yml at line 114, Remove the local changes
made to the agents-guard.yml workflow file at lines 114 and 183 where you
updated the setup-api-client action SHA reference. These agents-*.yml workflow
files must be modified upstream in the stranske/Workflows repository, not
locally in this consumer repository. Make the SHA bump change in the upstream
stranske/Workflows repository instead, and it will be automatically consumed
here when that upstream repository is updated. Revert this file to match the
upstream version without any local modifications to the GitHub action versions.

Source: Coding guidelines

[agents-workflows-bot]

Workflow source needed

PR #794 needs either a linked GitHub issue or one valid non-issue Workflow Source before PR metadata automation can manage it safely.

Please do one of:

• Add <!-- meta:issue:123 --> or a normal Closes #123 / Related to #123 line.
• Check one Workflow Source option in the PR body.
• Add a hidden marker such as <!-- workflow-source:local_request -->, <!-- workflow-source:manual_remote -->, <!-- workflow-source:review_followup -->, <!-- workflow-source:sync_campaign -->, or <!-- workflow-source:dependabot -->.
• Add a workflow source label such as workflow:source-direct-pr, workflow:source-local-request, workflow:source-review-followup, workflow:source-sync, or workflow:no-automation.

Once a valid source is present, this warning will not be reposted.

[stranske]

Closing as superseded by stranske/Workflows#2522 plus the sync/workflows-db755a28c753 wave. Direct consumer PRs for synced workflow files would create ownership drift.

[stranske]

Superseded by merged Workflows source updates and replacement sync PR #808 from wave sync/workflows-57b9e3dbcb23. Keeping the generated sync PR as the source-of-truth propagation path.