chore(deps): update stranske/workflows digest to a525e6e

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
stranske/Workflows (changelog)	action	digest	6c3391d → a525e6e

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated the repository’s automated workflow setup to use a newer pinned version of the API client action.
  • No changes to user-facing behavior or app functionality.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated the fallback setup-api-client action pin in .github/workflows/agents-guard.yml for both pull_request_target and pull_request workflow paths.

Changes

Workflow fallback action pin update

Layer / File(s)	Summary
Pinned action SHA update .github/workflows/agents-guard.yml	The fallback setup-api-client steps for pull_request_target and pull_request now reference a newer pinned commit SHA.

Sequence Diagram(s)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Fine-Art-Archive#136: Also updates the setup-api-client fallback pin in .github/workflows/agents-guard.yml for the same workflow paths.

Suggested labels

automated

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the workflow action digest update made in this PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/stranske-workflows-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Workflow state fingerprint for Agents Gate Followups. Do not edit.

[github-actions]

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.

[stranske]

Closing as superseded by stranske/Workflows#2522 plus the sync/workflows-db755a28c753 wave. Direct consumer PRs for synced workflow files would create ownership drift.

[agents-workflows-bot]

Workflow source needed

PR #137 needs either a linked GitHub issue or one valid non-issue Workflow Source before PR metadata automation can manage it safely.

Please do one of:

• Add <!-- meta:issue:123 --> or a normal Closes #123 / Related to #123 line.
• Check one Workflow Source option in the PR body.
• Add a hidden marker such as <!-- workflow-source:local_request -->, <!-- workflow-source:manual_remote -->, <!-- workflow-source:review_followup -->, <!-- workflow-source:sync_campaign -->, or <!-- workflow-source:dependabot -->.
• Add a workflow source label such as workflow:source-direct-pr, workflow:source-local-request, workflow:source-review-followup, workflow:source-sync, or workflow:no-automation.

Once a valid source is present, this warning will not be reposted.

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

.github/workflows/agents-guard.yml (1)

109-117: 📐 Maintainability & Code Quality | 🟠 Major | 🏗️ Heavy lift

Route this pin update through the sync source, not this consumer copy.

This workflow is a synced file, so changing the fallback SHA here will create ownership drift and likely be overwritten by the next sync wave. The update needs to land in stranske/Workflows and propagate through sync instead of being merged directly in this repository. As per coding guidelines, "Synced workflows, prompts, scripts, and consumer docs (including agents-*.yml, autofix.yml, .github/codex/ prompts, and synced scripts) are managed through .github/sync-manifest.yml in Workflows and should not be edited locally; fix issues in Workflows instead."

Also applies to: 178-186

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/agents-guard.yml around lines 109 - 117, This is a synced
workflow pin update that should not be changed in the consumer copy. Update the
`Setup API client (Workflows fallback)` action reference in `agents-guard.yml`
via the source repository `stranske/Workflows` and let the sync process
propagate it here. Keep this local file unchanged and apply the fix in the
upstream workflow managed by `.github/sync-manifest.yml`.

Sources: Coding guidelines, Linked repositories

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Outside diff comments:
In @.github/workflows/agents-guard.yml:
- Around line 109-117: This is a synced workflow pin update that should not be
changed in the consumer copy. Update the `Setup API client (Workflows fallback)`
action reference in `agents-guard.yml` via the source repository
`stranske/Workflows` and let the sync process propagate it here. Keep this local
file unchanged and apply the fix in the upstream workflow managed by
`.github/sync-manifest.yml`.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e5ceaf69-76c3-4417-8eac-31e7b798f605

📥 Commits

Reviewing files that changed from the base of the PR and between 957c782 and 43b1179.

📒 Files selected for processing (1)

• .github/workflows/agents-guard.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected) → reviewed against open PR #2539 renovate/stranske-workflows-digest instead of the default branch
• stranske/Template (auto-detected)

📜 Review details

🧰 Additional context used

📓 Path-based instructions (5)

.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

startup_failure in GitHub Actions workflows with zero jobs indicates GitHub couldn't parse the workflow; check for invalid YAML syntax, conflicting permissions: blocks on workflow_call reusable workflows, invalid permission scopes, or circular workflow references

Files:

• .github/workflows/agents-guard.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main by default unless intentionally pinning to an exact commit SHA for a documented reason

Files:

• .github/workflows/agents-guard.yml

{.github/workflows/agents-*.yml,.github/workflows/autofix.yml,.github/codex/**,docs/**}

📄 CodeRabbit inference engine (CLAUDE.md)

Synced workflows, prompts, scripts, and consumer docs are managed through .github/sync-manifest.yml in Workflows and should not be edited locally

Files:

• .github/workflows/agents-guard.yml

**/.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

Reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/agents-guard.yml

{**/.github/workflows/agents-*.yml,.github/workflows/autofix.yml,.github/codex/**,docs/ops/CONSUMER_REPO_MAINTENANCE.md,docs/keepalive/Agents.md}

📄 CodeRabbit inference engine (AGENTS.md)

Synced workflows, prompts, scripts, and consumer docs (including agents-*.yml, autofix.yml, .github/codex/ prompts, and synced scripts) are managed through .github/sync-manifest.yml in Workflows and should not be edited locally; fix issues in Workflows instead.

Files:

• .github/workflows/agents-guard.yml

🔀 Multi-repo context stranske/Template, stranske/Workflows

Linked repositories findings

stranske/Template

• .github/workflows/agents-guard.yml:114,183 still pins stranske/Workflows/.github/actions/setup-api-client@6c3391d38bbc20a4577ac42b9aa6c9dc4e462c09 in the fallback path. This matches the consumer change under review, so the same update is relevant here too. [::stranske/Template::]

stranske/Workflows (inspected on refs/pull/2539/head)

• .github/workflows/agents-guard.yml:103,173 contains the same pinned fallback uses: reference to stranske/Workflows/.github/actions/setup-api-client@6c3391d38bbc20a4577ac42b9aa6c9dc4e462c09. Since this repo is checked out on PR #2539, this pin is present on that PR branch and would only land when that PR merges. [::stranske/Workflows::]

[stranske]

Closing as superseded by the Workflows source update (stranske/Workflows#2539). This file is managed from stranske/Workflows and should be replaced by the next Maint 68 sync wave.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the stranske/Workflows a525e6e update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.