chore(deps): update stranske/workflows digest to 44965d8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
stranske/Workflows (changelog)	action	digest	62ed0a8 → 44965d8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 9d2a63f8-d289-4357-a281-0b9ee6357cad

📥 Commits

Reviewing files that changed from the base of the PR and between 746a820 and 4cbe364.

📒 Files selected for processing (1)

• .github/workflows/agents-guard.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)
• stranske/Template (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (4)

**/.github/workflows/**/!(*.md)

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For workflow_call reusable workflows, do not use top-level permissions: block as it conflicts with caller permissions (documented in docs/INTEGRATION_GUIDE.md)

Files:

• .github/workflows/agents-guard.yml

**/.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For startup_failure in workflows with zero jobs, check for invalid YAML syntax, invalid permission scopes, top-level permissions block on workflow_call, or circular workflow references

Files:

• .github/workflows/agents-guard.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

.github/workflows/*.yml: In this consumer repository, keep most workflow logic in stranske/Workflows and only carry repo-specific configuration unless explicitly documented as an exception
First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Reference reusable workflows with @main in first-party consumers unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-guard.yml

.github/workflows/agents-*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Agent workflow files (agents-*.yml) are owned by Workflows; fix issues in stranske/Workflows, not in this consumer repo

Files:

• .github/workflows/agents-guard.yml

🔀 Multi-repo context stranske/Workflows, stranske/Template

Linked Repositories Findings

stranske/Workflows [::stranske/Workflows::]

Action Being Pinned:

• The setup-api-client composite action is located at .github/actions/setup-api-client/action.yml (572 lines)
• Primary responsibilities:
  • Installs @octokit dependencies at pinned versions: @octokit/rest@20.0.2, @octokit/plugin-retry@6.0.1, @octokit/plugin-paginate-rest@9.1.5, @octokit/auth-app@6.0.3, lru-cache@10.4.3
  • Exports GitHub API tokens and credentials to environment variables
  • Generates setup contract (schema: workflows-api-client-setup/v1) with dependency state and auth modes

Version Update Context:

• New commit 44965d8d784573c119fb63828c05c89256c5f3e1 = v1.17.0 (released 2026-06-23)
• Per CHANGELOG.md, v1.17.0 contains: design system graduation into consumer sync, langsmith fleet registry updates, and various bug fixes
• No breaking changes documented in v1.17.0 release notes
• No explicit setup-api-client action changes mentioned in release notes

Fallback Usage Pattern:

• .github/workflows/agents-guard.yml uses setup-api-client in two conditional fallback steps (lines 103, 173)
• Fallback triggers when consumer repo's local .github/actions/setup-api-client/action.yml is unavailable
• Pattern: uses: "stranske/Workflows/.github/actions/setup-api-client@{commit-sha}"

stranske/Template [::stranske/Template::]

Consumer Impact:

• .github/workflows/agents-guard.yml contains identical fallback pattern (lines 114, 183)
• Currently pinned to old commit 62ed0a86b5d57062ac3d04f4519e3998858e2d96
• Maintains local copy of setup-api-client in .github/actions/setup-api-client/action.yml
• Template repo's agents-guard.yml is synced to consumer repositories via sync-manifest

Compatibility Assessment:

• No API signature changes to the action detected between versions
• Action inputs, outputs, and contract structure remain consistent
• Fallback mechanism ensures consumers using local setup-api-client are unaffected
• This is a routine version pin update with no migration requirements

🔇 Additional comments (1)

.github/workflows/agents-guard.yml (1)

114-114: LGTM!

Also applies to: 183-183

---

📝 Walkthrough

Walkthrough

The pinned commit SHA for the stranske/Workflows/.github/actions/setup-api-client fallback action in .github/workflows/agents-guard.yml is updated from 62ed0a86b5d57062ac3d04f4519e3998858e2d96 to 44965d8d784573c119fb63828c05c89256c5f3e1 in both the pull_request_target and pull_request event paths.

Changes

Action Pin Bump

Layer / File(s)	Summary
Bump setup-api-client SHA in both event paths .github/workflows/agents-guard.yml	Updates the fallback uses: commit SHA for stranske/Workflows/.github/actions/setup-api-client from 62ed0a86… to 44965d8d… in both the pull_request_target (line 114) and pull_request (line 183) workflow paths.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Manager-Database#1197: Performs the same type of fallback setup-api-client commit SHA pin update in the same workflow file.
• stranske/Manager-Database#1213: Directly targets the same setup-api-client fallback uses: SHA change in .github/workflows/agents-guard.yml.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating a dependency digest for stranske/workflows from one commit SHA to another.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/stranske-workflows-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske]

Closed as superseded by stranske/Workflows#2511. This PR edits managed .github/workflows/agents-guard.yml directly; the source-owned fix updates the Workflows root/template pair and should be propagated by Maint 68 sync instead.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the stranske/Workflows 44965d8 update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.