chore(deps): update stranske/workflows digest to a335f1a

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
stranske/Workflows (changelog)	action	digest	62ed0a8 → a335f1a

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 8cae70e2-740b-45cc-839a-7c0d22f9122d

📥 Commits

Reviewing files that changed from the base of the PR and between 9fd629b and 54a0a9f.

📒 Files selected for processing (1)

• .github/workflows/agents-guard.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)
• stranske/Template (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (4)

**/.github/workflows/**/!(*.md)

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For workflow_call reusable workflows, do not use top-level permissions: block as it conflicts with caller permissions (documented in docs/INTEGRATION_GUIDE.md)

Files:

• .github/workflows/agents-guard.yml

**/.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For startup_failure in workflows with zero jobs, check for invalid YAML syntax, invalid permission scopes, top-level permissions block on workflow_call, or circular workflow references

Files:

• .github/workflows/agents-guard.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

.github/workflows/*.yml: In this consumer repository, keep most workflow logic in stranske/Workflows and only carry repo-specific configuration unless explicitly documented as an exception
First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Reference reusable workflows with @main in first-party consumers unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-guard.yml

.github/workflows/agents-*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Agent workflow files (agents-*.yml) are owned by Workflows; fix issues in stranske/Workflows, not in this consumer repo

Files:

• .github/workflows/agents-guard.yml

🔇 Additional comments (1)

.github/workflows/agents-guard.yml (1)

114-114: LGTM!

The SHA updates for stranske/Workflows/.github/actions/setup-api-client are consistent across both the pull_request_target and pull_request event jobs. The intentional pinning to an exact commit SHA is appropriate for this fallback action pattern and aligns with the controlled dependency-update approach.

Also applies to: 183-183

---

📝 Walkthrough

Walkthrough

The pinned commit hash for the stranske/Workflows/.github/actions/setup-api-client action in .github/workflows/agents-guard.yml is updated in two places: the "Setup API client (Workflows fallback)" step under both the pull_request_target and pull_request event jobs.

Changes

Agents Guard Workflow Action Pin Update

Layer / File(s)	Summary
Update setup-api-client SHA for both event triggers .github/workflows/agents-guard.yml	Replaces the pinned commit SHA on the uses: reference for stranske/Workflows/.github/actions/setup-api-client in both the pull_request_target job (line 114) and the pull_request job (line 183). No logic, conditions, or inputs are changed.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Manager-Database#1197: Identical change — updates the same setup-api-client digest in .github/workflows/agents-guard.yml for both Workflows fallback steps.
• stranske/Manager-Database#1198: Same pattern — hash-only bump to stranske/Workflows/.github/actions/setup-api-client in the same workflow file and same two steps.
• stranske/Manager-Database#1213: Directly analogous — updates the uses: commit SHA for the same "Setup API client (Workflows fallback)" step in agents-guard.yml.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating a dependency digest for stranske/Workflows from one hash to another.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/stranske-workflows-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske]

Closing as superseded by Workflows source fix #2514 plus the next Maint 68 sync wave; this PR patches a managed agents-guard.yml copy directly.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the stranske/Workflows a335f1a update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.