chore(deps): update stranske/workflows digest to 62ed0a8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
stranske/Workflows (changelog)	action	digest	c2537cc → 62ed0a8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow configuration to use an updated version of a system action.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 507de9d6-e9a2-4826-9d7d-6ba07ade97e0

📥 Commits

Reviewing files that changed from the base of the PR and between e1c12f5 and 9e10e06.

📒 Files selected for processing (1)

• .github/workflows/agents-guard.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (4)

{pyproject.toml,.github/workflows/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

{pyproject.toml,.github/workflows/*.{yml,yaml}}: For Python projects with coverage thresholds, ensure both pyproject.toml ([tool.coverage.report] fail_under) and workflow files have matching coverage-min settings, or the lower one will determine the actual threshold
The Manager-Database repository has a coverage threshold of 75%

Files:

• .github/workflows/agents-guard.yml

.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For GitHub Actions workflow startup_failure errors, check for invalid YAML syntax, invalid permissions: block in workflow_call reusable workflows, invalid permission scopes, or circular workflow references

Files:

• .github/workflows/agents-guard.yml

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows in consumer repos with @main unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/agents-guard.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-guard.yml

🔀 Multi-repo context stranske/Workflows

Based on the previous research already completed, I have sufficient context to evaluate this PR. The exploration of the stranske/Workflows repository has provided detailed findings about the setup-api-client action being updated.

Linked Repositories Findings

stranske/Workflows

setup-api-client Action Overview

The setup-api-client GitHub Action [::stranske/Workflows::] is a composite action defined in .github/actions/setup-api-client/action.yml that:

• Installs pinned versions of critical @octokit/* dependencies (rest, auth-app, plugin-retry, plugin-paginate-rest, and lru-cache@10.4.3)
• Exports GitHub API tokens to environment variables (GITHUB_TOKEN, PATs, and GitHub App credentials)
• Provides robust error handling with exponential backoff retries for npm installation failures
• Exports a setup contract in workflows-api-client-setup/v1 schema format

Usage in agents-guard.yml

The PR updates the pinned action reference in .github/workflows/agents-guard.yml [::stranske/Workflows::] at two locations:

1. Line 103 (pull_request_target fallback): Uses stranske/Workflows/.github/actions/setup-api-client@v1 when local action is unavailable in base ref
2. Line 173 (pull_request fallback): Uses stranske/Workflows/.github/actions/setup-api-client@v1 when local action is unavailable in PR head

Impact Assessment

Scope is limited: Only agents-guard.yml uses the stranske/Workflows fallback pattern. All other 70+ workflows reference the action locally (./.github/actions/setup-api-client), so they remain unaffected by this pin update.

No interface changes: The new commit (62ed0a8) is labeled as chore(main): release 1.16.0 (#2478). The action's inputs/outputs and core functionality remain stable—this is a routine release update.

No breaking changes: The setup-api-client action interface is stable across the commit range, so both fallback invocations will continue to work correctly with the new pinned reference.

🔇 Additional comments (1)

.github/workflows/agents-guard.yml (1)

114-114: LGTM!

Both fallback steps are updated consistently to the same commit SHA, maintaining the intentional pin for the cross-repository fallback pattern. Per the linked repository context, the new commit (62ed0a8) is a routine release (1.16.0) with no interface changes or breaking changes, so the action contract remains stable.

Also applies to: 183-183

---

📝 Walkthrough

Walkthrough

Two lines in .github/workflows/agents-guard.yml are updated: the pinned commit SHA for the stranske/Workflows/.github/actions/setup-api-client action is changed from c2537cc959f2ce05926c4639d25b90678abc97bc to 62ed0a86b5d57062ac3d04f4519e3998858e2d96 in both the pull_request_target and pull_request fallback steps.

Changes

Action SHA Bump

Layer / File(s)	Summary
Pinned SHA update for both workflow jobs .github/workflows/agents-guard.yml	The uses: reference for the setup-api-client Workflows fallback step is updated to the new commit SHA in both the pull_request_target (line 114) and pull_request (line 183) jobs.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Ready#338: Both PRs update pinned GitHub Action commit SHAs in workflow YAML files, following the same change pattern though for different actions.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: updating a dependency digest for the stranske/workflows action to a specific commit hash.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/stranske-workflows-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Workflow state fingerprint for Agents Gate Followups. Do not edit.

[stranske-keepalive]

Workflow source needed

PR #362 needs either a linked GitHub issue or one valid non-issue Workflow Source before PR metadata automation can manage it safely.

Please do one of:

• Add <!-- meta:issue:123 --> or a normal Closes #123 / Related to #123 line.
• Check one Workflow Source option in the PR body.
• Add a hidden marker such as <!-- workflow-source:local_request -->, <!-- workflow-source:manual_remote -->, <!-- workflow-source:review_followup -->, <!-- workflow-source:sync_campaign -->, or <!-- workflow-source:dependabot -->.
• Add a workflow source label such as workflow:source-direct-pr, workflow:source-local-request, workflow:source-review-followup, workflow:source-sync, or workflow:no-automation.

Once a valid source is present, this warning will not be reposted.

[github-actions]

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.