chore(deps): update stranske/workflows digest to 62ed0a8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
stranske/Workflows (changelog)	action	digest	c2537cc → 62ed0a8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

📝 Walkthrough

Walkthrough

The pinned commit SHA for stranske/Workflows/.github/actions/setup-api-client is updated from c2537cc959f2ce05926c4639d25b90678abc97bc to 62ed0a86b5d57062ac3d04f4519e3998858e2d96 in both the pull_request_target and pull_request "Workflows fallback" steps of agents-guard.yml.

Changes

Action SHA Bump

Layer / File(s)	Summary
setup-api-client SHA bump for both jobs .github/workflows/agents-guard.yml	Updates the pinned uses SHA for the "Setup API client (Workflows fallback)" step in both the pull_request_target job (line 114) and the pull_request job (line 183) to 62ed0a86b5d57062ac3d04f4519e3998858e2d96.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Template#834: Updates the same setup-api-client fallback step SHA in agents-guard.yml for both pull_request_target and pull_request jobs.
• stranske/Template#841: Also bumps the pinned stranske/Workflows/.github/actions/setup-api-client SHA in the same two fallback steps of agents-guard.yml.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: a dependency update to the stranske/workflows GitHub Action digest.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/stranske-workflows-digest

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[agents-workflows-bot]

Automated Status Summary

Head SHA: ee87b50
Latest Runs: ⏳ pending — Gate
Required: core tests (3.12): ⏳ pending, core tests (3.13): ⏳ pending, docker smoke: ⏳ pending, gate: ⏳ pending

Workflow / Job	Result	Logs
(no jobs reported)	⏳ pending	—

Coverage Overview

• Coverage history entries: 0

Updated automatically; will refresh on subsequent CI/Docker completions.

---

Keepalive checklist

Scope

No scope information available

Tasks

• No tasks defined

Acceptance criteria

• No acceptance criteria defined

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/agents-guard.yml:
- Line 114: The agents-guard.yml workflow file is a synced copy that should not
be directly modified in this consumer repository. The SHA bump at line 114 for
the setup-api-client action and the related change at line 183 must be reverted
from this file and instead applied to the canonical source in the
stranske/Workflows repository. Remove these direct modifications from
agents-guard.yml, then apply the same changes to the corresponding workflow file
in stranske/Workflows so the updates propagate back to this consumer repo
through the proper sync mechanism.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: eb5752d9-ede4-486e-ad8e-89646a1da986

📥 Commits

Reviewing files that changed from the base of the PR and between f908778 and 952198a.

📒 Files selected for processing (1)

• .github/workflows/agents-guard.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: summary

🧰 Additional context used

📓 Path-based instructions (4)

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

.github/workflows/**/*.{yml,yaml}: Ensure coverage threshold settings in GitHub Actions workflow files for coverage-min match the [tool.coverage.report] fail_under setting in pyproject.toml, as the lower value will be the effective threshold
For startup_failure in GitHub Actions workflows with zero jobs, check for invalid YAML syntax, top-level permissions: blocks in workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/agents-guard.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-guard.yml

.github/workflows/**/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-guard.yml

.github/workflows/agents-*.yml

📄 CodeRabbit inference engine (AGENTS.md)

Agent workflows (agents-*.yml), autofix.yml, synced prompts in .github/codex/, and synced scripts/docs should be fixed in stranske/Workflows, not in the consumer repository

Files:

• .github/workflows/agents-guard.yml

[coderabbitai]

⚠️ Potential issue | 🟠 Major | 🏗️ Heavy lift

Route this SHA bump through the source workflow repository, not this consumer copy.

Line 114 and Line 183 modify an agents-*.yml workflow in the consumer repo, which violates the sync ownership rule and risks drift from the canonical workflow source.

As per coding guidelines: "Agent workflows (agents-*.yml), autofix.yml, synced prompts in .github/codex/, and synced scripts/docs should be fixed in stranske/Workflows, not in the consumer repository".

Also applies to: 183-183

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/agents-guard.yml at line 114, The agents-guard.yml
workflow file is a synced copy that should not be directly modified in this
consumer repository. The SHA bump at line 114 for the setup-api-client action
and the related change at line 183 must be reverted from this file and instead
applied to the canonical source in the stranske/Workflows repository. Remove
these direct modifications from agents-guard.yml, then apply the same changes to
the corresponding workflow file in stranske/Workflows so the updates propagate
back to this consumer repo through the proper sync mechanism.

Source: Coding guidelines