ci(gate): pin the merge gate, reject unvouched dependency names, correct the provenance claims - #54

Merged

wshallwshall merged 7 commits into

mainfrom

claude/artifact-review-standards-ac2b2a

Jul 29, 2026

Commits on Jul 29, 2026

ci(gate): make the merge gate knowable, and not neuterable in one line
wshallwshall
committed
f534a4f
feat(security): reject a dependency name that PyPI cannot vouch for
wshallwshall
committed
7b224fa
fix(provenance,supply-chain): stop claiming a trailer we do not write; pin the gates' own toolchain
wshallwshall
committed
cb9e459
Bring main (faefa276) in; reconcile the two pinning efforts
wshallwshall
committed
ac355b4
fix(ci,hooks): stop actionlint being a different linter in CI than locally; make the shared pre-commit shim worktree-aware
wshallwshall
committed
4b55406
fix(hooks): stop patching pre-commit's shim; diagnose it instead
wshallwshall
committed
d9973d3
Merge branch 'main' of https://github.com/MEFORORG/MessageFoundry into claude/artifact-review-standards-ac2b2a
wshallwshall
committed
26c47be