From f1c86ea40d96a1c2df576dadf6c005b5e5f6d417 Mon Sep 17 00:00:00 2001
From: Branimir Rakic <33914812+branarakic@users.noreply.github.com>
Date: Fri, 24 Apr 2026 23:32:40 +0200
Subject: [PATCH] Pin dkg-hello-world commit to the v0.1.0 release SHA
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The entry previously pinned cb6af61 (the commit that added the publish
workflow). The actual @origintrail-official/dkg-hello-world@0.1.0
artifact on npm was built from aa0a3c2, which is the merge commit of
the scope rename (OriginTrail/dkg-hello-world#1) and the ref tagged
as v0.1.0.

Update the pin so the registry entry points at the exact source commit
that produced the published, provenance-attested tarball.

Verification:
  https://www.npmjs.com/package/@origintrail-official/dkg-hello-world/v/0.1.0
  Attestation → Source commit: aa0a3c28431723a986797ea040901eb3e75d4cf3

Made-with: Cursor
---
 integrations/dkg-hello-world.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/integrations/dkg-hello-world.json b/integrations/dkg-hello-world.json
index 92f3e81..fc6d7fe 100644
--- a/integrations/dkg-hello-world.json
+++ b/integrations/dkg-hello-world.json
@@ -10,7 +10,7 @@
     "name": "OriginTrail Core Developers"
   },
   "repo": "https://github.com/OriginTrail/dkg-hello-world",
-  "commit": "cb6af61a26b31be12ca9ff55a72af7442afe9c6b",
+  "commit": "aa0a3c28431723a986797ea040901eb3e75d4cf3",
   "license": "Apache-2.0",
   "requiresDkgNodeVersion": ">=10.0.0-rc.1",
   "memoryLayers": ["WM"],