From 28e4d2106d59e5813e3ec58ffebb78baf618450b Mon Sep 17 00:00:00 2001
From: Jonah Beckford <9566106-jonahbeckford@users.noreply.gitlab.com>
Date: Wed, 5 Aug 2026 04:50:12 -0700
Subject: [PATCH 1/2] Pin pages.yml actions for the Actions allowlist

The GitHub Pages workflow referenced actions that are not on the
repository's curated Actions allowlist (and stale checkout/setup-ocaml
versions), so it failed at startup once Actions was enabled.

+ pin actions/configure-pages to v6.0.0 (SHA)
+ pin actions/upload-pages-artifact to v5.0.0 (SHA)
+ pin actions/deploy-pages to v5.0.0 (SHA)
+ bump actions/checkout to the allowlisted @v6
+ pin ocaml/setup-ocaml to the allowlisted v3 SHA

Signed-off-by: Jonah Beckford <9566106-jonahbeckford@users.noreply.gitlab.com>
---
 .github/workflows/pages.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 24f12b4..6f09c7d 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -25,10 +25,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: OCaml 4.14.x
-        uses: ocaml/setup-ocaml@v3
+        uses: ocaml/setup-ocaml@57d9aa353e8d39677b1b9fc39637d48f27fe4a91 # v3
         with:
           ocaml-compiler: 4.14.x
 
@@ -39,13 +39,13 @@ jobs:
         run: opam exec -- dune build @doc
 
       - name: Set-up Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         with:
           path: _build/default/_doc/_html
 
       - name: Deploy odoc to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

From 7aa06cad7fd5c0f5995d94bcde1d0539838830ba Mon Sep 17 00:00:00 2001
From: Jonah Beckford <9566106-jonahbeckford@users.noreply.gitlab.com>
Date: Wed, 5 Aug 2026 04:50:13 -0700
Subject: [PATCH 2/2] Use (latest) in x-maintenance-intent

The opam maintenance-intent placeholder for "the newest version" is
`(latest)` (parenthesized), matching the form already published for
dkml-c-probe.3.2.0 in opam-repository. The bare `latest` was a literal
version string rather than the placeholder.

Signed-off-by: Jonah Beckford <9566106-jonahbeckford@users.noreply.gitlab.com>
---
 dkml-c-probe.opam          | 2 +-
 dkml-c-probe.opam.template | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dkml-c-probe.opam b/dkml-c-probe.opam
index ec040f9..f2c27da 100644
--- a/dkml-c-probe.opam
+++ b/dkml-c-probe.opam
@@ -36,4 +36,4 @@ build: [
 # Please upgrade if there is a patch version for a minor release;
 # the patch generally means there was an important bug fix.
 # Also the latest version is maintained.
-x-maintenance-intent: ["latest" "4.(any).(latest)" "3.(any).(latest)"]
+x-maintenance-intent: ["(latest)" "4.(any).(latest)" "3.(any).(latest)"]
diff --git a/dkml-c-probe.opam.template b/dkml-c-probe.opam.template
index 0b56a44..1461fb4 100644
--- a/dkml-c-probe.opam.template
+++ b/dkml-c-probe.opam.template
@@ -12,4 +12,4 @@ build: [
 # Please upgrade if there is a patch version for a minor release;
 # the patch generally means there was an important bug fix.
 # Also the latest version is maintained.
-x-maintenance-intent: ["latest" "4.(any).(latest)" "3.(any).(latest)"]
+x-maintenance-intent: ["(latest)" "4.(any).(latest)" "3.(any).(latest)"]