From 748ff7445018110ec8b499815404c2cf13586c99 Mon Sep 17 00:00:00 2001
From: Pigbibi <20649888+Pigbibi@users.noreply.github.com>
Date: Sat, 7 Nov 2026 20:37:31 +0800
Subject: [PATCH] =?UTF-8?q?ci(governance):=20=E6=9B=B4=E6=96=B0=E7=BB=9F?=
 =?UTF-8?q?=E4=B8=80=E9=97=A8=E7=A6=81=20pin?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/codex-nudge.yml      | 4 ++--
 .github/workflows/gitleaks.yml         | 4 ++--
 .github/workflows/pr-review-signal.yml | 2 +-
 .github/workflows/risk-gate.yml        | 6 +++---
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/codex-nudge.yml b/.github/workflows/codex-nudge.yml
index dfd06e4..27e5c28 100644
--- a/.github/workflows/codex-nudge.yml
+++ b/.github/workflows/codex-nudge.yml
@@ -1,4 +1,4 @@
-# Shared governance action: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d.
+# Shared governance action: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466.
 # Keep the job names; they are required status check contexts.
 
 name: Review request
@@ -24,6 +24,6 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Request
-        uses: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d
+        uses: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466
         with:
           mode: nudge
diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 7ead53a..24a6d0c 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -1,4 +1,4 @@
-# Shared governance action: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d.
+# Shared governance action: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466.
 # Keep the job names; they are required status check contexts.
 
 name: Secret scan
@@ -22,6 +22,6 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Scan added commits
-        uses: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d
+        uses: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466
         with:
           mode: scan
diff --git a/.github/workflows/pr-review-signal.yml b/.github/workflows/pr-review-signal.yml
index e01cc53..55e94af 100644
--- a/.github/workflows/pr-review-signal.yml
+++ b/.github/workflows/pr-review-signal.yml
@@ -1,4 +1,4 @@
-# Shared governance action: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d.
+# Shared governance action: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466.
 # Keep the job names; they are required status check contexts.
 
 name: PR review signal
diff --git a/.github/workflows/risk-gate.yml b/.github/workflows/risk-gate.yml
index a9e412a..b99c84e 100644
--- a/.github/workflows/risk-gate.yml
+++ b/.github/workflows/risk-gate.yml
@@ -1,4 +1,4 @@
-# Shared governance action: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d.
+# Shared governance action: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466.
 # Keep the job names; they are required status check contexts.
 
 name: PR risk gate
@@ -50,7 +50,7 @@ jobs:
       statuses: write
     steps:
       - name: Record label head
-        uses: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d
+        uses: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466
         env:
           GOVERNANCE_OWNER_ID: ${{ vars.RISK_GATE_OWNER_ID }}
           GOVERNANCE_OWNER_LOGIN: ${{ vars.RISK_GATE_OWNER }}
@@ -82,7 +82,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Evaluate
-        uses: GdeiAssistant/.github/pr-governance@8c0acac64cf24f9e31484dcd6bff87e2e22c962d
+        uses: GdeiAssistant/.github/pr-governance@b25f3dd3e5c78905c2302b342af984f6ef186466
         env:
           GOVERNANCE_OWNER_ID: ${{ vars.RISK_GATE_OWNER_ID }}
           GOVERNANCE_OWNER_LOGIN: ${{ vars.RISK_GATE_OWNER }}