chore(deps): bump OMT-Global/bootstrap/.github/workflows/release-preflight-reusable.yml from d9c5bc7e50f4bcc97e4b4d3d2efc64e4ab3dca50 to 05296606785553deb8f36e4f18313076dfc9646d

[dependabot]

Bumps OMT-Global/bootstrap/.github/workflows/release-preflight-reusable.yml from d9c5bc7 to 0529660.

Changelog

Sourced from OMT-Global/bootstrap/.github/workflows/release-preflight-reusable.yml's changelog.

Governed Release Train

This repository uses release maturity level governed.

Manual Flow

1. Open a release train issue with .github/ISSUE_TEMPLATE/release_train.yml.
2. Create or update the release/{major}.{minor} release branch.
3. Run Release Preflight with the candidate version, channel, target ref, and release issue.
4. Copy the successful preflight run ID into the release issue.
5. Run Full Release Validation against the same target ref.
6. Copy the successful validation run ID into the release issue.
7. Create the exact release tag only after validation evidence exists.
8. Run Release Publish with the tag, preflight run ID, validation run ID, channel, and release issue.
9. Run or review Release Postpublish, then close or supersede the release issue.

Publish must consume the artifact bundle proven by preflight. If the preflight artifact cannot be downloaded or its recorded target SHA differs from the tag SHA, publish must fail instead of rebuilding.

Customization

Repo-specific behavior belongs in these hook scripts:

• scripts/release/prep.sh
• scripts/release/preflight.sh
• scripts/release/validate.sh
• scripts/release/build.sh
• scripts/release/publish.sh
• scripts/release/postpublish.sh

The generated defaults do not require secrets and do not publish external packages.

Commits

• 0529660 feat: project public security controls (#100)
• 1cf61f6 feat: complete conformance engine (#99)
• f12ba4a feat: add report-first issue hygiene (#98)
• e0dbbc7 feat: report stable license conformance (#97)
• e45df60 feat: add explicit licensing policy foundation (#96)
• 39af966 Request autoreview access before implementation (#94)
• 3d2f360 feat: add secure webhook delivery transport (#93)
• fc12033 test: restore conformance warning fixture (#89)
• 415b359 feat: project public security policy (#88)
• 31fbd79 fix: enforce generated ownership sidecar (#87)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[athena-omt]

The workflow pin update is correctly limited to .github/workflows/release-preflight.yml, is based directly on current main (0529660), and targeted release-workflow tests plus action-pin validation pass. However, this head is not merge-ready: Validate PR Description fails because the Dependabot body lacks the required governance sections/link/validation/auto-merge evidence, and Validate PR Governance fails PRS-MATERIAL-001 because it lacks Material change: yes or Material change: no. CI Gate is therefore failing and auto-merge is unset. Pheidon control-plane: update the PR body with the required governance evidence (including Material change: no for this two-line pin update), enable auto-merge if repository policy permits, and wait for fresh CI before re-review.

[athena-omt]

Approved for the current head. The Dependabot-specific conditions bypass only the human PR-description and governance metadata checks; Fast Checks, secret scanning, action-pin validation, and CI Gate passed. The reusable release-workflow pin advances to current main. Verified in the exact-head Athena-node checkout with npm run check. Auto-merge is currently unset; the Pheidon control-plane finalizer should enable it if repository policy permits.

[athena-omt]

Approved for the current head. Exact-head review confirmed the three-line workflow diff, immutable reusable-workflow SHA, and confined Dependabot metadata exemption; Fast Checks, secret scanning, action-pin validation, and CI Gate remain successful. Local action-pin and diff checks passed, and TypeScript typecheck passed. The PR is clean against current main with auto-merge enabled.

[pheidon]

Superseded by merged replacement PR #111 (36de935). Closing this obsolete dependency branch so the queue reflects the canonical consolidated refresh.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.