From 3bc4a5b733e2aa2166f9ab01906b83d284f1ded3 Mon Sep 17 00:00:00 2001 From: forkwright Date: Sat, 15 Aug 2026 15:19:56 -0500 Subject: [PATCH 1/2] fix(lint-ignore): re-glob dictyon control/noise pub-visibility entries RUST/pub-visibility:crates/dictyon/src/control.rs and .../noise.rs stopped matching once both modules split into control/mod.rs and noise/mod.rs, the same split wire.rs already uses (whose own ignore entry is already a glob). The stale entries matched no file and silently suppressed nothing; kanon lint warned about both on every run. --- .kanon-lint-ignore | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.kanon-lint-ignore b/.kanon-lint-ignore index fcbb18c..aabdfd8 100644 --- a/.kanon-lint-ignore +++ b/.kanon-lint-ignore @@ -28,8 +28,8 @@ RUST/pub-visibility:crates/mitos/src/config/** # the future histos coordination server. These items are library API by design — the # pub modules in lib.rs re-export them. Narrowing to pub(crate) would break both the # example and the integration test, which live in separate compilation units. -RUST/pub-visibility:crates/dictyon/src/control.rs -RUST/pub-visibility:crates/dictyon/src/noise.rs +RUST/pub-visibility:crates/dictyon/src/control/** +RUST/pub-visibility:crates/dictyon/src/noise/** RUST/pub-visibility:crates/dictyon/src/transport.rs RUST/pub-visibility:crates/dictyon/src/wire/** From 9848294828e1555a58a52ef81d16d274db91498e Mon Sep 17 00:00:00 2001 From: forkwright Date: Sat, 15 Aug 2026 15:20:30 -0500 Subject: [PATCH 2/2] fix(gate-attestation): pin hybrid-gate.yml call to a commit SHA --- .github/workflows/gate-attestation.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gate-attestation.yml b/.github/workflows/gate-attestation.yml index e145ad8..87629c1 100644 --- a/.github/workflows/gate-attestation.yml +++ b/.github/workflows/gate-attestation.yml @@ -85,7 +85,12 @@ permissions: jobs: gate: - uses: forkwright/.github/.github/workflows/hybrid-gate.yml@main + # WHY pinned to a commit SHA, not @main: a mutable branch ref lets the + # remote workflow's behavior change under an already-merged hamma + # commit. Refresh via: + # gh api repos/forkwright/.github/commits/main --jq '.sha' + # and review the diff at forkwright/.github before bumping. + uses: forkwright/.github/.github/workflows/hybrid-gate.yml@df92942bcc41cc7ffd0339b75b2f01e52269d0ef # main with: # WHY defaults kept as-is: hamma has its own rust-toolchain.toml # (channel = "1.88") -- auto-detect applies, no rust_toolchain