diff --git a/.github/public-workflow-action-allowlist.json b/.github/public-workflow-action-allowlist.json index 6001a671..c9ebfc6b 100644 --- a/.github/public-workflow-action-allowlist.json +++ b/.github/public-workflow-action-allowlist.json @@ -694,5 +694,61 @@ "rationale": "Stage the public-workflow Go 1.27.1 bridge frozen at 667a58a396b7c80af0ae7fb7bbb3a0b1c8b0c95e: bind only this exact action actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff to the parser-derived hashes and workflow context. Adoption and promotion remain separate; no secret or provider authority is added.", "state": "staged", "uses": "actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff" + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10", + "nodeSHA256": "53ad3f241f5c8d1d03bf90f108b1cc142bb2f4639861d07e4ecc910983808995", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c", + "nodeSHA256": "c0d85fe8f94bd2187fb4d2a57310b75cf4561a018bc15a11b5fbea0baa13f07a", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "nodeSHA256": "d6511486d7f0d7044978b8c71828add2508e72a9897718b7a91fdf151ffb3c49", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae", + "nodeSHA256": "75285419b94ac7c3e82c6bcdff625ac1aab862ff09465c03b7f67b5f68a187f2", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3", + "nodeSHA256": "b1570fa9a4d99988920c8c534c481885469c1dfaca2327d7c088e35dadb1a568", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae", + "nodeSHA256": "89a251c63db3bcac9145c65adeb9dddd48afdd5c8cb13a9ad5ae16a3cd3f526f", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." + }, + { + "path": ".github/workflows/benchmark.yml", + "uses": "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "nodeSHA256": "1405962dcbf154f33a16a10fef5272ba0a865f20dfe11358a522e310e29dab1c", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair action." } ] diff --git a/.github/public-workflow-command-allowlist.json b/.github/public-workflow-command-allowlist.json index 5385aed1..83b1a557 100644 --- a/.github/public-workflow-command-allowlist.json +++ b/.github/public-workflow-command-allowlist.json @@ -3126,5 +3126,229 @@ "rationale": "Stage the public-workflow Go 1.27.1 bridge frozen at 667a58a396b7c80af0ae7fb7bbb3a0b1c8b0c95e: bind only this exact shell statement invoking check-public-workflow-policy.sh to the parser-derived hashes and workflow context. Adoption and promotion remain separate; no secret or provider authority is added.", "state": "staged", "statementSHA256": "89a1f75b6db0c513cc68634a7b1e7983e88d121f09db4dbfe7aaa6edd1e9978c" + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "cd", + "statementSHA256": "1da8bf23d2c0684c704bbca52edd911233fb4bb267f1118d5b94915af4ce2757", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "npm", + "statementSHA256": "1da8bf23d2c0684c704bbca52edd911233fb4bb267f1118d5b94915af4ce2757", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "go", + "statementSHA256": "3c1b589932f67a655ff6bfb1741a31b1c9ab4668b3e6b408e4fcf96472c20edb", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "go", + "statementSHA256": "0b169221a14ced8d9e2626373a08ecd6cc5d98b45fb962b73b7c5e8fa649b676", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "go", + "statementSHA256": "cfd6b00644f2b1a427bf34c2864d1ea1607bc8df4873876e092c2a015f2700bb", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "tee", + "statementSHA256": "cfd6b00644f2b1a427bf34c2864d1ea1607bc8df4873876e092c2a015f2700bb", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "$assignment", + "statementSHA256": "6911dc69ba1aa10a01cd1b0563efbb02d008c9e0ffd5c72471177bf8db8f0eec", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "cat", + "statementSHA256": "6911dc69ba1aa10a01cd1b0563efbb02d008c9e0ffd5c72471177bf8db8f0eec", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "echo", + "statementSHA256": "e5b7e17a95219aa32ca80405727547a9c29b9780744e115583f6c1a68a224750", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "$assignment", + "statementSHA256": "ffd4c2588e960687e8be3db328048a0dcb944a9c1426e6afaafafef832109740", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "[", + "statementSHA256": "50b89f8af205b68cf50a606470fdea48d51311de3bf807c03fe8aca0b92ef7c1", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "$assignment", + "statementSHA256": "50b89f8af205b68cf50a606470fdea48d51311de3bf807c03fe8aca0b92ef7c1", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "awk", + "statementSHA256": "dabc56d53c8b4b869174d2673fb6759252ac3f41af4529dd558943edda60a0b7", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "[", + "statementSHA256": "76af494e770c8a05a29ea83b525a9bed94a4a6fcbaf3ac11de547454b47fed47", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "echo", + "statementSHA256": "76af494e770c8a05a29ea83b525a9bed94a4a6fcbaf3ac11de547454b47fed47", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "exit", + "statementSHA256": "76af494e770c8a05a29ea83b525a9bed94a4a6fcbaf3ac11de547454b47fed47", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "echo", + "statementSHA256": "aa9a819f2f2977ec77ec813b0fa8b8ab2b753db0eb369df762eb7bb9010892a8", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "benchstat", + "statementSHA256": "92e1f5a57f18999c6b9359e1c7a2d9d39cd8d4c0958759cdfaa32aa2ad8bd09f", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "awk", + "statementSHA256": "92e1f5a57f18999c6b9359e1c7a2d9d39cd8d4c0958759cdfaa32aa2ad8bd09f", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "exit", + "statementSHA256": "92e1f5a57f18999c6b9359e1c7a2d9d39cd8d4c0958759cdfaa32aa2ad8bd09f", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "[", + "statementSHA256": "3dc8c35ff510a0b4eaa921e42db66fa7f2152f40b1f4133300759c176b247f62", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "awk", + "statementSHA256": "3dc8c35ff510a0b4eaa921e42db66fa7f2152f40b1f4133300759c176b247f62", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "exit", + "statementSHA256": "3dc8c35ff510a0b4eaa921e42db66fa7f2152f40b1f4133300759c176b247f62", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "awk", + "statementSHA256": "8c1c7655a9bddd70fe48d0aef7fd3bcb7cd34152622e7355e07f7e042a5d9197", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "echo", + "statementSHA256": "6ea234c2788bcc4ba388da39084e63ae28c829e83006b91554859019723f2c07", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "cp", + "statementSHA256": "ecf28d9064234b3ad9daccf68db49f1f91c65c21c2ac8f1dae3c06b65132d9d8", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "echo", + "statementSHA256": "175ed3056dc0639f05e3a0de9d2616f294cfadefd6089f69cbac1dffbd6490dd", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." + }, + { + "path": ".github/workflows/benchmark.yml", + "command": "exit", + "statementSHA256": "1a21be8bb1dc4721d30cc1850ead617faa55ae9aebf416da4369668bdeaf0824", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "rationale": "Focused frozen benchmark repair command." } ] diff --git a/.github/public-workflow-presence-allowlist.json b/.github/public-workflow-presence-allowlist.json index b4bf294b..d1fff575 100644 --- a/.github/public-workflow-presence-allowlist.json +++ b/.github/public-workflow-presence-allowlist.json @@ -122,5 +122,11 @@ "contextSHA256": "5e3ee7768ef2d57b0c1e15e6b27b1efbb892454db4b762cfc56806e7985248af", "state": "staged", "presence": "present" + }, + { + "path": ".github/workflows/benchmark.yml", + "contextSHA256": "0095a1d437ba5a9b5ddad0c3de98e4c911e9c96bfbdf7ad2e0a0187ef69c24b7", + "state": "staged", + "presence": "present" } ] diff --git a/cmd/wfctl/testdata/conformance/iac-pass/go.mod b/cmd/wfctl/testdata/conformance/iac-pass/go.mod index 1d204439..eb16b83b 100644 --- a/cmd/wfctl/testdata/conformance/iac-pass/go.mod +++ b/cmd/wfctl/testdata/conformance/iac-pass/go.mod @@ -32,7 +32,7 @@ require ( go.uber.org/zap v1.28.0 // indirect golang.org/x/net v0.56.0 // indirect golang.org/x/sys v0.46.0 // indirect - golang.org/x/text v0.38.0 // indirect + golang.org/x/text v0.42.0 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260622175928-b703f567277d // indirect google.golang.org/grpc v1.81.1 // indirect google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect diff --git a/cmd/wfctl/testdata/conformance/iac-pass/go.sum b/cmd/wfctl/testdata/conformance/iac-pass/go.sum index 0da7e389..648e856c 100644 --- a/cmd/wfctl/testdata/conformance/iac-pass/go.sum +++ b/cmd/wfctl/testdata/conformance/iac-pass/go.sum @@ -309,8 +309,8 @@ golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE= -golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4= +golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI= +golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= golang.org/x/tools v0.46.0 h1:7jTurBkPZu4moS/Uy4OQT1M+QBlsj3wejyZwsT8Z7rk= diff --git a/cmd/wfctl/testdata/conformance/no-iac/go.mod b/cmd/wfctl/testdata/conformance/no-iac/go.mod index cb0ac066..f7f3538d 100644 --- a/cmd/wfctl/testdata/conformance/no-iac/go.mod +++ b/cmd/wfctl/testdata/conformance/no-iac/go.mod @@ -32,7 +32,7 @@ require ( go.uber.org/zap v1.28.0 // indirect golang.org/x/net v0.56.0 // indirect golang.org/x/sys v0.46.0 // indirect - golang.org/x/text v0.38.0 // indirect + golang.org/x/text v0.42.0 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260622175928-b703f567277d // indirect google.golang.org/grpc v1.81.1 // indirect google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect diff --git a/cmd/wfctl/testdata/conformance/no-iac/go.sum b/cmd/wfctl/testdata/conformance/no-iac/go.sum index 0da7e389..648e856c 100644 --- a/cmd/wfctl/testdata/conformance/no-iac/go.sum +++ b/cmd/wfctl/testdata/conformance/no-iac/go.sum @@ -309,8 +309,8 @@ golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE= -golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4= +golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI= +golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= golang.org/x/tools v0.46.0 h1:7jTurBkPZu4moS/Uy4OQT1M+QBlsj3wejyZwsT8Z7rk=