From a6903f326cf5a28c8419c6516a688f15172ab768 Mon Sep 17 00:00:00 2001
From: daviddaniel43000-star
 <325337000+daviddaniel43000-star@users.noreply.github.com>
Date: Fri, 16 Oct 2026 08:33:18 +0100
Subject: [PATCH 1/2] ci: check all current release pins (Closes #354)

---
 .github/workflows/ci.yml | 26 +++++++++++++++++++++++---
 1 file changed, 23 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 370769ee..e5c60092 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -158,7 +158,7 @@ jobs:
         echo "stale pin to look for: $PREV"
         # crates.io legitimately lags: lines that name crates.io may state the
         # older version, so exclude them explicitly.
-        MATCHES="$(grep -rn "$PREV" README.md docs/ --include='*.md' \
+        MATCHES="$(grep -rn "$PREV" README.md ROADMAP.md docs/ --include='*.md' \
           | grep -v '^docs/releases/' \
           | grep -vi 'crates.io\|published\|--version \|lacks\|predates\|older v' || true)"
         if [[ -n "$MATCHES" ]]; then
@@ -166,7 +166,27 @@ jobs:
           echo "$MATCHES"
           exit 1
         fi
-        echo "OK: no stale $PREV pins outside crates.io notes and release history"
+
+        # The composite Action is an installable artifact whose default must
+        # name a real release tag. Its version pin lives in YAML, not Markdown.
+        ACTION_DEFAULT="$(awk '
+          /^  sdkt-version:/ { in_input=1; next }
+          in_input && /^  [A-Za-z0-9_-]+:/ { exit }
+          in_input && /^[[:space:]]+default:/ { print NR ":" $2; exit }
+        ' .github/actions/sdkt/action.yml)"
+        if [[ -z "$ACTION_DEFAULT" ]]; then
+          echo "::error::.github/actions/sdkt/action.yml: missing default for sdkt-version input"
+          exit 1
+        fi
+        ACTION_LINE="${ACTION_DEFAULT%%:*}"
+        ACTION_VERSION="${ACTION_DEFAULT#*:}"
+        ACTION_VERSION="$(printf '%s' "$ACTION_VERSION" | sed "s/[\"']//g")"
+        if ! git ls-remote --exit-code --tags origin "refs/tags/$ACTION_VERSION" >/dev/null; then
+          echo "::error::.github/actions/sdkt/action.yml:$ACTION_LINE: sdkt-version default '$ACTION_VERSION' is not a tag on origin"
+          exit 1
+        fi
+
+        echo "OK: no stale $PREV pins outside crates.io notes and release history; Action default $ACTION_VERSION exists"
 
   onboarding-smoke:
     name: offline onboarding smoke test
@@ -253,4 +273,4 @@ jobs:
         cmp website/playground/wasm/sdkt_playground.js \
           "$PLAYGROUND_WASM_OUT/sdkt_playground.js"
 
-        echo "Playground WASM artifacts are up to date."
\ No newline at end of file
+        echo "Playground WASM artifacts are up to date."

From 7ab14021267bac7687dcde5cc571c6c705b3f3a5 Mon Sep 17 00:00:00 2001
From: daviddaniel43000-star
 <325337000+daviddaniel43000-star@users.noreply.github.com>
Date: Sun, 18 Oct 2026 09:36:18 +0100
Subject: [PATCH 2/2] ci: ignore historical roadmap release mentions

---
 .github/workflows/ci.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e5c60092..ad66279e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -157,10 +157,14 @@ jobs:
         PREV="$(printf '%s' "$VER" | awk -F. '{printf "%s.%s.0", $1, $2-1}')"
         echo "stale pin to look for: $PREV"
         # crates.io legitimately lags: lines that name crates.io may state the
-        # older version, so exclude them explicitly.
+        # older version, so exclude them explicitly. ROADMAP also records
+        # shipped milestones and prior tags; those historical mentions are not
+        # current release pins. Keep the exclusion limited to those markers so
+        # a stale current-release statement elsewhere in ROADMAP still fails.
         MATCHES="$(grep -rn "$PREV" README.md ROADMAP.md docs/ --include='*.md' \
           | grep -v '^docs/releases/' \
-          | grep -vi 'crates.io\|published\|--version \|lacks\|predates\|older v' || true)"
+          | grep -vi 'crates.io\|published\|--version \|lacks\|predates\|older v' \
+          | grep -viE '^ROADMAP\.md:[0-9]+:.*(Shipped in|shipped \(|Prior tagged releases:)' || true)"
         if [[ -n "$MATCHES" ]]; then
           echo "::error::stale $PREV reference(s) in current documentation:"
           echo "$MATCHES"