From 48cd0ff9ba31536a98cf80eee19922697dc95171 Mon Sep 17 00:00:00 2001
From: Aaron Sachs <898627+asachs01@users.noreply.github.com>
Date: Fri, 21 Aug 2026 22:20:01 +0000
Subject: [PATCH] chore(ci): bump mcp-server-release/deploy.yml pins to current
 .github main

Was pinned to d28a612a/a61021de (scaffold-era, never updated). Current
main has ~30 commits since, including real fixes: mcpb-pack asset
upload, add-to-project Dependabot hard-fail fix, digest-verify fixes,
an unconditional build/lint/test verify job, and the mcpb-CLI-install
fix. This repo was held out of dependabot-janitor's scope (EXCLUDE_REPOS,
wyre-technology/.github#57/#58) specifically because its CI was vacuous
until this migration -- same bug class that broke 3 repos in July.

task_1787320127660
---
 .github/workflows/release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fa303ff..9b8d46a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,7 @@ jobs:
       packages: write
       id-token: write
       security-events: write
-    uses: wyre-technology/.github/.github/workflows/mcp-server-release.yml@d28a612a00a1bd0c36aff09e686ce2d1e10ef552
+    uses: wyre-technology/.github/.github/workflows/mcp-server-release.yml@8bfc9b3a249fd1e6f69f1d05c45c8eaf3076fec3
     with:
       server-name: knowbe4-mcp
       image-name: ghcr.io/wyre-technology/knowbe4-mcp
@@ -34,7 +34,7 @@ jobs:
     permissions:
       id-token: write
       contents: read
-    uses: wyre-technology/.github/.github/workflows/mcp-server-deploy.yml@a61021de876d0fd44dac777fa90f963fea25b0c3
+    uses: wyre-technology/.github/.github/workflows/mcp-server-deploy.yml@198605d0575e27374cf9b67fba3aa8c7b91de2c0
     with:
       vendor-slug: knowbe4
       image-name: ghcr.io/wyre-technology/knowbe4-mcp