From 1ae168c41561b2a2326b9b4347a01dc2cf825962 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 16 Oct 2026 09:57:49 +0000
Subject: [PATCH] Refresh Craft release pins and Sigstore bundles (2026-10-16)

---
 config/releases.json                    | 2 +-
 plugins/storytold/.storytold-build.json | 2 +-
 plugins/storytold/config/releases.json  | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/releases.json b/config/releases.json
index 3cdd582..4d62586 100644
--- a/config/releases.json
+++ b/config/releases.json
@@ -301,7 +301,7 @@
     }
   },
   "basis": "Latest GitHub releases of storytold/<app> on the review date; archive hashes copied from each release's SHA256SUMS.txt; smoke tools verified in the tag's MCP source. Reviewed pins, not binary execution evidence. Sigstore bundles for the extracted CLIs live in config/signatures.json.",
-  "reviewed": "2026-10-15",
+  "reviewed": "2026-10-16",
   "schema_version": 2,
   "signers": {
     "apple_team_id": "DJ6XS33FX8",
diff --git a/plugins/storytold/.storytold-build.json b/plugins/storytold/.storytold-build.json
index 48f5d6f..ca9924a 100644
--- a/plugins/storytold/.storytold-build.json
+++ b/plugins/storytold/.storytold-build.json
@@ -10,7 +10,7 @@
     "config/env.example": "0dffc0cbd4428ce0098cc5a4e6351dc5ed18ce7710a9a422460544d6707f4d8b",
     "config/installations.lock.example.json": "7c7cb59a16548b94aabb10eb0a6e8efd663b9a6546a934d21eb346a50a14dfc5",
     "config/portable.mcp.example.json": "1d649b83dfd4cd225db39305b013e8ee70526ae3a6964229062c22efd692e563",
-    "config/releases.json": "ae32ffd4ba27a0b8bd104e65a0118fd6e24e1e3c327c7a9cea90061aeca3c9ae",
+    "config/releases.json": "0f6a98e4ddd039f933479ea8ee1a9df67dc13add8dda7b7b70ef42344b1c4756",
     "config/signatures.json": "1ea1df179b6d5ae603314f06a07de40afe54f74a7035911b90c116122c1a060d",
     "docs/acceptance.md": "f3a99effd17503aca248a5278d03ca2c52f230fa814ee83513bf6575ad6655e2",
     "docs/architecture.md": "274a5692d59fc99e550fa49f09cbf4c3a42b0569b06b0fdd15080b145b79ca05",
diff --git a/plugins/storytold/config/releases.json b/plugins/storytold/config/releases.json
index 3cdd582..4d62586 100644
--- a/plugins/storytold/config/releases.json
+++ b/plugins/storytold/config/releases.json
@@ -301,7 +301,7 @@
     }
   },
   "basis": "Latest GitHub releases of storytold/<app> on the review date; archive hashes copied from each release's SHA256SUMS.txt; smoke tools verified in the tag's MCP source. Reviewed pins, not binary execution evidence. Sigstore bundles for the extracted CLIs live in config/signatures.json.",
-  "reviewed": "2026-10-15",
+  "reviewed": "2026-10-16",
   "schema_version": 2,
   "signers": {
     "apple_team_id": "DJ6XS33FX8",