From c42d49632a958e5e7bda078ca087a828558f39ce Mon Sep 17 00:00:00 2001
From: Harish Seshadri <harish.seshadri@gmail.com>
Date: Mon, 12 Oct 2026 13:41:26 -0700
Subject: [PATCH] chore(ci): pin portfolio-foundation to fbc0223 (deploy guard
 ignores non-push Dagger runs)

gainratio/ci #82 (fbc0223) stops the green-main deploy guard from failing closed when a schedule or workflow_dispatch Dagger run exists on the deploying SHA. Only modules/portfolio-foundation changed between 528eaec and fbc0223 (github.py + its tests); every gainratio/ci module ref is bumped together to keep one pin.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019qYofE7dSjRPX6vNwz5JGM
---
 .github/workflows/publish.yml | 4 ++--
 dagger.json                   | 4 ++--
 tests/test_dagger_contract.py | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index cb6ac82..9d853bc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -31,7 +31,7 @@ jobs:
         with:
           version: "0.21.8"
           verb: call
-          module: github.com/gainratio/ci/modules/portfolio-foundation@528eaec76121b75810c58bab610d9f2064b95227
+          module: github.com/gainratio/ci/modules/portfolio-foundation@fbc02232928fbca80da1013e9e1676a3e41424a6
           args: release-lineage --github-token=env:GH_TOKEN --repository="$GITHUB_REPOSITORY" --run-id="$RUN_ID" --head-sha="$HEAD_SHA" --publish-run-id="$GITHUB_RUN_ID"
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
@@ -81,7 +81,7 @@ jobs:
         with:
           version: "0.21.8"
           verb: call
-          module: github.com/gainratio/ci/modules/portfolio-foundation@528eaec76121b75810c58bab610d9f2064b95227
+          module: github.com/gainratio/ci/modules/portfolio-foundation@fbc02232928fbca80da1013e9e1676a3e41424a6
           args: release-provenance --github-token=env:GH_TOKEN --repository="$GITHUB_REPOSITORY" --run-id="$RUN_ID" --head-sha="$HEAD_SHA" --publish-run-id="$GITHUB_RUN_ID" export --path=github-context.json
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
diff --git a/dagger.json b/dagger.json
index 67302b3..98eaa31 100644
--- a/dagger.json
+++ b/dagger.json
@@ -13,8 +13,8 @@
   "dependencies": [
     {
       "name": "foundation",
-      "source": "github.com/gainratio/ci/modules/portfolio-foundation@528eaec76121b75810c58bab610d9f2064b95227",
-      "pin": "528eaec76121b75810c58bab610d9f2064b95227"
+      "source": "github.com/gainratio/ci/modules/portfolio-foundation@fbc02232928fbca80da1013e9e1676a3e41424a6",
+      "pin": "fbc02232928fbca80da1013e9e1676a3e41424a6"
     }
   ],
   "source": ".dagger"
diff --git a/tests/test_dagger_contract.py b/tests/test_dagger_contract.py
index 8372857..aa63b7b 100644
--- a/tests/test_dagger_contract.py
+++ b/tests/test_dagger_contract.py
@@ -24,7 +24,7 @@
 from assay_dagger.main import Assay  # noqa: E402
 from scripts.release_epoch import source_date_epoch  # noqa: E402
 
-FOUNDATION_SHA = "528eaec76121b75810c58bab610d9f2064b95227"
+FOUNDATION_SHA = "fbc02232928fbca80da1013e9e1676a3e41424a6"
 #: The repository's home since the gainratio org move.
 REPOSITORY = "gainratio/assay"
 #: The pre-move owner, still accepted until the move finishes; nothing else is.