From 50912361cd876304899104e8c89db614eb243f1e Mon Sep 17 00:00:00 2001
From: Harish Seshadri <harish.seshadri@gmail.com>
Date: Sat, 10 Oct 2026 08:20:20 -0700
Subject: [PATCH] ci: pin ci modules to 528eaec (gainratio mirror)

The old ci pins pull images from ghcr.io/hseshadr/mirror, which was
deleted, so Dagger CI fails with 403. ci@528eaec pulls every pinned
image from ghcr.io/gainratio/mirror (public, same digests).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QfxWgyzxj7Q4LtWoUmxvg7
---
 .dagger/src/edge_proc/main.py          | 2 +-
 .dagger/tests/test_public_contracts.py | 2 +-
 .github/workflows/publish.yml          | 2 +-
 dagger.json                            | 8 ++++----
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.dagger/src/edge_proc/main.py b/.dagger/src/edge_proc/main.py
index 45bdd78..d88f62c 100644
--- a/.dagger/src/edge_proc/main.py
+++ b/.dagger/src/edge_proc/main.py
@@ -21,7 +21,7 @@
 #: every gate must be handed the run's own `github.repository`.
 ALLOWED_REPOSITORIES: Final = ("gainratio/edge-proc", "hseshadr/edge-proc")
 PROJECT_NAME: Final = "edge-proc"
-CENTRAL_MODULE_SHA: Final = "a88866232e679b6353d2b75bceb01969be739f67"
+CENTRAL_MODULE_SHA: Final = "528eaec76121b75810c58bab610d9f2064b95227"
 SOURCE_EXCLUDES: Final = [
     ".git",
     ".venv",
diff --git a/.dagger/tests/test_public_contracts.py b/.dagger/tests/test_public_contracts.py
index 475a5ba..352c0f3 100644
--- a/.dagger/tests/test_public_contracts.py
+++ b/.dagger/tests/test_public_contracts.py
@@ -17,7 +17,7 @@
 from edge_proc.main import EdgeProc
 
 ROOT = Path(__file__).resolve().parents[2]
-CENTRAL_SHA = "a88866232e679b6353d2b75bceb01969be739f67"
+CENTRAL_SHA = "528eaec76121b75810c58bab610d9f2064b95227"
 REPOSITORY = "gainratio/edge-proc"
 PROJECT_NAME = "edge-proc"
 COMMIT_SHA = "a" * 40
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 74e6120..6dd5107 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           version: "0.21.8"
           verb: call
-          module: github.com/gainratio/ci/modules/portfolio-foundation@a88866232e679b6353d2b75bceb01969be739f67
+          module: github.com/gainratio/ci/modules/portfolio-foundation@528eaec76121b75810c58bab610d9f2064b95227
           args: release-lineage --github-token=env:GH_TOKEN --repository="$GITHUB_REPOSITORY" --run-id="$RUN_ID" --head-sha="$HEAD_SHA" --publish-run-id="$GITHUB_RUN_ID"
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
diff --git a/dagger.json b/dagger.json
index 50bd6d2..9ec8e7b 100644
--- a/dagger.json
+++ b/dagger.json
@@ -13,13 +13,13 @@
   "dependencies": [
     {
       "name": "foundation",
-      "source": "github.com/gainratio/ci/modules/portfolio-foundation@a88866232e679b6353d2b75bceb01969be739f67",
-      "pin": "a88866232e679b6353d2b75bceb01969be739f67"
+      "source": "github.com/gainratio/ci/modules/portfolio-foundation@528eaec76121b75810c58bab610d9f2064b95227",
+      "pin": "528eaec76121b75810c58bab610d9f2064b95227"
     },
     {
       "name": "python-package",
-      "source": "github.com/gainratio/ci/modules/python-package@a88866232e679b6353d2b75bceb01969be739f67",
-      "pin": "a88866232e679b6353d2b75bceb01969be739f67"
+      "source": "github.com/gainratio/ci/modules/python-package@528eaec76121b75810c58bab610d9f2064b95227",
+      "pin": "528eaec76121b75810c58bab610d9f2064b95227"
     }
   ],
   "source": ".dagger"