ci: re-pin internal action refs to v1.5.0 (A-618)

.github/workflows/reusable-build-test.yml

@@ -182,39 +182,39 @@ jobs:
         # Every lane except shellcheck (preinstalled binary) runs via pnpm, so
         # skip install only on a shellcheck-only run.
         if: ${{ inputs.build || inputs.typecheck || inputs.test || inputs.bats }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/setup-project@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/setup-project@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           node-version-file: ${{ inputs.node-version-file }}
 
       - name: 🏗️ Build check
         if: ${{ inputs.build }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/build@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/build@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           script: ${{ inputs.build-script }}
 
       - name: 🔎 Typecheck
         if: ${{ inputs.typecheck }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/typecheck@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/typecheck@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           tsconfig: ${{ inputs.tsconfig }}
 
       - name: 🧪 Test (Vitest)
         if: ${{ inputs.test }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/test-vitest@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/test-vitest@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           args: ${{ inputs.test-args }}
           coverage: ${{ inputs.coverage }}
 
       - name: 🐚 ShellCheck
         if: ${{ inputs.shellcheck }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/shellcheck@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/shellcheck@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           paths: ${{ inputs.shellcheck-paths }}
           severity: ${{ inputs.shellcheck-severity }}
 
       - name: 🦇 Test (bats)
         if: ${{ inputs.bats }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/test-bats@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/test-bats@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           paths: ${{ inputs.bats-paths }}
           recursive: ${{ inputs.bats-recursive }}

.github/workflows/reusable-lint.yml

@@ -172,25 +172,25 @@ jobs:
         # skip it when a repo runs YAML-only (yamllint/actionlint use pip + the
         # pinned installer, not pnpm).
         if: ${{ inputs.eslint || inputs.markdown || inputs.changelog }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/setup-project@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/setup-project@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           node-version-file: ${{ inputs.node-version-file }}
 
       - name: 🧹 ESLint
         if: ${{ inputs.eslint }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/eslint@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/eslint@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           args: ${{ inputs.eslint-args }}
 
       - name: 📝 Lint Markdown
         if: ${{ inputs.markdown }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/lint-markdown@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/lint-markdown@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           globs: ${{ inputs.markdown-globs }}
 
       - name: 📐 Lint YAML
         if: ${{ inputs.yaml }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/lint-yaml@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/lint-yaml@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           paths: ${{ inputs.yaml-paths }}
           actionlint: ${{ inputs.actionlint }}
@@ -199,6 +199,6 @@ jobs:
 
       - name: 🗒️ Validate changelog
         if: ${{ inputs.changelog }}
-        uses: acme-skunkworks/shared-workflows/.github/actions/changelog-validate@7f543bef1ab799f22e059b9b7363585f8665e294 # v0.8.0
+        uses: acme-skunkworks/shared-workflows/.github/actions/changelog-validate@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0
         with:
           script: ${{ inputs.changelog-script }}

.github/workflows/reusable-load-repo-config.yml

@@ -76,4 +76,4 @@ jobs:
 
       - name: ⚙️ Load repo config
         id: repo
-        uses: acme-skunkworks/shared-workflows/.github/actions/load-repo-config@ab96ef26d26a88ee3f8125b7446bffc2277d6207 # A-779
+        uses: acme-skunkworks/shared-workflows/.github/actions/load-repo-config@ba77002fe9249ec379930861ed693e1b6ac3bf37 # v1.5.0

changelog/20260715-091519-a-618-shared-workflows-forward-release-automation-re-pin.md

@@ -0,0 +1,28 @@
+---
+title: Re-pin internal action refs to v1.5.0
+release_note: ""
+created_at: "2026-07-15T09:15:19Z"
+branch: a-618-shared-workflows-forward-release-automation-re-pin-internals
+author: rob@acmeskunkworks.io
+co_authors: []
+category: chore
+breaking: false
+issues:
+  - A-618
+---
+
+## Changed
+
+- The reusable workflows now pin their sibling composite actions to
+  `@ba77002 # v1.5.0` instead of the backfill-era `@7f543be # v0.8.0`, so the
+  v1.x workflows stop pinning to an old version of themselves. Affects
+  `reusable-lint.yml` (`setup-project`, `eslint`, `lint-markdown`, `lint-yaml`,
+  `changelog-validate`) and `reusable-build-test.yml` (`setup-project`, `build`,
+  `typecheck`, `test-vitest`, `shellcheck`, `test-bats`)
+  ([A-618](https://linear.app/acme-skunkworks/issue/A-618)).
+- `reusable-load-repo-config.yml` moves its `load-repo-config` pin off the
+  interim [A-779](https://linear.app/acme-skunkworks/issue/A-779) SHA onto the same v1.5.0 commit.
+
+No consumer-facing change: callers still float the reusable workflows at `@v1`,
+and the referenced composite-action content is byte-identical between v0.8.0 and
+v1.5.0.