[bernardladenthin]

Moves every bernardladenthin/actions pin from v1.0.0 (7646ab06) to v1.0.1 (df774809).

v1.0.1 fixes the one defect the first snapshot runs on v1.0.0 found: java/finalize-publication rejected _remote.repositories, which central-publishing 0.12.0 writes into target/central-deferred (bernardladenthin/actions#2; failed runs: BitcoinAddressFinder 40217936091, streambuffer 40217930246). Apart from that fix, v1.0.1 changes only the claude-code-action pin in the templates, and this repository already carries that version.

• Only the pin lines change.
• python -m actionlib.common.templates at v1.0.1: 0 problems.

🤖 Generated with Claude Code

https://claude.ai/code/session_01VszvDmRRPP1UcwozsUMY1L

Summary by CodeRabbit

• Chores
  • Updated the automation used for code analysis, dependency submission, security scanning, formal verification, builds, and publishing to the latest shared workflow release.
  • No changes were made to workflow triggers or behavior visible in the app.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

Workflow references to bernardladenthin/actions changed from v1.0.0 to v1.0.1. Workflow triggers, conditions, inputs, and wiring remain unchanged.

Changes: Shared action version update

Layer / File(s)	Summary
Reusable workflow references .github/workflows/codeql.yml, .github/workflows/dependency-submission.yml, .github/workflows/osv-scanner.yml, .github/workflows/reuse.yml, .github/workflows/sonarqube.yml	The CodeQL, dependency submission, OSV Scanner, test, and SonarQube jobs now reference v1.0.1.
Formal verification host-info references .github/workflows/formal-verification.yml	The OpenJML ESC, OpenJML RAC, and JPF jobs now use the v1.0.1 host-info action.
Publication workflow action references .github/workflows/publish.yml	The publication workflow’s referenced check, signing, verification, host-info, release, publication, and attestation actions now use v1.0.1.

Priority: Not assessed

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Possibly related PRs

• bernardladenthin/streambuffer#191: PR #191 introduced shared publication actions, including java/finalize-publication, whose references this PR updates.

Suggested reviewers: claude

Merge Risk: Minimal · up to 082aa

The pinned action update preserves existing workflow behavior and is ready to merge with normal checks.

Architecture risk: Low · up to 082aa

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/workflows/codeql.yml: The analyze job now references java-codeql.yml at df774809fbe99a5adc7b1243d053692cd840fe05 (v1.0.1) instead of 7646ab0603d75ee130463eceaa8988f7352e2d6a (v1.0.0).
• observed — Modified behavior in .github/workflows/dependency-submission.yml: The submit job’s reusable workflow reference changes from v1.0.0 to v1.0.1.
• observed — Modified behavior in .github/workflows/formal-verification.yml: The OpenJML ESC job’s host-info action reference changes from v1.0.0 to v1.0.1.
• observed — Modified behavior in .github/workflows/formal-verification.yml: The OpenJML RAC job’s host-info action reference changes from v1.0.0 to v1.0.1.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud