ruv 6c3a28037b ci(verify-pipeline): re-run determinism gate on lock changes ...

The determinism gate is path-filtered, but requirements-lock.txt (which
pins the numpy/scipy versions that *produce* the proof hash) was not in
the filter — so a dependency bump could silently drift the hash without
re-running the gate. That's how the 1.26.4 pin diverged from the
published ca58956c hash unnoticed. Add requirements-lock.txt to both the
push and pull_request path filters so this PR (and any future lock
change) actually re-runs verify.py.

Co-Authored-By: claude-flow <ruv@ruv.net>

2026-05-31 11:39:08 -04:00

..

workflows

ci(verify-pipeline): re-run determinism gate on lock changes

2026-05-31 11:39:08 -04:00

dependabot.yml

security: pin GitHub Actions to SHAs and bump vulnerable npm deps (#442)

2026-04-28 08:46:51 -04:00