[workflow-audit] 3 unexplained change(s) on 2026-09-15

[github-actions]

3 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-14T13:57:36Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

2b16536 — chore(deps): update github-actions (#636)

• Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> (self-declared; not proof of origin)
• Date: 2026-09-14 15:01:16 -0700
• Refs: main,remotes/origin/fix/audit-derive-environment-inventory-34967426313 remotes/origin/fix/webview-boot-script-substitution-34967426313,remotes/origin/fix/workspaces-guide-poststack-34964871547 remotes/origin/main,remotes/origin/renovate/cargo remotes/origin/renovate/github-actions,remotes/origin/renovate/storybook remotes/origin/skills/tend-workflow-pin-downgrade-34964871547,remotes/origin/workspaces-dor
• Files:
  • .github/workflows/chromatic.yml
  • .github/workflows/security-audit.yaml
  • .github/workflows/tend-mention.yaml
  • .github/workflows/tend-notifications.yaml
  • .github/workflows/workflow-audit.yaml
• View diff

3aff0ca — chore(deps): update dependency astral-sh/uv to v0.12.14

• Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> (self-declared; not proof of origin)
• Date: 2026-09-15 04:54:43 +0000
• Refs: remotes/origin/renovate/github-actions
• Files:
  • .github/workflows/tend-mention.yaml
  • .github/workflows/tend-notifications.yaml
• View diff

962d86a — Make the ci-and-secrets audit enumerate environments from the API

• Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
• Date: 2026-09-15 12:34:36 +0000
• Refs: remotes/origin/fix/audit-derive-environment-inventory-34967426313
• Files:
  • .github/audit/ci-and-secrets.md
• View diff