chore(deps): bump OMT-Global/bootstrap/.github/workflows/full-release-validation-reusable.yml from a457d97425529d99667078a721b1459c8446d19b to 3b8584b78f253b72cfee0a798f9314028549302c

[dependabot]

Bumps OMT-Global/bootstrap/.github/workflows/full-release-validation-reusable.yml from a457d97 to 3b8584b.

Changelog

Sourced from OMT-Global/bootstrap/.github/workflows/full-release-validation-reusable.yml's changelog.

Governed Release Train

This repository uses release maturity level governed.

Manual Flow

1. Open a release train issue with .github/ISSUE_TEMPLATE/release_train.yml.
2. Create or update the release/{major}.{minor} release branch.
3. Run Release Preflight with the candidate version, channel, target ref, and release issue.
4. Copy the successful preflight run ID into the release issue.
5. Run Full Release Validation against the same target ref.
6. Copy the successful validation run ID into the release issue.
7. Create the exact release tag only after validation evidence exists.
8. Run Release Publish with the tag, preflight run ID, validation run ID, channel, and release issue.
9. Run or review Release Postpublish, then close or supersede the release issue.

Publish must consume the artifact bundle proven by preflight. If the preflight artifact cannot be downloaded or its recorded target SHA differs from the tag SHA, publish must fail instead of rebuilding.

Customization

Repo-specific behavior belongs in these hook scripts:

• scripts/release/prep.sh
• scripts/release/preflight.sh
• scripts/release/validate.sh
• scripts/release/build.sh
• scripts/release/publish.sh
• scripts/release/postpublish.sh

The generated defaults do not require secrets and do not publish external packages.

Commits

• 3b8584b chore(deps): bump OMT-Global/bootstrap/.github/workflows/release-postpublish-...
• 124abd5 chore(deps-dev): bump tsx in the npm-minor-patch group (#128)
• ce817cb chore(deps): bump OMT-Global/bootstrap/.github/workflows/release-publish-reus...
• e99709d chore(deps): bump OMT-Global/bootstrap/.github/workflows/release-preflight-re...
• 848846f chore(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3 (#125)
• 05bcfea chore(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.6 (#129)
• 3ae5bba fix: stabilize multi-language CodeQL bootstrap projection (#131)
• 14450be chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.4 (#122)
• d18ad3f chore(deps): bump OMT-Global/bootstrap/.github/workflows/full-release-validat...
• 71ed2e1 chore(deps): bump OMT-Global/bootstrap/.github/workflows/release-publish-reus...
• See full diff in compare view

[athena-omt]

Reviewed 015aea3. This changes only the immutable SHA for the governed full-release-validation reusable workflow. The prior and target commits contain identical workflow content, caller inputs remain unchanged, and the action-pin guard passed locally. Live PR state is clean with all completed checks successful. Approving.

[pheidon]

Pheidon second-pass approval at exact head ed682e9. This is a one-line immutable pin update for full-release-validation. Independent verification: the referenced .github/workflows/full-release-validation-reusable.yml blob is identical at the prior ref a457d97 and new base/target 3b8584b (blob 66473fb75be86c3d4d91dbd2fc619c55b88e3f01). The PR is current with that base, mergeable, non-draft, auto-merge requested, and every required check is successful or intentionally skipped. No unresolved review comments exist. This confirms Athena’s earlier reasoning against the refreshed Dependabot head with new blob-identity evidence.

[dependabot]

Superseded by #141.