[rhein1]

Seven workflows still select external actions through mutable tags or a release branch. Pin the 25 remaining references to verified upstream commits for the versions already selected.

Existing ref	Verified commit
actions/checkout@v7.0.1	3d3c42e5aac5ba805825da76410c181273ba90b1
actions/setup-node@v7.0.0	820762786026740c76f36085b0efc47a31fe5020
actions/setup-python@v7.0.0	5fda3b95a4ea91299a34e894583c3862153e4b97
actions/upload-artifact@v7.0.1	043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
pypa/gh-action-pypi-publish@release/v1	7245906fb61fa33a13554f9d5fb856fe61758086

pypa/gh-action-pypi-publish@release/v1 is a branch. Its inspected head equals the commit of the signed annotated v1.14.3 release; the pin comment records both names. The four actions/* tag refs and published releases were independently verified against their official repositories.

Only uses references and version comments change. All triggers, permissions, matrices, command bodies and release conditions are identical. Micro-ECF remains intentionally disabled by its manual-only trigger/release-tag condition; MCP remains manual verification-only. No publishing workflow is dispatched.

Validation:

• YAML parsing with duplicate-key rejection passed for all seven workflows.
• Exact diff: seven files, 25 additions/25 deletions, all on uses lines. Restoring the original refs yields identical parsed workflow semantics.
• Independent read-only source/provenance review passed; remote commit/file read-back matches all seven verified candidates.
• Exact-head hosted CI on 31a7bb3fa5963e6ada79479bddaddfd186d834f0: 12 checks passed, 2 failed, 0 pending.
  • CodeQL: JavaScript/TypeScript, Python, and the CodeQL app check passed.
  • Agent OS income preview: Node 20/22 passed.
  • OpenShell offline scaffold: Ubuntu/Windows × Node 20/22 passed.
  • Validate Machine Surfaces: Python 3.8/3.14 and payment-contracts passed; the two unchanged dependency audits failed.
  • OpenRouter audit: Zod 4.4.3 is affected by high-severity GHSA-mrhx-c7xc-m3w5 (<4.6.6).
  • Claude SDK audit: 7 vulnerabilities, 3 moderate/4 high. Locked affected packages: MCP SDK 1.31.0 and parent Claude SDK 0.3.263, body-parser 2.3.0, fast-uri 3.1.8, Hono 4.13.7, ip-address 10.7.2, and Zod 4.5.4. Fast-uri includes GHSA-w74x-v6f9-j3xg, GHSA-xhq7-xmqj-769h, GHSA-wjr9-j795-jxcr, and GHSA-333x-w4r6-6crp. The hosted log contains the complete 12-advisory set.
  • The validation run reports 47 skipped steps (45 later validation steps and two adapter post-setup cleanup steps). OpenRouter check/test/typecheck and Claude typecheck/test/test:cli commands did not run after the audits failed.
• Publication workflows were not run. Their triggers/guards were verified from source; no publishing runtime qualification is claimed.

Dependency repair remains separate: the single fresh normal npm registry check failed ENOTFOUND registry.npmjs.org. No dependency installation or lockfile edit was attempted. The latest Claude SDK audit now reports seven vulnerabilities (3 moderate, 4 high), including fast-uri findings; the older six-vulnerability snapshot is stale. This PR does not fix or suppress those audits, and no local full-repository test pass is claimed.

Separate from the version upgrades in #505/#506, which may need rebasing after a pin change. Existing PRs, including concurrent Pillow repair #517, are untouched. No merge, release, deployment, credential creation, security-setting change, alert dismissal or runtime/payment activation is included.