build(deps): update UOR-Foundation/PrismPM/action requirement to f50d6ab459344caa2bc64a45460b538f1d56b7e6

[dependabot]

Updates the requirements on UOR-Foundation/PrismPM/action to permit the latest version.

Changelog

Sourced from UOR-Foundation/PrismPM/action's changelog.

Changelog

All notable changes to PrismPM will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

The following changes target 0.3.0. Public release acceptance is not complete; see https://github.com/UOR-Foundation/PrismPM/blob/main/RELEASE-STATUS.md for the verified prerequisites.

• Add the authoritative production-system model, immutable standards/oracle bindings, OCI release graphs, digest-only lifecycle controller, Compose and Kubernetes target projections, operations/supply-chain evidence, and the reproducible PrismPM SDK.
• Prepare prism-stdlib 0.2.0 with generated production-system validation support while preserving Holo/1 and the 0.1 application runtime API.
• Correct generated View field layout in lean4-prod; Calculator behavior and Holo/1 remain compatible.

Compatibility

Holo/1 and accepted Prism application inputs remain stable. Additive contracts use new registered schemas; an incompatible schema change requires a new schema identifier and an explicit migration.

[0.1.0] - 2026-08-30

Added

• Initial UOR-Foundation workspace layout and devcontainer.
• LexLean-authored Prism facet lexicons (prism.arch, prism.sec, prism.qual).
• Formal metamodel in .lex.tex defining ISO 42010, ISO 27034, ISO 27005, and ISO 25010 primitives.
• Canonical JSON Holo format (prismpm/holo/1) emitter and validator.
• Controller API, CLI commands (check, build, verify), and vv acceptance gates.

Compatibility

• The /1 project, Holo, build, verification, and evidence schemas are the initial stable schemas. An incompatible schema change requires a new schema identifier and a SemVer-major PrismPM release; compatible additive behavior may not weaken closed-object decoding or existing verification guarantees.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)