[kantorcodes]

Summary

Points both plugin release workflows at the hol-guard reusable release workflow from b9337b3 (hashgraph-online/hol-guard#6037). That commit moves plugin releases from Guard 3.58.0a4 to 3.58.0a5 and pins the wheel digest in the same commit.

Changed pins:

• .github/workflows/hol-plugin-release.yml
• .github/workflows/publish-agent-skills.yml

The reusable workflow's inputs and secrets are unchanged between the old pin (cf47a7b) and the new one. Only the Guard version, its digest and the workflow's own composite-action pin moved.

[qodo-free-for-open-source-projects]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can type 'qodo, fix this' on a finding and the fix lands right on your PR

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

[qodo-free-for-open-source-projects]

PR Summary by Qodo

Run plugin releases with Guard 3.58.0a5

⚙️ Configuration changes 🕐 Less than 5 minutes

AI Description

• Pin both plugin release workflows to the hol-guard commit containing Guard 3.58.0a5.
• Keep the reusable workflow’s inputs, secrets, and release behavior unchanged.

Diagram

graph TD
  A["Release workflow"] --> C["Guard release workflow"] <-- B["Skills workflow"]

Loading

High-Level Assessment

Updating both SHA-pinned callers is the appropriate approach: it keeps the release paths aligned without changing their interfaces or weakening the upstream pin.

Files changed (2) +2 / -2

Other (2) +2 / -2

hol-plugin-release.ymlPin release attestations to the newer Guard workflow +1/-1

Pin release attestations to the newer Guard workflow

• Changes the reusable plugin-release workflow reference from cf47a7b to b9337b3. Job permissions and inputs remain unchanged.

.github/workflows/hol-plugin-release.yml

publish-agent-skills.ymlAlign skills-release attestations with the newer Guard workflow +1/-1

Align skills-release attestations with the newer Guard workflow

• Changes the post-publication attestation job’s reusable workflow reference to b9337b3. Its conditions, permissions, and inputs remain unchanged.

.github/workflows/publish-agent-skills.yml

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

Severity	Count
CRITICAL	0
WARNING	0
SUGGESTION	0

Files Reviewed (2 files)

• .github/workflows/hol-plugin-release.yml - 0 issues
• .github/workflows/publish-agent-skills.yml - 0 issues

---

_{Reviewed by free · Input: 33K · Output: 2.8K · Cached: 65K}

[internet-dot]

Checks green, review threads resolved, quiet window elapsed at e5c8f42.

[zerocodefast]

Checks green, review threads resolved, quiet window elapsed at e5c8f42.