From d877536ef15c98f900813c476c1e8a4a6536451c Mon Sep 17 00:00:00 2001
From: rldyourmnd <danil@nddev.it.com>
Date: Mon, 21 Sep 2026 15:12:50 +0500
Subject: [PATCH] chore(ci): converge ci-workflows pins on 0.1.25

Signed-off-by: rldyourmnd <danil@nddev.it.com>
---
 .github/workflows/ci-feedback-events.yml |  2 +-
 .github/workflows/codeql.yml             |  2 +-
 .github/workflows/release.yml            |  4 ++--
 catalog/actions.yml                      | 16 ++++++++--------
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/ci-feedback-events.yml b/.github/workflows/ci-feedback-events.yml
index 7f49266..0c7a65d 100644
--- a/.github/workflows/ci-feedback-events.yml
+++ b/.github/workflows/ci-feedback-events.yml
@@ -19,7 +19,7 @@ jobs:
     permissions:
       actions: read # Read exact completed run and job metadata.
       issues: write # Publish bounded failure evidence in this repository.
-    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/ci-feedback.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24
+    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/ci-feedback.yml@17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b # 0.1.25
     with:
       run-id: ${{ format('{0}', github.event.workflow_run.id) }}
       run-attempt: ${{ format('{0}', github.event.workflow_run.run_attempt) }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index cd0544d..4dd13d7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -31,7 +31,7 @@ jobs:
       actions: read
       contents: read
       security-events: write
-    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24
+    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b # 0.1.25
     with:
       # Public repository: `pull_request` runs untrusted fork code. Name the
       # hosted runner explicitly — the reusable's default belongs to the pinned
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ba07606..92406d9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -41,7 +41,7 @@ jobs:
     permissions:
       actions: read # verify exact public workflow evidence
       contents: read # read the signed annotated tag
-    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-promotion-gate.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24
+    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-promotion-gate.yml@17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b # 0.1.25
     with:
       version: ${{ needs.resolve.outputs.version }}
       runner: ubuntu-latest
@@ -62,7 +62,7 @@ jobs:
       id-token: write # mint Sigstore identity
       attestations: write # persist provenance and SBOM attestations
       artifact-metadata: write # persist attested artifact metadata
-    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-supply-chain.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24
+    uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-supply-chain.yml@17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b # 0.1.25
     with:
       version: ${{ needs.resolve.outputs.version }}
       package_name: cd-workflows
diff --git a/catalog/actions.yml b/catalog/actions.yml
index 7c8b432..b128d0b 100644
--- a/catalog/actions.yml
+++ b/catalog/actions.yml
@@ -21,14 +21,14 @@ actions:
     sha: "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
     version: "v7.0.1"
   - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/ci-feedback.yml
-    sha: "37a827f921f62353664fc4bcd872f05b65efe71a"
-    version: "0.1.24"
+    sha: "17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b"
+    version: "0.1.25"
   - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml
-    sha: "37a827f921f62353664fc4bcd872f05b65efe71a"
-    version: "0.1.24"
+    sha: "17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b"
+    version: "0.1.25"
   - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-promotion-gate.yml
-    sha: "37a827f921f62353664fc4bcd872f05b65efe71a"
-    version: "0.1.24"
+    sha: "17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b"
+    version: "0.1.25"
   - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-supply-chain.yml
-    sha: "37a827f921f62353664fc4bcd872f05b65efe71a"
-    version: "0.1.24"
+    sha: "17a7c6e5c4aeac291e8e9e5456937d8ee1d74a1b"
+    version: "0.1.25"