tobin c33c5bd093
Wire sha-exempt allowlist into validate + bump workflows
Adds the sha-exempt input (claude-plugins-community#47) to both
workflows, with an initially empty list:

- validate-plugins.yml: names listed here may omit source.sha
  (invariant I5) instead of failing CI repo-wide
- bump-plugin-shas.yml: the same names are skipped by the nightly
  bump so it does not re-pin a deliberately unpinned entry

Action pins bumped to the commit introducing the input. Neither action
changed otherwise between the old pins and this one. Empty lists mean
no behavior change until a name is added.
2026-06-03 17:00:28 +00:00
..