From 414ee153b6211b35b7c2d123045abd0a94ac17a6 Mon Sep 17 00:00:00 2001
From: Don Petry <36422719+don-petry@users.noreply.github.com>
Date: Mon, 22 Jun 2026 01:11:47 -0500
Subject: [PATCH] ci(dev-lead): pin caller to @dev-lead/ring1 (rebased on main)

---
 .github/workflows/dev-lead.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dev-lead.yml b/.github/workflows/dev-lead.yml
index 8d6112e7..78c315e6 100644
--- a/.github/workflows/dev-lead.yml
+++ b/.github/workflows/dev-lead.yml
@@ -43,7 +43,8 @@ permissions: {}
 
 jobs:
   dev-lead:
-    uses: petry-projects/.github-private/.github/workflows/dev-lead-reusable.yml@5a9a2476575cfcf0e730993f589587db054219f1 # main
+    # First-party channel tag — do NOT SHA-pin (AGENTS.md mutable-ref exception; rings #499/#500/#871).
+    uses: petry-projects/.github-private/.github/workflows/dev-lead-reusable.yml@dev-lead/ring1
     secrets: inherit
     permissions:
       contents: write
@@ -51,4 +52,4 @@ jobs:
       issues: write
       actions: read
       checks: read
-      statuses: read
+      statuses: read
\ No newline at end of file