From ca728ce1794b38d139d5844a642579cd99ef0ad6 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Tue, 6 Oct 2026 15:04:03 -0400
Subject: [PATCH] ci: pin ci-terraform to v1.0.26 (#125)

That release classifies a pull request against the merge parent, so a
re-run after main moves is not treated as a mixed app and Terraform change.
---
 .github/workflows/ci.yaml       | 2 +-
 tests/infra/hcpContract.test.js | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 970d753..678fe0c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -51,7 +51,7 @@ jobs:
     name: Terraform
     needs: autofix
     if: always() && !cancelled() && (needs.autofix.result == 'skipped' || needs.autofix.outputs.committed != 'true')
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-terraform.yaml@47185fa602dffddb8297db5f3525d7c9bc05d7cd # v1.0.21
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-terraform.yaml@7dc8db2af02685929d57fdf86e4a9867243165ea # v1.0.26
     with:
       terraform-version: "1.16.0"
       working-directory: terraform
diff --git a/tests/infra/hcpContract.test.js b/tests/infra/hcpContract.test.js
index 02743b8..f66dae0 100644
--- a/tests/infra/hcpContract.test.js
+++ b/tests/infra/hcpContract.test.js
@@ -84,7 +84,8 @@ describe("HCP Terraform seam (PLAT-79)", () => {
     assert.doesNotMatch(ci, /ci-typescript-cdk/);
     assert.doesNotMatch(ci, /run-sam-validate/);
     assert.match(ci, /npm test/);
-    assert.match(ci, /ci-terraform\.yaml@47185fa602dffddb8297db5f3525d7c9bc05d7cd/);
+    assert.match(ci, /ci-terraform\.yaml@[0-9a-f]{40} # v/);
+    assert.doesNotMatch(ci, /ci-terraform\.yaml@\*/);
     assert.match(ci, /ci-autofix\.yaml@47185fa602dffddb8297db5f3525d7c9bc05d7cd/);
     assert.match(ci, /presets: prettier,terraform/);
     assert.match(ci, /npm run format:check/);