From 9756e7862c585f2b62e37a8a53f379ac9a01460e Mon Sep 17 00:00:00 2001
From: Matthew Fishman <mfishman@flatironinstitute.org>
Date: Mon, 11 May 2026 13:14:18 -0400
Subject: [PATCH] Unpin internal references on main

## Summary

- Restore `@main` refs for internal self-references in workflow files;
  the SHA-pinned values were the artifact of the v2.3.0 release rewrite
  in `.scripts/release.sh` and were never meant to land on `main`.
- Affects `Tests.yml`, `IntegrationTest.yml`, `IntegrationTestRequest.yml`,
  `VersionCheck.yml`, `CheckCompatBounds.yml`, and `TagBot.yml`.
- Stops Dependabot from opening internal-bump PRs against these refs.
---
 .github/workflows/CheckCompatBounds.yml      | 2 +-
 .github/workflows/IntegrationTest.yml        | 2 +-
 .github/workflows/IntegrationTestRequest.yml | 2 +-
 .github/workflows/TagBot.yml                 | 2 +-
 .github/workflows/Tests.yml                  | 2 +-
 .github/workflows/VersionCheck.yml           | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/CheckCompatBounds.yml b/.github/workflows/CheckCompatBounds.yml
index fc8125b..f5515a3 100644
--- a/.github/workflows/CheckCompatBounds.yml
+++ b/.github/workflows/CheckCompatBounds.yml
@@ -82,7 +82,7 @@ jobs:
           project: "${{ inputs.subdir != '' && inputs.subdir || inputs.project }}"
 
       - name: "Check compat upper bounds"
-        uses: ITensor/ITensorActions/.github/actions/check-compat-bounds@fe3dfd399dc770aeb0e151e04dbd3d4627b9e603
+        uses: ITensor/ITensorActions/.github/actions/check-compat-bounds@main
         with:
           workspace-root: "${{ inputs.subdir != '' && inputs.subdir || inputs.workspace-root }}"
           mode: "${{ inputs.mode }}"
diff --git a/.github/workflows/IntegrationTest.yml b/.github/workflows/IntegrationTest.yml
index aa7517b..028c9c9 100644
--- a/.github/workflows/IntegrationTest.yml
+++ b/.github/workflows/IntegrationTest.yml
@@ -70,7 +70,7 @@ jobs:
         pkg: ${{ fromJSON(inputs.pkgs) }}
 
     steps:
-      - uses: ITensor/ITensorActions/.github/actions/classify-pr@fe3dfd399dc770aeb0e151e04dbd3d4627b9e603
+      - uses: ITensor/ITensorActions/.github/actions/classify-pr@main
         id: classify
         with:
           # `subdir` (the in-tree package under test) is auto-appended
diff --git a/.github/workflows/IntegrationTestRequest.yml b/.github/workflows/IntegrationTestRequest.yml
index 1e71338..6aab6d4 100644
--- a/.github/workflows/IntegrationTestRequest.yml
+++ b/.github/workflows/IntegrationTestRequest.yml
@@ -58,7 +58,7 @@ jobs:
   run-tests:
     name: "Run Tests"
     needs: get-pr-comment
-    uses: ITensor/ITensorActions/.github/workflows/IntegrationTest.yml@fe3dfd399dc770aeb0e151e04dbd3d4627b9e603
+    uses: ITensor/ITensorActions/.github/workflows/IntegrationTest.yml@main
     with:
       localregistry: "${{ inputs.localregistry }}"
       extra-dev-paths: "${{ inputs.extra-dev-paths }}"
diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index 616f175..702ae38 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -43,7 +43,7 @@ jobs:
       matrix:
         subdir: "${{ fromJSON(inputs.subdirs) }}"
     steps:
-      - uses: "ITensor/ITensorActions/.github/actions/tag-subdir@fe3dfd399dc770aeb0e151e04dbd3d4627b9e603"
+      - uses: "ITensor/ITensorActions/.github/actions/tag-subdir@main"
         with:
           subdir: "${{ matrix.subdir }}"
           token: "${{ secrets.TAGBOT_PAT || github.token }}"
diff --git a/.github/workflows/Tests.yml b/.github/workflows/Tests.yml
index af42624..d78f1fb 100644
--- a/.github/workflows/Tests.yml
+++ b/.github/workflows/Tests.yml
@@ -140,7 +140,7 @@ jobs:
     runs-on: "${{ inputs.self-hosted && 'self-hosted' || inputs.os }}"
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
-      - uses: ITensor/ITensorActions/.github/actions/classify-pr@fe3dfd399dc770aeb0e151e04dbd3d4627b9e603
+      - uses: ITensor/ITensorActions/.github/actions/classify-pr@main
         id: classify
         with:
           # `subdir` (the package being tested) is auto-appended to
diff --git a/.github/workflows/VersionCheck.yml b/.github/workflows/VersionCheck.yml
index 3b8a24a..7861d71 100644
--- a/.github/workflows/VersionCheck.yml
+++ b/.github/workflows/VersionCheck.yml
@@ -43,7 +43,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: ITensor/ITensorActions/.github/actions/classify-pr@fe3dfd399dc770aeb0e151e04dbd3d4627b9e603
+      - uses: ITensor/ITensorActions/.github/actions/classify-pr@main
         id: classify
         with:
           # `subdir` (the in-tree package whose Project.toml is checked) is