chore(manifest): bump YiAgent/OpenCI SHA to

[YiWang24]

Automated SHA bump: to

The YiAgent/OpenCI self-reference SHA in manifest.yml was stale. Updated to the latest main HEAD so all reusable workflow calls resolve correctly.

Generated by the on-main-bump-sha workflow.

---

^{Need help on this PR? Tag @codesmith with what you need.}

• Let Codesmith autofix CI failures and bot reviews

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow dependencies and configurations to a newer pinned version across all CI/CD pipelines.

[qodo-code-review]

ⓘ You've reached your Qodo monthly free-tier limit. Reviews pause until next month — upgrade your plan to continue now, or link your paid account if you already have one.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3646c3b3-efec-44d0-a3f8-92c5519f87f0

📥 Commits

Reviewing files that changed from the base of the PR and between 9bd9cf0 and 6876c48.

📒 Files selected for processing (10)

• .github/workflows/agent.yml
• .github/workflows/ci-self-test.yml
• .github/workflows/ci.yml
• .github/workflows/dependencies.yml
• .github/workflows/issue-ops.yml
• .github/workflows/on-maintenance.yml
• .github/workflows/pull-request.yml
• .github/workflows/release.yml
• .github/workflows/reusable-ci.yml
• manifest.yml

---

📝 Walkthrough

Walkthrough

This PR systematically updates pinned commit SHAs for YiAgent/OpenCI reusable workflows and vendored actions across all GitHub Actions workflow files and the manifest, upgrading from 8a19e190... to 9bd9cf085... with no functional logic changes.

Changes

Dependency Version Bump

Layer / File(s)	Summary
Workflow Pinning .github/workflows/agent.yml, .github/workflows/ci-self-test.yml, .github/workflows/ci.yml, .github/workflows/dependencies.yml, .github/workflows/on-maintenance.yml, .github/workflows/pull-request.yml, .github/workflows/release.yml	Reusable workflow uses: references updated to new YiAgent/OpenCI commit SHA (9bd9cf0...).
Multi-Job Workflow Updates .github/workflows/issue-ops.yml	lifecycle, maintenance, and manual jobs updated to reference reusable-issue workflow at new commit SHA.
Action Pin Updates .github/workflows/reusable-ci.yml	Resolve-openci action pins updated across eight jobs (preflight, detect-language, build-docker, scan-image, sign-image, check-migration, eval-smoke, agent) to new commit SHA.
Manifest Dependency manifest.yml	YiAgent/OpenCI bootstrap dependency pin updated to new commit SHA.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~5 minutes

Possibly related PRs

• YiAgent/OpenCI#84: Performs the same commit SHA update pattern across identical workflow files and action pins.
• YiAgent/OpenCI#70: Updates the same reusable workflow references across matching GitHub Actions workflow files.
• YiAgent/OpenCI#77: Updates pinned YiAgent/OpenCI commit SHAs in the same workflow files.

Suggested labels

area:ci

Poem

🐰 A version bump so clean and neat,
From old pins to commits fresh,
Eight workflows, manifest complete,
Dependencies dance—no logic's mesh!
OpenCI updates flow through, sublime!

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bump-self-sha-

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud