chore(manifest): bump YiAgent/OpenCI SHA to 9f493fa (post-cascade)

[YiWang24]

Summary

Final SHA bump after the entire fix-cascade landed (#48, #55, #53, #57, #61, #63, #65, #52, #58). Updates manifest.yml + every workflow ref to 9f493fa (current main HEAD).

Auto-generated via bash scripts/bump-self-sha.sh.

Test plan

• verify-sha-consistency passes (365 uses, 0 errors)
• actionlint clean
• After merge: future PRs' pull-request workflow turns fully green

---

^{Need help on this PR? Tag @codesmith with what you need.}

• Let Codesmith autofix CI failures and bot reviews

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions CI/CD pipeline workflow references and infrastructure dependencies to latest upstream versions across continuous integration, testing, deployment, documentation generation, release management, and observability systems. All updates maintain system stability and existing functionality with no impact to user-facing features.

[qodo-code-review]

ⓘ You've reached your Qodo monthly free-tier limit. Reviews pause until next month — upgrade your plan to continue now, or link your paid account if you already have one.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 6e14393e-e311-4ca8-96a5-708373c0b4fb

📥 Commits

Reviewing files that changed from the base of the PR and between 9f493fa and a8ec91c.

📒 Files selected for processing (13)

• .github/workflows/agent.yml
• .github/workflows/ci-self-test.yml
• .github/workflows/ci.yml
• .github/workflows/dependencies.yml
• .github/workflows/deploy.yml
• .github/workflows/docs.yml
• .github/workflows/issue-ops.yml
• .github/workflows/observability.yml
• .github/workflows/on-maintenance.yml
• .github/workflows/pull-request.yml
• .github/workflows/release.yml
• .github/workflows/reusable-ci.yml
• manifest.yml

---

📝 Walkthrough

Walkthrough

This PR updates all GitHub Actions workflow files and the manifest to pin reusable workflow and action references to a newer commit hash (9f493fad64aa46e54da36b9fc5709bebbf529098), replacing the previous pinned SHA across all jobs without changing any workflow logic or inputs.

Changes

Dependency Pin Update

Layer / File(s)	Summary
Manifest Dependency manifest.yml	YiAgent/OpenCI self-referenced action SHA updated from 50ce4563... to 9f493fad....
Reusable Workflow References .github/workflows/agent.yml, .github/workflows/ci-self-test.yml, .github/workflows/ci.yml, .github/workflows/dependencies.yml, .github/workflows/deploy.yml, .github/workflows/docs.yml, .github/workflows/issue-ops.yml, .github/workflows/observability.yml, .github/workflows/on-maintenance.yml, .github/workflows/pull-request.yml, .github/workflows/release.yml	All job uses: references to YiAgent/OpenCI reusable workflows updated to the new pinned commit across 13 workflow invocations.
Internal Action References .github/workflows/reusable-ci.yml	Eight instances of YiAgent/OpenCI/actions/_common/resolve-openci action pins updated to the new commit SHA across the preflight, detect-language, build-docker, scan-image, sign-image, check-migration, eval-smoke, and agent jobs.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~15 minutes

Possibly related PRs

• fix(workflows): update pinned SHA to commit with reusable/ directory #36: Both PRs perform bulk updates to the same reusable-workflow and action pins across .github/workflows files and manifest.
• fix(workflows): replace relative reusable paths with full org/repo refs #35: Both PRs modify reusable-workflow uses: references in GitHub Actions workflows to update pinned SHAs across multiple workflow files.
• feat: add Marketplace entry point and 11 reusable AI workflows #7: This PR pins reusable workflows to a commit that likely contains the Marketplace entry point and reusable workflows introduced in that PR.

Poem

🐰 A pin update hops through the workflows today,

From 50ce45... to 9f493fad... we say,

Thirteen files align in orderly rows,

While actions and reusables dance through the flows! ✨

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bump-sha-final

---

_{Review rate limit: 9/10 reviews remaining, refill in 6 minutes.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud