chore(manifest): bump SHA to 5ff2579 (post-#71 RELEASE_PAT support)

[YiWang24]

Final SHA bump after #71 (RELEASE_PAT + allowed_bots support).

---

^{Need help on this PR? Tag @codesmith with what you need.}

• Let Codesmith autofix CI failures and bot reviews

Summary by CodeRabbit

• Chores
  • Updated pinned commit references for all internal GitHub Actions reusable workflows to the latest versions across all CI/CD pipelines including agent execution, continuous integration, testing, deployment, documentation generation, issue operations, observability monitoring, and release automation. No functional changes or user-facing impacts.

[qodo-code-review]

ⓘ You've reached your Qodo monthly free-tier limit. Reviews pause until next month — upgrade your plan to continue now, or link your paid account if you already have one.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3668b5f5-04f3-4e55-9a4f-f9706744e469

📥 Commits

Reviewing files that changed from the base of the PR and between 5ff2579 and dfde1c8.

📒 Files selected for processing (13)

• .github/workflows/agent.yml
• .github/workflows/ci-self-test.yml
• .github/workflows/ci.yml
• .github/workflows/dependencies.yml
• .github/workflows/deploy.yml
• .github/workflows/docs.yml
• .github/workflows/issue-ops.yml
• .github/workflows/observability.yml
• .github/workflows/on-maintenance.yml
• .github/workflows/pull-request.yml
• .github/workflows/release.yml
• .github/workflows/reusable-ci.yml
• manifest.yml

---

📝 Walkthrough

Walkthrough

This PR updates pinned commit SHAs for OpenCI reusable workflows across 12 GitHub Actions workflow files and the project manifest. All changes mechanically replace the old commit hash (e731bee941a6290db5d0ba1d513c0e7d44260a0f) with a new pinned revision (5ff2579c96dd77692b3db49ed991ecb8edece8f9), with no functional logic or configuration modifications.

Changes

OpenCI Reusable Workflow Version Update

Layer / File(s)	Summary
Dependency Manifest manifest.yml	Pinned YiAgent/OpenCI vendored dependency updated to new commit SHA (5ff2579c...).
Workflow Reusable References .github/workflows/agent.yml, ci-self-test.yml, ci.yml, dependencies.yml, deploy.yml, docs.yml, issue-ops.yml, observability.yml, on-maintenance.yml, pull-request.yml, release.yml	All jobs' uses: references to OpenCI reusable workflows updated to new pinned commit SHA; no input, secret, or logic changes.
Reusable Workflow Internal Actions .github/workflows/reusable-ci.yml	Multiple jobs' Resolve OpenCI ref and checkout steps updated to pin newer YiAgent/OpenCI/actions/_common/resolve-openci action revision.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• fix(workflows): update pinned SHA to commit with reusable/ directory #36 — Both PRs directly update the same reusable workflow SHA references across multiple .github/workflows/* files and related manifests.
• fix(workflows): replace relative reusable paths with full org/repo refs #35 — Both PRs modify the same workflow uses: call sites, replacing reusable workflow reference SHAs.
• fix(workflows): standardize model/api-base-url params for custom LLM #38 — Both PRs update pinned revisions of OpenCI reusable workflows across the same set of workflow files.

Poem

A hop and a skip, the SHA's renewed,
From old commit pins to the latest brew,
Workflows cascade with a unified leap,
OpenCI's version now strong and deep! 🐰✨

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bump-sha-after-71

---

_{Review rate limit: 8/10 reviews remaining, refill in 10 minutes and 15 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud