fix(renovate): drop followTag on retired v1 floating tag

[williaby]

Removes followTag: "v1" from the org-workflow Renovate rule. The org tag-protection ruleset forbids re-pointing v* tags, so v1 froze at the v1.1.0 commit and the followed tag silently froze all org-workflow SHA-pin updates. Plain semver tracking of the immutable vX.Y.Z release tags restores update delivery.

Companion to ByronWilliamsCPA/.github#244 (v1 tag retirement) and ByronWilliamsCPA/.claude#251 (CI-057 inversion). Satisfies the inverted CI-057.

Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated automated dependency updates for reusable workflow references to track the latest semantic-versioned release tag instead of the floating v1 tag.
  • Clarified the rule description for this update behavior.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Team

Run ID: 81a99572-bfae-49ab-a3b0-6d4d2a4aa105

📥 Commits

Reviewing files that changed from the base of the PR and between e3ea1fc and c69a3c8.

📒 Files selected for processing (1)

• renovate.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

Changes

Renovate workflow updates

Layer / File(s)	Summary
Update workflow tag policy renovate.json	The reusable workflow rule no longer follows the floating v1 tag. Renovate now updates SHA pins to the latest semver release tag, and the rule description documents this behavior.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to c69a3

Renovate can again advance reusable-workflow SHA pins using immutable semver release tags, restoring update delivery without an identified merge-blocking risk.

Suggested reviewers: byronwilliamscpa

Poem

A rabbit reads each line,
The patch grows clear beneath the moon,
Small changes hop in place,
Tests guard the garden path,
Reviews bloom before the dawn.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the main change: removing followTag for the retired floating v1 tag in Renovate configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/retire-followtag-v1-0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

Updates this repository’s Renovate configuration to restore automated updates for reusable workflow SHA pins after the org’s floating v1 tag was retired/frozen due to tag protection rules.

Changes:

• Removes followTag: "v1" from the org reusable-workflow rule so Renovate doesn’t silently stop delivering SHA-pin updates.
• Clarifies the rule intent via an updated description and relies on semver tracking of immutable vX.Y.Z tags.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud