From a6c448748981dac9a21a65309a8b5ed7d940ee68 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:36:27 +0000
Subject: [PATCH] build(deps): bump CorvidLabs/spec-sync

Bumps [CorvidLabs/spec-sync](https://github.com/corvidlabs/spec-sync) from ef3678c2587f446e8f154f722765791ba0a8eaea to 342bd053d410211c16fcd041a9eb94ed53012fe2.
- [Release notes](https://github.com/corvidlabs/spec-sync/releases)
- [Changelog](https://github.com/CorvidLabs/spec-sync/blob/main/CHANGELOG.md)
- [Commits](https://github.com/corvidlabs/spec-sync/compare/ef3678c2587f446e8f154f722765791ba0a8eaea...342bd053d410211c16fcd041a9eb94ed53012fe2)

---
updated-dependencies:
- dependency-name: CorvidLabs/spec-sync
  dependency-version: 342bd053d410211c16fcd041a9eb94ed53012fe2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/release.yml | 4 ++--
 action.yml                    | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 88a6117..e0c5edc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -56,7 +56,7 @@ jobs:
           chmod +x "$install_dir/fledge"
           echo "$install_dir" >> "$GITHUB_PATH"
       - name: Validate tagged source contract
-        uses: CorvidLabs/spec-sync@ef3678c2587f446e8f154f722765791ba0a8eaea # v5.2.0
+        uses: CorvidLabs/spec-sync@342bd053d410211c16fcd041a9eb94ed53012fe2 # v5.2.0
         with:
           version: "5.2.0"
           root: .
@@ -111,7 +111,7 @@ jobs:
           fledge trust adopt --dry-run --root "$FIXTURE"
           fledge trust adopt --root "$FIXTURE"
       - name: Install pinned SpecSync 5.2.0
-        uses: CorvidLabs/spec-sync@ef3678c2587f446e8f154f722765791ba0a8eaea # v5.2.0
+        uses: CorvidLabs/spec-sync@342bd053d410211c16fcd041a9eb94ed53012fe2 # v5.2.0
         with:
           version: "5.2.0"
           root: ${{ runner.temp }}/trust-tag-dogfood
diff --git a/action.yml b/action.yml
index 511f4f3..f0f5880 100644
--- a/action.yml
+++ b/action.yml
@@ -160,7 +160,7 @@ runs:
     - name: Contract gate
       if: steps.config.outputs.contract_enabled == 'true'
       id: contract
-      uses: CorvidLabs/spec-sync@ef3678c2587f446e8f154f722765791ba0a8eaea
+      uses: CorvidLabs/spec-sync@342bd053d410211c16fcd041a9eb94ed53012fe2
       with:
         version: ${{ steps.config.outputs.specsync_version }}
         download-base-url: ${{ steps.config.outputs.specsync_download_base_url }}