From fb4b277eadf4113a0cbe4ece1aaad9fa8f9f530c Mon Sep 17 00:00:00 2001
From: Kevin Tang <73975146+vt128@users.noreply.github.com>
Date: Sun, 20 Sep 2026 02:24:50 +0800
Subject: [PATCH] [ci] adopt the verified configuration documentation gate
 (STAR-93)

---
 .github/workflows/go-ci.yml    | 2 +-
 .github/workflows/selftest.yml | 9 ---------
 2 files changed, 1 insertion(+), 10 deletions(-)

diff --git a/.github/workflows/go-ci.yml b/.github/workflows/go-ci.yml
index 1931295..b4b3052 100644
--- a/.github/workflows/go-ci.yml
+++ b/.github/workflows/go-ci.yml
@@ -138,7 +138,7 @@ jobs:
       # doc-coverage input on starpkg domain modules.
       - name: Doc coverage
         if: ${{ fromJSON(env.IS_CHECKS) && inputs.doc-coverage }}
-        run: go run github.com/1set/meta/doccov@cc6a3ec4d182169381eb8ca5a492be0d57013c0c -readme "${{ inputs.doc-coverage-file }}" ${{ inputs.doc-coverage-config && '-config' || '' }} .
+        run: go run github.com/1set/meta/doccov@7f86e3579435f4ad11bc9f757d3f7af1ad6b4bf0 -readme "${{ inputs.doc-coverage-file }}" ${{ inputs.doc-coverage-config && '-config' || '' }} .
       - name: Test
         run: make ci
       # Test-coverage gate (ratchet): covcheck parses the coverage.txt that
diff --git a/.github/workflows/selftest.yml b/.github/workflows/selftest.yml
index 5dc3f25..5e4618d 100644
--- a/.github/workflows/selftest.yml
+++ b/.github/workflows/selftest.yml
@@ -8,12 +8,6 @@ on:
     branches: ["master"]
   pull_request:
     branches: ["master"]
-  workflow_dispatch:
-    inputs:
-      coverage-ref:
-        description: "Exact commit SHA for a one-time tools coverage baseline (empty = current commit)"
-        required: false
-        type: string
 
 permissions: read-all
 
@@ -38,8 +32,6 @@ jobs:
       id-token: write
     steps:
       - uses: actions/checkout@v5
-        with:
-          ref: ${{ inputs.coverage-ref || github.sha }}
       - uses: actions/setup-go@v6
         with:
           go-version: "1.19.x"
@@ -49,6 +41,5 @@ jobs:
         with:
           use_oidc: true
           files: coverage-tools.txt
-          override_commit: ${{ inputs.coverage-ref }}
           disable_search: true
           fail_ci_if_error: true