From 66540dc1c1d7528b1a46e3f06a0ad28c3c8eb9d4 Mon Sep 17 00:00:00 2001
From: Oskar Weser <oskar.weser@ecmwf.int>
Date: Thu, 12 Mar 2026 13:20:57 +0100
Subject: [PATCH 1/2] use the harden_types branch

from https://github.com/ecmwf/downstream-ci/pull/70/
---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ed008dc64..50abb1266 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
   downstream-ci:
     name: downstream-ci
     if: ${{ !github.event.pull_request.head.repo.fork && github.event.action != 'labeled' || github.event.label.name == 'approved-for-ci' }}
-    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci.yml@main
+    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci.yml@harden_types
     with:
       mir: ecmwf/mir@${{ github.event.pull_request.head.sha || github.sha }}
       codecov_upload: true
@@ -52,7 +52,7 @@ jobs:
   downstream-ci-hpc:
     name: downstream-ci-hpc
     if: ${{ !github.event.pull_request.head.repo.fork && github.event.action != 'labeled' || github.event.label.name == 'approved-for-ci' }}
-    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci-hpc.yml@main
+    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci-hpc.yml@harden_types
     with:
       mir: ecmwf/mir@${{ github.event.pull_request.head.sha || github.sha }}
     secrets: inherit

From 5649b44d45fb36789816da7761cff6912fd1eb81 Mon Sep 17 00:00:00 2001
From: Oskar Weser <oskar.weser@ecmwf.int>
Date: Thu, 12 Mar 2026 13:35:48 +0100
Subject: [PATCH 2/2] revert to main

---
 .github/workflows/ci.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 50abb1266..a50f31677 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,12 +24,13 @@ jobs:
   downstream-ci:
     name: downstream-ci
     if: ${{ !github.event.pull_request.head.repo.fork && github.event.action != 'labeled' || github.event.label.name == 'approved-for-ci' }}
-    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci.yml@harden_types
+    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci.yml@main
     with:
       mir: ecmwf/mir@${{ github.event.pull_request.head.sha || github.sha }}
       codecov_upload: true
     secrets: inherit
 
+
   # Run CI of private downstream packages on self-hosted runners
   private-downstream-ci:
     name: private-downstream-ci
@@ -52,7 +53,7 @@ jobs:
   downstream-ci-hpc:
     name: downstream-ci-hpc
     if: ${{ !github.event.pull_request.head.repo.fork && github.event.action != 'labeled' || github.event.label.name == 'approved-for-ci' }}
-    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci-hpc.yml@harden_types
+    uses: ecmwf/downstream-ci/.github/workflows/downstream-ci-hpc.yml@main
     with:
       mir: ecmwf/mir@${{ github.event.pull_request.head.sha || github.sha }}
     secrets: inherit