v0.8.5: registration lock, pre-commit yamllint

- Extension registration guard now uses threading.Lock for correctness.
- Pre-commit hook now runs yamllint on workflow files.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: barnumbirr

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.8.5] - 2026-04-09
+
+### Changed
+- Extension registration guard now uses `threading.Lock` for correctness.
+- Pre-commit hook now runs `yamllint` on workflow files.
+
 ## [0.8.4] - 2026-04-08
 
 ### Added

octorules_google/_policy_settings.py

@@ -10,6 +10,7 @@
 """
 
 import logging
+import threading
 from dataclasses import dataclass, field
 
 log = logging.getLogger(__name__)
@@ -420,14 +421,16 @@ def format_report(self, plans: list, zone_has_drift: bool, phases_data: list[dic
 # Registration
 # ---------------------------------------------------------------------------
 _registered = False
+_register_lock = threading.Lock()
 
 
 def register_policy_settings() -> None:
     """Register all policy settings hooks with the core extension system."""
     global _registered
-    if _registered:
-        return
-    _registered = True
+    with _register_lock:
+        if _registered:
+            return
+        _registered = True
 
     from octorules.extensions import (
         register_apply_extension,

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "octorules-google"
-version = "0.8.4"
+version = "0.8.5"
 description = "Google Cloud Armor provider for octorules"
 license = "Apache-2.0"
 requires-python = ">=3.10"

scripts/hooks/pre-commit

@@ -8,3 +8,4 @@ set -euo pipefail
 .venv/bin/pip install -e ".[dev]" -q
 .venv/bin/ruff check octorules_google/ tests/
 .venv/bin/ruff format --check octorules_google/ tests/
+.venv/bin/yamllint --no-warnings .github/workflows/*.yaml