Dylan M. Taylor dbc7130b36 ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#3932) ...

Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.

2026-10-21 20:14:11 -04:00

..

workflows

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#3932)

2026-10-21 20:14:11 -04:00

actionlint.yaml

Restore #196, #202, #203 and the macOS release-runner change, reverted by the i18n chain (#229)

2026-10-08 03:33:35 -04:00

dependabot.yml

ci: configure Dependabot for Cargo and GitHub Actions (#3304)

2026-10-18 15:11:14 -04:00

pull_request_template.md

Add a PR template, and record the review practice and external-PR bar

2026-10-12 13:56:58 -07:00