dependabot[bot]
|
04a57f047b
|
Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#20)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](b7c566a772...043fb46d1a)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-10 00:34:05 +07:00 |
|
dependabot[bot]
|
bcc79124c1
|
Bump actions/setup-dotnet from 5.4.0 to 6.0.0 (#19)
Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 5.4.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](26b0ec14cb...a98b56852c)
---
updated-dependencies:
- dependency-name: actions/setup-dotnet
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-10 00:33:48 +07:00 |
|
ochenstarik-ui
|
1b798e7ee8
|
Merge pull request #15 from ochenstarik-ui/antigravity/reproducible-builds
feat: reproducible builds — central package versions and lock files
|
2026-08-09 19:08:08 +07:00 |
|
ochenstarik-ui
|
ec78537656
|
feat: reproducible builds — central package versions and lock files
|
2026-08-09 18:13:34 +07:00 |
|
ochenstarik-ui
|
4cc873883c
|
chore: repo hygiene — pin actions, dependabot, SBOM, docs
- Pin all 23 GitHub Actions uses to 40-char commit SHA with tag comments:
actions/checkout@v6 -> d23441a48e516b6c34aea4fa41551a30e30af803 (v6.1.0)
actions/setup-dotnet@v5 -> 26b0ec14cb23fa6904739307f278c14f94c95bf1 (v5.4.0)
actions/upload-artifact@v6 -> b7c566a772e6b6bfb58ed0dc250532a479d7789f (v6.0.0)
actions/download-artifact@v8 -> 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c (v8.0.1)
softprops/action-gh-release@v2 -> 3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 (v2.6.2)
SHAs verified via gh api repos/<owner>/<action>/git/ref/tags/<tag>
- Move contents:write from workflow level to release steps only
- Add dotnet CycloneDX SBOM generation to linux-release and windows-release
- Add .github/dependabot.yml (github-actions + nuget, weekly, limit 5 PRs)
- Add SECURITY.md with private advisory channel, 72h SLA, threat model
- Add CHANGELOG.md from real git history (Keep a Changelog format)
- Add CONTRIBUTING.md with build/test instructions and Linux test note
- Add CODEOWNERS
- Add .github/ISSUE_TEMPLATE/{bug_report,feature_request}.md
- Add .github/PULL_REQUEST_TEMPLATE.md with mandatory verification checklist
|
2026-08-07 11:40:34 +07:00 |
|
ochenstarik-ui
|
c13501e529
|
fix(security): pin SSH trust and protect session keys (#8)
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-07-31 02:36:52 +07:00 |
|
ochenstarik-ui
|
266900115c
|
Harden Link lifecycle and Control operations
* Harden link lifecycle and control operations
* Complete three-server acceptance lifecycle
---------
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
|
2026-07-19 12:25:10 +07:00 |
|
Ochenstarik
|
497f197069
|
Normalize Windows workflow script indentation
|
2026-07-17 09:49:50 +07:00 |
|
Ochenstarik
|
2c31a10216
|
Fix clean runner MSIX publishing
|
2026-07-17 09:49:10 +07:00 |
|
Ochenstarik
|
5c383ec9e2
|
Add signed Windows MSIX release pipeline
|
2026-07-17 09:19:09 +07:00 |
|
Ochenstarik
|
0f6dd31646
|
Restore ReadyToRun pack in CI
|
2026-07-16 18:52:48 +07:00 |
|
Ochenstarik
|
4fc5263c8d
|
Restore explicit Windows runtime in CI
|
2026-07-16 18:48:00 +07:00 |
|
Ochenstarik
|
4015e3e777
|
Add Windows build verification
|
2026-07-16 18:18:03 +07:00 |
|