4gray f193232dab ci(deps): bump checkout/upload-artifact/download-artifact majors (#1264) ...

Supersedes #1249, #1245 and #1247, which each rewrote the full-commit pins in
publish-snap.yaml while the same SHAs are asserted in three packaging test
files — merged separately, every one of them left those tests red.

actions/checkout v4 -> v7 (docker.yml from v6), actions/upload-artifact
v4 -> v7, actions/download-artifact v4 -> v8. New pins verified against the
upstream tag refs: checkout 3d3c42e5 = v7.0.1, upload-artifact 043fb46d =
v7.0.1, download-artifact 3e5f45b2 = v8.0.1.

download-artifact v8 changes two things on the Snap publish path, both in our
favour: a digest mismatch now fails the run instead of logging a warning, and
decompression is skipped for non-zip Content-Types (our artifact is a normal
upload-artifact zip, so unchanged). checkout v7's fork-PR block only applies to
pull_request_target/workflow_run, neither of which exists here.

2026-07-26 19:54:39 +02:00

..

ISSUE_TEMPLATE

chore: back to electron + nx

2025-10-07 18:02:13 +02:00

workflows

ci(deps): bump checkout/upload-artifact/download-artifact majors (#1264)

2026-07-26 19:54:39 +02:00

actionlint.yaml

ci: cut PR runner waste and harden workflow permissions (#1226)

2026-07-25 14:37:40 +02:00

dependabot.yml

ci: cut PR runner waste and harden workflow permissions (#1226)

2026-07-25 14:37:40 +02:00

FUNDING.yml

Update FUNDING.yml

2024-06-30 18:54:51 +02:00

pull_request_template.md

chore(release): author release notes in .changes instead of reconstructing them (#1256)

2026-07-25 18:22:43 +02:00