4 Commits

Author	SHA1	Message	Date
renovate[bot]	ad2087feec	Update dependency ubuntu to v26	2026-10-05 06:23:51 +00:00
lilleman	e4435008ac	Answer architecture round 1: the publish job's write token reaches only the tag push, publishing names main, and the audit's other findings are filed	2026-10-04 23:36:47 +02:00
lilleman	dbe63ab3f4	Answer security round 1: the gate checks out without persisted credentials	2026-10-04 23:36:47 +02:00
lilleman	2ab1110710	Make GitHub canonical: CI and publishing on GitHub Actions, links and package metadata point there, Gitea waits to become a mirror	2026-10-04 23:36:47 +02:00