knylbyteandGitHub 4665f1eac3 feat: harden CI with privacy scanning and Dependabot (#953) ...

* feat (ci): add Gitleaks pre-push privacy scanning

* feat (ci): use dev-slim for workspace tests

* feat (ci): enable Dependabot for Docker and GitHub Actions

* feat (ci): harden build process

* fix (ci): preserve release versions and harden privacy checks

* fix (ci): scan full PR history with the official Gitleaks image

* build GitHub release bundles in CI

- master raises minor (patch 0), develop raises patch; merge release back into develop
- release bundles for linux musl x86_64/aarch64/armv7 and windows-gnu
- pin cross images via docker/cross, check armv7/windows in PR CI
- remove bin/release.sh, inc_version.sh, darwin cross script
- pre-push hook keeps FETCH_HEAD, fix docker context reuse

* build: add pre-merge-check and i18n-check targets

* - accept workspace dep versions in release back-merge
- harden release back-merge, i18n check and home-path rule

2026-10-31 00:07:34 +01:00

..

ISSUE_TEMPLATE

Markdownlint (#584)

2026-02-14 15:13:11 +01:00

workflows

feat: harden CI with privacy scanning and Dependabot (#953)

2026-10-31 00:07:34 +01:00

dependabot.yml

feat: harden CI with privacy scanning and Dependabot (#953)

2026-10-31 00:07:34 +01:00