William Woodruff 74b1866cee chore(ci): address all lint findings (#206) ...

This addresses a variety of findings, mostly around overly broad default
permissions and credential sharing.

I've also run [pinact](https://github.com/suzuki-shunsuke/pinact) to
auto-hash-pin all action references -- Dependabot will still update
these, but having them hash-pinned will seal off any undesirable
tag/branch mutability 🙂

(99% of these findings were done automatically with `zizmor --fix=all`,
followed by verifying the results. I haven't added a
[zizmor](https://docs.zizmor.sh) workflow as part of this PR, but I'd be
happy to if desired.)

---------

Signed-off-by: William Woodruff <william@astral.sh>

2025-08-20 00:07:37 +02:00

..

matchers

bump biome to 2.1.4 (#201)

2025-08-12 19:53:24 +00:00

scripts

Check that all jobs are in all-tests-passed.needs (#151)

2025-05-26 18:36:12 +00:00

workflows

chore(ci): address all lint findings (#206)

2025-08-20 00:07:37 +02:00

dependabot.yml

Convert from composite to typescript (#17)

2024-12-03 17:18:31 +01:00

release-drafter.yml

Move release-drafter.yml to .github (#22)

2024-12-06 13:17:45 +01:00