Dylan M. Taylor 06c2ae6f9d ci: use StepSecurity's maintained actions (#6343) ...

Each third-party action that StepSecurity publishes a secure drop-in
replacement for now uses that replacement, pinned to a commit with its
version as a comment. Versions follow what we used: the newest
StepSecurity release in the same major, or the closest major they
publish. dtolnay/rust-toolchain refs that named a toolchain (stable,
nightly, 1.76) become the replacement's `toolchain` input.

2026-11-11 14:59:04 -05:00

..

ci.yml

Release and CI: the suite's craft-fonts pin (bfcbf714, the same fonts as a71c20e) instead of an app override (#3888)

2026-10-24 21:05:19 +00:00

freebsd.yml

Release and CI: the suite's craft-fonts pin (bfcbf714, the same fonts as a71c20e) instead of an app override (#3888)

2026-10-24 21:05:19 +00:00

house-rules.yml

Copy the shared house rules into AGENTS.md.

2026-11-06 11:50:02 +01:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:51 -04:00

packaging-lint.yml

ci: run Harden-Runner on every job (#6327)

2026-11-11 12:44:00 -05:00

printing.yml

ci: use StepSecurity's maintained actions (#6343)

2026-11-11 14:59:04 -05:00

release.yml

Release: refresh contributor credits for each release (#5844) (#5845)

2026-11-08 01:31:33 +01:00

sonarcloud.yml

ci(sonar): don't cancel superseded runs on main, so coverage is published (#4070)

2026-10-23 17:01:48 -04:00

windows-arm64.yml

CI: workflows only call craft-common-actions at @main (#4919)

2026-10-29 22:17:20 -04:00