open-code-review/.github
kite be5e79c1a7
ci: upgrade low-risk GitHub Actions dependencies (#468)
Upgrade actions with minimal breaking-change surface:
- actions/checkout v4 → v7
- actions/setup-node v4 → v7
- actions/cache v4 → v6
- actions/github-script v7 → v9
- actions/upload-pages-artifact v3 → v5
- actions/deploy-pages v4 → v5
- softprops/action-gh-release v2 → v3
- actions/attest-build-provenance v2 → v4

Deliberately keeps upload-artifact and download-artifact at v4
to avoid the artifact format and hash-enforcement breaking changes
in v7/v8 that could disrupt the release pipeline.

Verified: self-hosted runner is v2.335.1, exceeds the v2.329.0
requirement for checkout v6+ credential persistence in containers.
2026-07-30 15:54:59 +08:00
..
ISSUE_TEMPLATE chore: route security reports to private advisories (#435) 2026-07-22 11:35:22 +08:00
workflows ci: upgrade low-risk GitHub Actions dependencies (#468) 2026-07-30 15:54:59 +08:00
dependabot.yml chore(deps): let dependabot cover the VS Code extension (#437) 2026-07-23 20:28:34 +08:00
pull_request_template.md Add issue and PR templates with bilingual contributing guide (#9) 2026-05-30 14:22:50 +08:00
release.yml feat(release): auto-generate structured release notes from conventional commits 2026-06-22 15:52:06 +08:00