Martin Vogel 88ed09838f ci(codeql): bump init and analyze together to v4.37.4 ...

Same treatment as v4.37.3 (#1434): dependabot splits the codeql-action
bump into init-only and analyze-only PRs (#1398, #1399 after their
rebase to 4.37.4), but the two actions must run at the same version, so
each split PR fails its own analyze job. SHA verified against the
upstream v4.37.4 tag.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-08-04 19:17:29 +02:00

..

ISSUE_TEMPLATE

feat(diag): persistent memory trajectory + query-leak CI soak for #581

2026-06-28 23:28:01 +02:00

workflows

ci(codeql): bump init and analyze together to v4.37.4

2026-08-04 19:17:29 +02:00

CODEOWNERS

docs: make maintainer policy project-oriented

2026-06-29 00:00:10 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

issue-labeler.yml

fix(ci): issue labeler no-oped on every issue — (?i) is invalid in JS RegExp

2026-07-10 00:03:43 +02:00

label-actions.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00

pr-acknowledgement.md

docs(ci): tell contributors the release freeze is over, not that it is ongoing

2026-07-31 02:29:13 +02:00

pull_request_template.md

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00