Marc-André Bombeck de7c89a462 ci: keep the dependency audit visible on pull requests without blocking them ...

The audit had moved off the pull_request trigger entirely, which left a window in which a tag could be cut from a merge the audit had not seen. It runs on pull requests again as an advisory job (continue-on-error), stays blocking on the push run for main and on the daily schedule, and a tag is only ever cut from a green push run.

2026-09-10 00:20:30 +02:00

..

coach-eval.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

codeql.yml

ci: move every codeql-action pin to v4.37.9 in one commit

2026-08-30 20:20:31 +02:00

dependabot-auto-merge.yml

ci: give every job that runs the unit suite a browser

2026-09-09 22:47:31 +02:00

docker-publish.yml

Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#832)

2026-08-23 18:28:46 +02:00

e2e.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

env-check.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

integration.yml

ci: split the integration suite four ways and widen the guard

2026-09-01 20:28:32 +02:00

knip.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

no-todo-markers.yml

chore(release): fold in the coach discriminant, the dependency bumps, and the notes the audit found wrong

2026-07-26 18:57:21 +02:00

post-publish-verify.yml

build(deps): bump docker/login-action from 4.5.1 to 4.6.0

2026-08-03 11:02:10 +00:00

scorecard.yml

ci: move every codeql-action pin to v4.37.9 in one commit

2026-08-30 20:20:31 +02:00

security.yml

ci: keep the dependency audit visible on pull requests without blocking them

2026-09-10 00:20:30 +02:00

trivy.yml

ci: take the dependency audit off pull requests

2026-09-09 22:42:54 +02:00