zeroclaw

Author	SHA1	Message	Date
blacksmith-sh[bot]	15bccf11d7	Migrate workflows to Blacksmith (#428 ) Co-authored-by: blacksmith-sh[bot] <157653362+blacksmith-sh[bot]@users.noreply.github.com>	2026-02-16 15:58:54 -05:00
fettpl	9df5a07640	ci: pin all GitHub Actions to full SHA digests Pin every third-party GitHub Action to its current commit SHA with a version comment, eliminating supply chain risk from mutable version tags. Mutable tags (v4, v2, etc.) can be force-pushed by upstream maintainers; SHA digests are immutable. 18 unique actions pinned across 9 workflow files. Closes #357 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 17:32:18 +01:00
dependabot[bot]	1ec8b7e57a	build(deps): bump actions/github-script from 7 to 8 (#313 ) Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-16 07:42:10 -05:00
Chummy	9428d3ab74	chore(ci): add PR hygiene nudge automation (#278 )	2026-02-16 01:57:45 -05:00