Dylan M. Taylor 2b65ab000b ci: use StepSecurity's maintained actions (#7026) ...

Each third-party action that StepSecurity publishes a secure drop-in
replacement for now uses that replacement, pinned to a commit with its
version as a comment. Versions follow what we used: the newest
StepSecurity release in the same major, or the closest major they
publish. dtolnay/rust-toolchain refs that named a toolchain (stable,
nightly, 1.76) become the replacement's `toolchain` input.

2026-11-11 15:20:18 -05:00

..

ci.yml

ci: run Harden-Runner on every job (#7003)

2026-11-11 12:12:27 -05:00

freebsd.yml

Migrate PdfCraft to egui 0.37 (#4591)

2026-10-25 14:30:31 -04:00

fuzz.yml

ci: use StepSecurity's maintained actions (#7026)

2026-11-11 15:20:18 -05:00

house-rules.yml

Copy the shared house rules into AGENTS.md.

2026-11-06 11:50:02 +01:00

nightly-macos.yml

CI: the workspace's tests on macOS each night (and on demand) (#6921)

2026-11-10 22:13:16 +01:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:29 -04:00

packaging-lint.yml

ci: run Harden-Runner on every job (#7003)

2026-11-11 12:12:27 -05:00

release.yml

Release: refresh contributor credits for each release (#6487) (#6488)

2026-11-08 02:22:15 +01:00

sonarcloud.yml

ci(sonar): don't cancel superseded runs on main, so coverage is published (#4321)

2026-10-23 17:06:26 -04:00

windows-arm64.yml

CI: workflows only call craft-common-actions at @main (#5378)

2026-10-29 22:10:15 -04:00