Martin Vogel 181eafba9a ci(codeql): bump init and analyze together to v4.37.3 ...

Dependabot split the codeql-action bump into two PRs (#1398 init,
#1399 analyze), but init and analyze must run the same action version:
each PR alone fails its own analyze job with "Loaded a configuration
file for version '4.37.3', but running version '4.36.2'". Bump both
pins in one change instead. SHA verified against the upstream v4.37.3
tag.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-08-04 17:16:51 +02:00

..

ISSUE_TEMPLATE

feat(diag): persistent memory trajectory + query-leak CI soak for #581

2026-06-28 23:28:01 +02:00

workflows

ci(codeql): bump init and analyze together to v4.37.3

2026-08-04 17:16:51 +02:00

CODEOWNERS

docs: make maintainer policy project-oriented

2026-06-29 00:00:10 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

issue-labeler.yml

fix(ci): issue labeler no-oped on every issue — (?i) is invalid in JS RegExp

2026-07-10 00:03:43 +02:00

label-actions.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00

pr-acknowledgement.md

docs(ci): tell contributors the release freeze is over, not that it is ongoing

2026-07-31 02:29:13 +02:00

pull_request_template.md

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00