Fix every false positive, false negative, warning and error in CI/CD - #291

Merged

konard merged 36 commits into

mainfrom

issue-290-642ff58c1ef8

Aug 28, 2026

Commits on Aug 28, 2026

Initial commit with task details
konard
committed
99c1cf8
build(python): silence setuptools deprecations and ship the license
konard
committed
4255ba1
build(java): compile against the Java 11 API and quiet google-java-format
konard
committed
3526556
build(js): pin Prettier instead of resolving it at run time
konard
committed
51872e6
fix(csharp): resolve all 56 nullable reference warnings
konard
committed
e0c85e2
build(csharp): vendor the DocFX configuration and packaging scripts
konard
committed
14beb21
ci(csharp): publish from vendored scripts and gate the release on a real push
konard
committed
792aa3a
ci(js): publish through npm trusted publishing and verify what was shipped
konard
committed
18c1ef9
ci(rust): trusted publishing, a real release gate, and a working cache
konard
committed
1e3a734
ci(python): trusted publishing, exact version check, real release gate
konard
committed
b5a4fc3
ci(php): gate the release on a verified Packagist publish
konard
committed
118bb66
ci(java): gate the release on a verified Maven Central publish
konard
committed
76c80ab
ci(go): verify the module reaches proxy.golang.org after tagging
konard
committed
c85fdd3
ci(pages): make the manual trigger work and drop Pages privileges
konard
committed
89eca47
ci: tighten the auto-merge and BOM-check workflows
konard
committed
a61a65d
ci: lint the workflows in CI and stop leaking the checkout token
konard
committed
bdb1ea0
ci: audit declared versions against the registries
konard
committed
5abe33d
ci(go): stop asking setup-go to cache a dependency file that does not exist
konard
committed
8909e83
ci(csharp): do not let a docs failure withhold a published release
konard
committed
ee1dd1d
build(java,php): align the version with the rest of the repository
konard
committed
ad34295
fix(scripts): regenerate the test comparison from the real Rust test path
konard
committed
5da368d
ci: check documentation links, and fix the broken ones
konard
committed
a659d1e
fix(pages): serve the C# API reference that was published but unreachable
konard
committed
7f1312f
ci: adopt the security workflow from the pipeline templates
konard
committed
262237a
ci: scan the history for live secrets
konard
committed
1cc62db
experiments(csharp): pin down exactly which cref shapes the compiler rejects
konard
committed
6052290
ci(links): keep the link check off dependency directories
konard
committed
6021a33
docs(dev): record the investigation behind this pull request
konard
committed
f054080
docs(changelog): record the CI/CD work under Unreleased
konard
committed
1efc058
Merge main into issue-290-642ff58c1ef8
konard
committed
05d87de
ci: fix the 62 shellcheck findings the new workflows check reported
konard
committed
0145b58
fix(security): stop passing --no-update twice, and pin the scanner image
konard
committed
189a653
fix(php): stop the test matrix from cancelling itself
konard
committed
31ec6aa
fix(ci): stop the green runs from hiding a broken coverage upload
konard
committed
2537067
ci(go): align the coverage upload with the csharp and python templates
konard
committed
c932531
docs(dev/log): record the verification sweep over the 2537067 runs
konard
committed
447cf9b