veilor-os/.github
obsidian-ai e50c9a3b43 ci(bluebuild): pin actions to node20-safe tags
forgejo-runner v6.4.0 javascript runtime is node20. Pin every
javascript action used in the spike branch's workflows to the last
release that ships node20.

- actions/checkout v4 -> v4.1.7 (3 files)
- softprops/action-gh-release v2 -> v2.0.4 (build-iso)
- anchore/sbom-action v0 -> v0.17.2
- actions/attest-build-provenance v2 -> v2.2.3
- blue-build/github-action@v1 unchanged (TODO: SHA pin)

This is the spike-branch counterpart of the main-branch fix in
feat/runner-fix-docker-sock-and-node20.
2026-05-06 13:54:12 +01:00
..
workflows ci(bluebuild): pin actions to node20-safe tags 2026-05-06 13:54:12 +01:00
CODEOWNERS ci: switch refs from veilorveilor-org (GH org slug); domain veilor.org 2026-04-30 13:59:20 +01:00
PULL_REQUEST_TEMPLATE.md ci: github actions workflow (build-iso + lint), CONTRIBUTING, CODEOWNERS, PR template 2026-04-30 13:56:03 +01:00