Commit Graph
2 Commits
Author SHA1 Message Date
SergeyandGitHub 0ba029b015 chore(release): make a release verifiable, and pin what builds it (epic #701, phase 5) (#759)
* chore(release): build once, and publish sha256sums and provenance (epic #701, phase 5)

* chore(ci): pin every third-party action by commit sha (epic #701, phase 5)

* test(ci): anchor the dependabot guard on the ecosystem it must cover
2026-08-31 14:32:20 -07:00
Jatin K MalikandGitHub 0d5e4a66af Welcome new issues and pull requests with a community comment (#723)
Calls the shared VocaHQ/.github workflow so the copy lives in one place.
2026-08-20 20:31:23 -07:00