62453ebefa
- Add concurrency groups to both workflows to prevent parallel version-bump races - Defer git tag push to merge job so orphan tags can't exist without a live image - Pin build/merge jobs to the SHA captured in version-bump to prevent TOCTOU - Guard auto-finalize in docker.yml against cross-major prereleases (requires bump=major + confirm_major=MAJOR) - Add STABLE fallback to 0.0.0 for fresh repos with no stable tag - Fix cleanup sort to extract numeric N via awk instead of fragile sort -t. -k4 -n - Add 5-minute in-memory cache to checkVersion to avoid GitHub API rate limits - Type GitHubPanel releases state; remove any cast on filter - Quote all $VERSION/$MAJOR_TAG vars in imagetools create calls |
||
|---|---|---|
| .. | ||
| close-stale-invalid-titles.yml | ||
| close-stale-wrong-branch.yml | ||
| close-untitled-issues.yml | ||
| docker-dev.yml | ||
| docker.yml | ||
| enforce-target-branch.yml | ||
| test.yml | ||