fix(release): merge develop into main#233

Merged

bedatty merged 8 commits intomainfrom

Apr 17, 2026

Commits on Apr 17, 2026

fix(pinned-actions): enforce composite vs reusable pinning policy (#231)
bedatty
authored
fix(codeql-reporter): filter dismissed and fixed alerts from PR comment
bedatty
authored
fix(self-release): force-update floating major tag on stable release (#230)
bedatty
authored
fix(actions): rename deprecated app-id input to client-id (#228)
bedatty
authored
chore(deps): bump slackapi/slack-github-action from 1.24.0 to 2.1.1 in the notifications group (#118)

dependabot[bot]
and
bedatty
authored
fix(workflows): address codeql medium findings (#234)
bedatty
authored
fix(update-major-tag): use --force-with-lease to guard against concurrent tag rewinds (#235)
bedatty
authored
fix(update-major-tag): freeze lease from local ref snapshot after fetch (#236)
bedatty
authored