Gauvino 06510d2bd6 chore(security): harden helpers + document conflict-labeler safety ...

From the workflow security audit:
- symlink-native-dirs.js: drop the execSync shell strings for fs.symlink/mkdir
  (removes a latent shell-injection surface; also clears dead commented code).
- automerge.sh: add 'set -euo pipefail' and restore the starting branch on exit
  so a mid-merge failure can't leave the repo on the wrong branch.
- conflict.yml: document that this pull_request_target workflow must never check
  out or run PR-head code (it only labels via the API today).

2026-06-01 20:35:05 +02:00

..

artifact-comment.yml

feat: Enables iOS TV builds (#1422)

2026-05-22 08:49:15 +02:00

build-apps.yml

chore(deps): migrate to Expo SDK 56 (Phase 1 - compat)

2026-05-28 23:56:03 +02:00

check-lockfile.yml

chore(deps): Update actions/cache action to v5.0.5 (#1429)

2026-05-20 13:43:17 +02:00

ci-codeql.yml

chore(deps): Update github/codeql-action action to v4.36.0 (#1593)

2026-05-26 15:23:11 +02:00

conflict.yml

chore(security): harden helpers + document conflict-labeler safety

2026-06-01 20:35:05 +02:00

crowdin.yml

chore(deps): Update crowdin/github-action action to v2.16.2 (#1504)

2026-05-19 19:58:56 +02:00

linting.yml

chore(deps): Update actions/dependency-review-action action to v5 (#1567)

2026-05-20 17:05:10 +02:00

notification.yml

fix(ci): code scanning alert no. 219 (#1353)

2026-01-13 18:41:56 +01:00

release.yml

fix(ci): grant actions:read to github-release job (#1634)

2026-06-01 10:31:05 +02:00

update-issue-form.yml

chore(deps): Update peter-evans/create-pull-request action to v8.1.1 (#1566)

2026-05-20 17:37:53 +02:00