2 Commits

Author	SHA1	Message	Date
Thibaud-Vdb	cca00c022e	ci: pin github actions to commit shas ... Mutable tags like @v6 can be re-pointed by whoever controls the action, so the next run executes code nobody here reviewed, with the job's token and secrets. Pinning to the full commit sha freezes what runs. Version tags are kept as comments so renovate or dependabot can still track updates. dtolnay/rust-toolchain is pinned to a master commit with the toolchain moved to an explicit input, as its readme recommends for sha pinning.	2026-07-20 14:56:59 +02:00
Pierre Tachoire	8767127308	ci: split package release into sub files	2026-04-24 15:37:02 +02:00