FredApps 603045e42d release.yml: a dry-run input builds and checks without releasing (#208) ...

* release.yml: a dry-run input builds and checks without releasing

For a nightly run on main that finds release-only breakage before release day. On 11 Nov 2026
gridcraft's riscv64 build, materialcraft's private-repo FreeBSD jobs, wordcraft's Print job and
the riscv64 apt mirrors each surfaced only during the release, one fix PR and release run at a
time. With dry-run: no job enters the release environment (no signing secrets; the environment
admits only the release branch), the macOS job and the draft are skipped, and the Flatpak OCI
layouts are not pushed to GHCR or Docker Hub.

* tests: the Flatpak OCI push and the release environment also stay out of a dry run

2026-11-11 22:46:06 +01:00

..

ast-grep.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

changed-paths.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

docker-build.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

flatpak-oci.yml

apt: fall back to mirrors outside ubuntu.com when it is down (#199)

2026-11-11 16:21:03 +01:00

freebsd.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

gate.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

git-sources.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

house-rules.yml

ci: add allowed-endpoints to packaging-lint and house-rules workflows

2026-11-10 08:26:20 -05:00

nix.yml

ci: harden workflows with credential isolation, template injection defenses, and dependabot cooldown (#191)

2026-11-10 18:07:38 -05:00

packaging-lint.yml

egress: allow *.kernel.org and *.dotsrc.org wherever apt mirrors are allowed (#203)

2026-11-11 11:20:38 -05:00

refresh-contributors.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

release.yml

release.yml: a dry-run input builds and checks without releasing (#208)

2026-11-11 22:46:06 +01:00

sonar-scan.yml

ci(sonar): skip SonarCloud scan on fork pull requests (#48)

2026-10-21 19:04:08 -04:00

sonarcloud.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

supply-chain.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-ast-grep.yml

ci: specify allowed-endpoints for block mode in workflows

2026-11-10 08:26:20 -05:00

test-freebsd.yml

egress: allow *.kernel.org and *.dotsrc.org wherever apt mirrors are allowed (#203)

2026-11-11 11:20:38 -05:00

test-house-rules.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-install-apt-packages.yml

egress: allow *.kernel.org and *.dotsrc.org wherever apt mirrors are allowed (#203)

2026-11-11 11:20:38 -05:00

test-install-riscv64-cross.yml

install-riscv64-cross: fall back to mirrors outside ubuntu.com (#202)

2026-11-11 17:01:34 +01:00

windows-arm64.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00