Changed
- #528 Confine manifest paths to GITHUB_WORKSPACE (breaking: workflows passing
manifests:paths outside the workspace now fail with a clear error) - #527 Pin release workflow to commit SHA for supply chain safety
Security
- #528 Harden URL fetcher error handling in writeYamlFromURLToFile
- #537 Bump undici from 6.25.0 to 6.27.0
- #536 Bump actions/checkout in /.github/workflows in the actions group
- #534 Bump the actions group with 3 updates
- #533 Bump esbuild from 0.28.0 to 0.28.1
- #532 Bump github/codeql-action in /.github/workflows in the actions group
- #531 Bump @types/node from 25.9.1 to 25.9.2 in the actions group
- #530 Bump the actions group in /.github/workflows with 2 updates
- #529 Bump the actions group with 2 updates
- #526 Bump the actions group in /.github/workflows with 2 updates
- #525 Bump the actions group with 2 updates
- #524 Bump @types/node from 25.7.0 to 25.9.0 in the actions group
- #523 Bump github/codeql-action in /.github/workflows in the actions group