Jonathan Schwender d8cc8f3992 ci: Secure release workflow using environment (#44108) ...

The publish environment enforces additional restrictions, mainly that
the workflow can only be run from protected branches and additional
prevents access of the publish secrets from workflows which do not use
this environment.

Testing: Requires a manual workflow run on a protected branch. Given
that we already tested environments in previous PRs, I think this PR
might be safe to test after merging, instead of protecting the PR
branch.

Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>

2026-04-11 08:09:23 +00:00

..

actions

ci: Upgrade soon deprecated GitHub Actions (#43173)

2026-03-11 11:02:42 +00:00

ISSUE_TEMPLATE

Update new issue URL in SECURITY.md (#31698)

2024-03-15 15:03:49 +00:00

workflows

ci: Secure release workflow using environment (#44108)

2026-04-11 08:09:23 +00:00

codecov.yml

Upload junit report of unit-tests in CI (#39897)

2025-11-17 15:07:56 +00:00

CODEOWNERS

CODEOWNERS: Add atbrakhi and eerii as DevTools owners (#43832)

2026-04-01 10:10:54 +00:00

dependabot.yml

build(deps): bump Stylo to "Merge stylo_config crate into stylo_static_prefs" (#42605)

2026-02-19 16:59:03 +00:00

FUNDING.yml

Update FUNDING.yml (#31633)

2024-03-13 02:40:54 +00:00

release.yml

Tweak automatic release notes (#40651)

2025-11-15 09:54:48 +00:00