Thibaud-Vdb 237ab7fa68 ci: move changed-files off the CVE-2025-30066 affected v41 ...

request-review.yml still referenced tj-actions/changed-files@v41, the
action and version range hit by the March 2025 supply chain compromise
(GHSA-mrrh-fwg8-r2c3): the attacker re-pointed existing version tags at
code that dumped the runner's memory, including the job's GITHUB_TOKEN,
into the public build logs.

Bump to v46.0.5, pinned by commit SHA so the ref cannot be re-pointed
again; the two other call sites already on v46 get the same pin in the
next commit. The action's file-matching API is unchanged between v41
and v46 for the patterns used here.

2026-08-05 11:04:21 +02:00

..

instructions

feat(copilot): remove incorrect spaces clause from copilot instructions (#4623)

2026-08-03 09:52:41 +02:00

ISSUE_TEMPLATE

chore(repo): Update issue templates and documentation for package ren… (#4379)

2026-05-15 17:55:33 +02:00

workflows

ci: move changed-files off the CVE-2025-30066 affected v41

2026-08-05 11:04:21 +02:00

copilot-instructions.md

feat(copilot): Adding copilot instructions (#4407)

2026-05-22 16:08:38 +02:00

FUNDING.yml

Create FUNDING.yml

2023-04-28 22:59:05 +02:00

labeler.yml

chore(repo): Update issue templates and documentation for package ren… (#4379)

2026-05-15 17:55:33 +02:00

pull_request_template.md

feat(docs): Add lab requirement in pull_request_template.md (#3651)

2026-07-25 13:13:01 +02:00