Skip to content

Feat/ddraig pages - #459

Merged
hyperpolymath merged 3 commits into
mainfrom
feat/ddraig-pages
Aug 2, 2026
Merged

hyperpolymath merged 3 commits into
mainfrom
feat/ddraig-pages

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Jul 29, 2026 •

Copy link
Copy Markdown
Owner

Summary

Closes #

Type of change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (would change existing behaviour)
  • 🕳️ Soundness fix (fixes a checker/proof false-negative)
  • 📖 Documentation
  • 🧹 Refactor / tech debt (behaviour-preserving)
  • ⚡ Performance
  • 🔧 Build / CI / tooling

How has this been verified?

Checklist

  • My commits are signed (git commit -S).
  • I ran the project's own checks/tests locally and they pass.
  • New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
    prose CC-BY-SA-4.0); I did not relicense existing files.
  • Docs are updated, and no public claim now overstates what the code does.
  • I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers


Summary by Gitar

  • CI / Build:
    • Added pages.yml workflow to build and deploy documentation via Ddraig SSG
  • Documentation:
    • Updated licenses in the-hotchocolabot to PMPL-1.0-or-later for code and CC-BY-SA-4.0 for docs

This will update automatically on new commits.

hyperpolymath and others added 2 commits July 19, 2026 13:35
- Update README: Code is under PMPL-1.0-or-later and docs are under CC-BY-SA-4.0
- Update LICENSE: Add dual licensing header, fix SPDX identifier
- Add LICENSES directory with PMPL-1.0-or-later.txt and CC-BY-SA-4.0.txt

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
Comment thread .github/workflows/pages.yml
@gitar-bot

gitar-bot Bot commented Jul 29, 2026 •

Copy link
Copy Markdown

Note

Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime.
Learn more

Code Review ✅ Approved 1 resolved / 1 findings

Adds a GitHub Actions workflow to deploy documentation via Ddraig SSG alongside license updates. Pin the actions and SSG checkout versions in pages.yml to ensure reproducible deployments.

Auto-approved and auto-merge armed: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria. — merges when pipeline and required approvals pass.

✅ 1 resolved
✅ Security: pages.yml uses unpinned actions and unpinned SSG checkout

📄 .github/workflows/pages.yml:20-34
pages.yml references actions/checkout@v4, actions/upload-pages-artifact@v3 and actions/deploy-pages@v4 by mutable tag, and checks out hyperpolymath/ddraig-ssg with no ref, so it builds from whatever the default branch HEAD is. This diverges from the repo's own convention (casket-pages.yml and scorecard.yml pin every action to a full commit SHA) and means a compromised or changed upstream runs with pages: write/id-token: write in CI. Pin all actions to full commit SHAs and pin the ddraig-ssg checkout to a specific ref/SHA.

Options

Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Compact
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

@gitar-bot

gitar-bot Bot commented Jul 29, 2026

Copy link
Copy Markdown

⚠️ Gitar auto-approved this PR but could not enable auto-merge: auto-merge is disabled for this repository — enable "Allow auto-merge" in the repository settings.

@gitar-bot gitar-bot Bot added the gitar-approved Added by Gitar label Jul 29, 2026
gitar-bot[bot]
gitar-bot Bot previously approved these changes Jul 29, 2026

@gitar-bot gitar-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gitar has auto-approved this PR and enabled auto-merge (configure)

@hyperpolymath
hyperpolymath enabled auto-merge (squash) July 31, 2026 07:40
@hyperpolymath
hyperpolymath merged commit 947978b into main Aug 2, 2026
1 check passed
@hyperpolymath
hyperpolymath deleted the feat/ddraig-pages branch August 2, 2026 11:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

gitar-approved Added by Gitar

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant