ci: zero-cost quality/security/coverage/mirroring pipeline, Deno ratchet, RSR seed rewrites - #899

Merged

hyperpolymath merged 18 commits into

mainfrom

secqual/resync-actions-lock-after-dependabot-bump

Sep 22, 2026

Commits on Sep 22, 2026

chore(registry): refresh three stale source_hash lines

hyperpolymath
and
claude
committed
831b1b0
ci: zero-cost quality, security, coverage and mirroring pipeline

hyperpolymath
and
claude
committed
f5bf21e
chore(hooks): wire gitleaks and lint/format validators into pre-commit

hyperpolymath
and
claude
committed
66d7e1e
ci(governance): retire Deno and unify the actions-lock gate

hyperpolymath
and
claude
committed
dfda74d
ci(deno): ban Deno and ledger the estate's measured debt

hyperpolymath
and
claude
committed
d42256d
ci(deno): replace the Deno lint job with a ledgered refusal

hyperpolymath
and
claude
committed
711d4e2
fix(hooks): per-ref pin check, syntax-aware SPDX

hyperpolymath
and
claude
committed
8852c64
docs(deno): correct canonical .gitignore ordering; fix Nickel gate

hyperpolymath
and
claude
committed
b2383dd
docs(deno): fix the RSR seed spec — it banned Bun, allowed Deno

hyperpolymath
and
claude
committed
0391275
docs(deno): match root CLAUDE.md's Bun row wording

hyperpolymath
and
claude
committed
bc940cb
fix(rsr): unfreeze language-policy twin to v2.0.0

hyperpolymath
and
claude
committed
0cca048
docs(rsr): rewrite seed CLAUDE.md against all four language bans

hyperpolymath
and
claude
committed
f374f8d
Update .githooks/validate-gitleaks.sh

hyperpolymath
and
coderabbitai[bot]
committed
ccc07cb
fix(ci): close vacuous SAST gate and bind mirror push to verified SHA

hyperpolymath
and
claude
committed
1915382
fix(hooks): restore gitleaks call, drop invalid $/ pin arm (#899)

hyperpolymath
and
claude
committed
6d5400c
chore(registry): regenerate after rebase (RSR seed source_hash)
hyperpolymath
committed
339ed5a
fix(review): address the 7 unresolved #899 threads (spdx scm+expression, lock-gate exit 3, tier ranks, seed docs)
hyperpolymath
committed
0f904e1
fix(ci): harden ci-pipeline downloads and bun installs (#899)

hyperpolymath
and
claude
committed
3216933

Navigation Menu

Uh oh!

ci: zero-cost quality/security/coverage/mirroring pipeline, Deno ratchet, RSR seed rewrites - #899

ci: zero-cost quality/security/coverage/mirroring pipeline, Deno ratchet, RSR seed rewrites#899
hyperpolymath merged 18 commits into
mainfrom
secqual/resync-actions-lock-after-dependabot-bump

Commits on Sep 22, 2026

chore(registry): refresh three stale source_hash lines

ci: zero-cost quality, security, coverage and mirroring pipeline

chore(hooks): wire gitleaks and lint/format validators into pre-commit

ci(governance): retire Deno and unify the actions-lock gate

ci(deno): ban Deno and ledger the estate's measured debt

ci(deno): replace the Deno lint job with a ledgered refusal

fix(hooks): per-ref pin check, syntax-aware SPDX

docs(deno): correct canonical .gitignore ordering; fix Nickel gate

docs(deno): fix the RSR seed spec — it banned Bun, allowed Deno

docs(deno): match root CLAUDE.md's Bun row wording

fix(rsr): unfreeze language-policy twin to v2.0.0

docs(rsr): rewrite seed CLAUDE.md against all four language bans

Update .githooks/validate-gitleaks.sh

fix(ci): close vacuous SAST gate and bind mirror push to verified SHA

fix(hooks): restore gitleaks call, drop invalid $/ pin arm (#899)

chore(registry): regenerate after rebase (RSR seed source_hash)

fix(review): address the 7 unresolved #899 threads (spdx scm+expression, lock-gate exit 3, tier ranks, seed docs)

fix(ci): harden ci-pipeline downloads and bun installs (#899)