Danil Silantyev c399abd63c chore(ci): least-privilege permissions and cancel-stale concurrency ...

The workflow only checks out, builds, and tests — it never writes to the repo,
so scope GITHUB_TOKEN down to contents: read (GitHub's recommended least
privilege; the default token grant is broader than this job needs). Also add a
per-ref concurrency group so a new push to a PR cancels its superseded run.

No job/step logic changed; Node stays on 22 (current LTS).

2026-07-04 23:22:12 -04:00

..

ci.yml

chore(ci): least-privilege permissions and cancel-stale concurrency

2026-07-04 23:22:12 -04:00

release.yml

ci: move actions to Node 24 majors (checkout@v7, setup-node@v6, pnpm/action-setup@v6)

2026-06-26 00:24:58 -04:00