chore: sync upstream (4 Commits) #4

Merged
alf merged 4 commits from chore/sync-upstream-20261022 into main 2026-10-22 00:04:26 +00:00
Owner

Upstream-Sync von upstream/main (4 Commits). Fast-Forward.

  • 912b817 security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188)
  • 8ae67c5 ci: add sonar-project.properties for CI-based analysis
  • eb48bef ci: add SonarCloud scan via shared reusable workflow
  • 2ebdf16 Release 0.10.0
Upstream-Sync von `upstream/main` (4 Commits). Fast-Forward. - 912b817 security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) - 8ae67c5 ci: add sonar-project.properties for CI-based analysis - eb48bef ci: add SonarCloud scan via shared reusable workflow - 2ebdf16 Release 0.10.0
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Calls storytold/craft-common-actions/.github/workflows/sonarcloud.yml@main
with secrets: inherit. Adds SonarCloud badge to README where missing and
removes the redundant sonar-project.properties (config now passed by the
reusable workflow).
Marks the project ineligible for SonarCloud Automatic Analysis, resolving the
CI-vs-automatic-analysis conflict so the SonarCloud workflow succeeds.
security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188)
Some checks failed
nix.yml / security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) (pull_request) Failing after 0s
packaging-lint.yml / security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) (pull_request) Failing after 0s
sonarcloud.yml / security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) (pull_request) Failing after 0s
nix.yml / security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) (push) Failing after 0s
packaging-lint.yml / security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) (push) Failing after 0s
sonarcloud.yml / security: enforce HTTPS on curl downloads (SonarCloud S6506) (#2188) (push) Failing after 0s
CI / cargo xtask ci (push) Has been cancelled
CI / cargo xtask ci (pull_request) Has been cancelled
912b817abe
Add --proto '=https' to curl invocations so redirects cannot downgrade to
plaintext HTTP. Resolves SonarCloud S6506 (shell/docker/githubactions).
alf merged commit 912b817abe into main 2026-10-22 00:04:26 +00:00
alf deleted branch chore/sync-upstream-20261022 2026-10-22 00:04:26 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
iris/gridcraft!4
No description provided.