Mohamed Boudra ed1943058a ci: gate nix-build on same-repo PRs only ...

scripts/update-nix.sh and scripts/fix-lockfile.mjs are executed from
the PR's checked-out tree. A fork PR can modify those scripts to run
arbitrary code on the runner. Same-repo PRs and push-to-main still
run; fork PRs skip the job entirely.

Closes #365.

2026-05-12 12:37:01 +07:00

..

android-apk-release.yml

fix(release): keep changelog notes authoritative

2026-04-23 06:43:18 +07:00

ci.yml

ci: cancel superseded PR runs to free runner capacity

2026-05-10 14:12:56 +07:00

deploy-app.yml

ci(deploy-app): install all workspaces so server/relay sources resolve

2026-04-28 18:05:27 +07:00

deploy-relay.yml

Patch production dependency advisories (#856)

2026-05-10 11:45:24 +08:00

deploy-website.yml

Patch production dependency advisories (#856)

2026-05-10 11:45:24 +08:00

desktop-release.yml

fix(desktop): centralize desktop build script

2026-05-03 14:35:20 +07:00

desktop-rollout.yml

feat(desktop): add time-based staged rollout for stable updates

2026-04-28 16:48:18 +07:00

nix-build.yml

ci: gate nix-build on same-repo PRs only

2026-05-12 12:37:01 +07:00

release-notes-sync.yml

fix(release): keep changelog notes authoritative

2026-04-23 06:43:18 +07:00