ci: cover every workflow with the hardening guards, and fix the gaps they surface - #126

Open

dberzan wants to merge 14 commits into

NVIDIA:mainfrom

dberzan:harden/workflow-guards-cover-every-workflow

Commits on Aug 31, 2026

ci: harden publish-docs and dco workflows
dberzan
committed
651a8bb
test(ci): cover every workflow with the hardening guards
dberzan
committed
a257d29
docs: note the workflow hardening in the changelog
dberzan
committed
6ea9ae0
fix(ci): publish docs with the Fern version the repository pins
dberzan
committed
380420f
test(ci): close the job-level escalation holes in the workflow guards
dberzan
committed
c052000
fix(ci): stop the Fern install from running lifecycle scripts
dberzan
committed
28082c7
test(ci): enforce --ignore-scripts, and accept validated local action refs
dberzan
committed
442ae90
docs: note the lifecycle-script and local-ref fixes in the changelog
dberzan
committed
f341724
test(ci): reject a local reference that also carries an @ref
dberzan
committed
6b80a93

Commits on Sep 1, 2026