fix(ci): restore green main (workflow callers, type errors, coverage, hardening)#24

Open

williaby wants to merge 10 commits into

mainfrom

fix/green-main-foundation

Commits on May 29, 2026

fix(ci): repair reusable-workflow callers, type errors, and coverage

williaby
and
claude
committed
chore(security): harden workflows, pin actions, accurate README

claude
authored and
williaby
committed
fix(ci): drop setup-python pip cache from SonarCloud workflow
williaby
committed
fix(compliance): cover pre-existing files in REUSE.toml

williaby
and
claude
committed
fix(compliance): remove unused LICENSE files

williaby
and
claude
committed
fix(ci): set no-build:false for hatchling on org reusable workflows

williaby
and
claude
committed
fix(deps): patch dependency CVEs, fix docs strict build and compat matrix

williaby
and
claude
committed
fix(docker): keep README.md in build context, silence DL3008

williaby
and
claude
committed
fix(docker): place hadolint ignore directive immediately before RUN

williaby
and
claude
committed
fix(docker)!: migrate to Chainguard Wolfi base for zero-CVE image

williaby
and
claude
committed