3 people fa118cf2d0 ci(size): comment size report from a workflow_run job ...

The pull_request-triggered workflow gets a read-only token on fork
PRs, so posting the size comment failed with 403. Build jobs now only
upload artifacts; a separate workflow_run-triggered workflow with
write permissions downloads them and posts the comment. The PR number
travels via an untrusted artifact, so the report validates it and
checks the PR head SHA against the triggering run before commenting.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Entire-Checkpoint: 302a325be262

2026-08-02 12:44:04 +02:00

..

agents

chore: adjust agent definitions

2026-05-15 08:43:54 +02:00

ISSUE_TEMPLATE

chore: adjust correct CODE_OF_CONDUCT link

2026-01-24 10:09:04 +01:00

workflows

ci(size): comment size report from a workflow_run job

2026-08-02 12:44:04 +02:00

copilot-instructions.md

docs(agents): consolidate agent guidance in AGENTS.md

2026-07-14 11:36:46 +02:00

dependabot.yml

chore(dependabot): ignore npm

2025-03-15 10:57:50 +01:00

FUNDING.yml

docs: add subscription links

2024-11-09 11:41:53 +01:00

github-app.yml

chore(apm): always resolve lock file

2026-07-15 09:05:39 +02:00

holopin.yml

chore(holopin): add helping hands badge

2024-03-25 15:53:06 +01:00

PULL_REQUEST_TEMPLATE.md

fix(markdown): use markdownlint-cli2.yaml configuration

2026-01-24 10:09:04 +01:00

stale.yml

chore(labels): update stale

2022-10-08 12:18:48 +02:00