[dependabot]

Bumps devantler-tech/.github/.github/workflows/create-release.yaml from 7.20.3 to 8.0.2.

Release notes

Sourced from devantler-tech/.github/.github/workflows/create-release.yaml's releases.

v8.0.2

8.0.2 (2026-10-21)

Bug Fixes

• require repository-owned .NET matrix checks (#688) (8ff0e5b)

v8.0.1

8.0.1 (2026-10-21)

Bug Fixes

• require repository-owned Go template validation (#692) (71637aa)

v8.0.0

8.0.0 (2026-10-21)

Code Refactoring

• retire the single-consumer .NET publisher (#687) (467f075)

BREAKING CHANGES

• retire the single-consumer .NET publisher (#687)

v7.24.0

7.24.0 (2026-10-21)

Features

• publish: reuse verified images for WebApp releases (#685) (eec7063)

v7.23.1

7.23.1 (2026-10-21)

Bug Fixes

• github: withdraw archived repository management (#680) (d633b9a)

v7.23.0

7.23.0 (2026-10-20)

Features

... (truncated)

Commits

• 8ff0e5b fix: require repository-owned .NET matrix checks (#688)
• 71637aa fix: require repository-owned Go template validation (#692)
• 467f075 refactor!: retire the single-consumer .NET publisher (#687)
• 582ee19 ci: name the rejected invariant per native Go cache fixture job (#686)
• eec7063 feat(publish): reuse verified images for WebApp releases (#685)
• 572ada5 chore(deps): bump devantler-tech/.github/.github/workflows/apply-signed-fixes...
• d633b9a fix(github): withdraw archived repository management (#680)
• 0c7b6c3 feat(governance): migrate remaining required workflows to maintained automati...
• 77cfa9c feat(governance): retire legacy maintenance repository management (#673)
• 0988b3e feat(governance): observe remaining legacy workflow policies (#675)
• Additional commits viewable in compare view

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	8		0		0	0.22s
✅ ACTION	zizmor	8	0	0		0	2.76s
⚠️ BASH	bash-exec	74		2		0	0.48s
✅ BASH	shellcheck	74		0		0	13.1s
✅ BASH	shfmt	74	0	0		0	0.32s
✅ COPYPASTE	jscpd	yes		no		no	2.98s
✅ CSS	stylelint	5	0	0		0	2.12s
✅ DOCKERFILE	hadolint	4		0		0	0.3s
✅ EDITORCONFIG	editorconfig-checker	548		0		0	1.11s
✅ HTML	djlint	5		0		0	2.8s
✅ HTML	htmlhint	5		0		0	0.34s
✅ JSON	jsonlint	19		0		0	0.11s
✅ JSON	prettier	15	0	0		0	1.82s
✅ JSON	v8r	19		0		0	8.01s
✅ MARKDOWN	markdownlint	73	0	0		0	3.28s
✅ MARKDOWN	markdown-table-formatter	73	0	0		0	0.67s
✅ REPOSITORY	betterleaks	yes		no		no	1.64s
✅ REPOSITORY	checkov	yes		no		no	43.38s
✅ REPOSITORY	git_diff	yes		no		no	0.24s
✅ REPOSITORY	grype	yes		no		no	142.8s
✅ REPOSITORY	osv-scanner	yes		no		no	29.55s
✅ REPOSITORY	secretlint	yes		no		no	2.06s
✅ REPOSITORY	syft	yes		no		no	12.52s
✅ REPOSITORY	trivy	yes		no		no	38.19s
✅ REPOSITORY	trivy-sbom	yes		no		no	18.73s
✅ REPOSITORY	trufflehog	yes		no		no	29.52s
✅ SPELL	lychee	166		0		0	5.28s
✅ XML	xmllint	2	0	0		0	0.21s
✅ YAML	prettier	51	0	0		0	2.01s
✅ YAML	v8r	66		0		0	12.35s
✅ YAML	yamllint	55		0		0	1.66s

Detailed Issues

⚠️ BASH / bash-exec - 2 errors

Results of bash-exec linter (version 5.3.9)
See documentation on https://megalinter.io/10.1.0/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .github/scripts/run-mockery.sh
✅ [SUCCESS] .github/scripts/run-mockery.test.sh
❌ [ERROR] scripts/age-publisher-identity.test.sh
    Error: File:[scripts/age-publisher-identity.test.sh] is not executable

✅ [SUCCESS] scripts/age-release.test.sh
✅ [SUCCESS] scripts/api-publication-chart.test.sh
✅ [SUCCESS] scripts/chart-image.test.sh
✅ [SUCCESS] scripts/chart-signing.test.sh
✅ [SUCCESS] scripts/chart.test.sh
✅ [SUCCESS] scripts/composition-chart.test.sh
✅ [SUCCESS] scripts/connector-chart.test.sh
✅ [SUCCESS] scripts/contract-chart.test.sh
✅ [SUCCESS] scripts/documentation-links.sh
✅ [SUCCESS] scripts/engine-provider-chart.test.sh
✅ [SUCCESS] scripts/http-source-chart.test.sh
✅ [SUCCESS] scripts/http-source-config-chart.test.sh
✅ [SUCCESS] scripts/ksail-releases-chart.test.sh
✅ [SUCCESS] scripts/observe-rollout.sh
✅ [SUCCESS] scripts/observe-rollout.test.sh
✅ [SUCCESS] scripts/prepare-edc-scan.sh
✅ [SUCCESS] scripts/prepare-edc-scan.test.sh
✅ [SUCCESS] scripts/publication-products.test.sh
✅ [SUCCESS] scripts/release.test.sh
✅ [SUCCESS] scripts/scanner-suppressions.test.sh
✅ [SUCCESS] scripts/toolchain.test.sh
✅ [SUCCESS] scripts/ui-contract-chart.test.sh
✅ [SUCCESS] scripts/ui-host-origins-chart.test.sh
✅ [SUCCESS] scripts/validate-agent-shims.test.sh
✅ [SUCCESS] scripts/verify-release-artifacts.sh
✅ [SUCCESS] scripts/verify-release-artifacts.test.sh
✅ [SUCCESS] tests/dataspace/edc/artifacts.sh
✅ [SUCCESS] tests/dataspace/edc/artifacts.test.sh
✅ [SUCCESS] tests/dataspace/edc/controls.sh
✅ [SUCCESS] tests/dataspace/edc/deadline.sh
✅ [SUCCESS] tests/dataspace/edc/deadline.test.sh
✅ [SUCCESS] tests/dataspace/edc/receipt.sh
✅ [SUCCESS] tests/provider/age-image-bootstrap.sh
✅ [SUCCESS] tests/provider/arango.sh
✅ [SUCCESS] tests/provider/budget.sh
✅ [SUCCESS] tests/provider/common.sh
✅ [SUCCESS] tests/provider/percona-diagnostics.sh
✅ [SUCCESS] tests/provider/percona-diagnostics.test.sh
❌ [ERROR] tests/provider/percona-entry-probe-inner.sh
    Error: File:[tests/provider/percona-entry-probe-inner.sh] is not executable

✅ [SUCCESS] tests/provider/percona-entry-probe.sh
✅ [SUCCESS] tests/provider/percona-entry-probe.test.sh
✅ [SUCCESS] tests/provider/percona.sh
✅ [SUCCESS] tests/provider/postgres.sh
✅ [SUCCESS] tests/source/arango-provider.sh
✅ [SUCCESS] tests/source/catalog.sh
✅ [SUCCESS] tests/source/catalog.test.sh
✅ [SUCCESS] tests/source/chart-publication.sh
✅ [SUCCESS] tests/source/composition.sh
✅ [SUCCESS] tests/source/connector-matrix.sh
✅ [SUCCESS] tests/source/contract-matrix.sh
✅ [SUCCESS] tests/source/dsp-catalog.sh
✅ [SUCCESS] tests/source/edc-import.sh
✅ [SUCCESS] tests/source/edc-release.test.sh
✅ [SUCCESS] tests/source/engine-helpers.sh
✅ [SUCCESS] tests/source/engine-provider.sh
✅ [SUCCESS] tests/source/helm-lifecycle.sh
✅ [SUCCESS] tests/source/helm-lifecycle.test.sh
✅ [SUCCESS] tests/source/installed-matrix.sh
✅ [SUCCESS] tests/source/percona-provider.sh
✅ [SUCCESS] tests/source/product-check.sh
✅ [SUCCESS] tests/source/publication-products.sh
✅ [SUCCESS] tests/source/publisher-review.sh
✅ [SUCCESS] tests/source/registry-discovery.sh
✅ [SUCCESS] tests/source/run.sh
✅ [SUCCESS] tests/source/source-lifecycle.sh
✅ [SUCCESS] tests/source/suite.sh
✅ [SUCCESS] tests/source/suite.test.sh
✅ [SUCCESS] tests/source/trust-test-ca.sh
✅ [SUCCESS] tests/source/ui-appearance.sh
✅ [SUCCESS] tests/source/ui-free-rollback.sh
✅ [SUCCESS] tests/source/ui-kit.sh

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: #464 | upstream | last-verified 2026-10-21: Exact head 04959b9 failed native Document job 119173644747 in run 39585565999 before real TLS replica-set readiness. The database container restarted six times and its last termination was Error/exit 1. Both collected log streams were available but empty, so the root cause remains unproven after diagnostics #470. Complete 16-job evidence has only this leaf and its required aggregate failed; no retry or waiver. Auto-merge is disabled. Resume after #464 supplies the root-cause repair and required native acceptance, then refresh this existing update and its current-head review.

[devantler]

🤖 Generated by the Agentic Engineer

Release-range assessment for exact head 04959b99ddfe9d272bad6cf65e98e338125cf5bf: shared workflows 7.20.3 → 7.23.1.

I read the official notes for 7.21.0, 7.22.0, 7.23.0 and 7.23.1, the complete five-commit comparison, and the changed deployment/ruleset migration documentation. There is no separate reusable-workflow migration guide or root workflow changelog in the publisher's complete tree; release notes and source provide that record.

Each announced change is outside this callee: legacy workflow observation (7.21.0), maintenance-repository policy retirement (7.22.0), required-workflow source migration (7.23.0), and archived-repository management withdrawal (7.23.1) affect separately deployed governance. The additional signed-fix pin update affects validate-go-project.yaml, which this repository does not call at this head. None calls for adaptation in this release pin update.

The selected create-release.yaml is byte-identical across both revisions: Git blob ae40720f54eb84118dc70e6f088d821b4a5fa846. This PR changes only its immutable reference; caller permissions, inputs and disable-issue-side-effects: true are preserved. There is no changed callee default, runtime minimum, licence, API or transitive reference to adopt, and no matching local workaround was found.

This assessment does not clear the failed native Document job. The verified blocker remains #464; no review request, rerun or merge is claimed.

[devantler]

🤖 Generated by the Agentic Engineer

@dependabot rebase

Rebasing onto main so this update's Document job runs with the entrypoint probe from #475. A failure there now records why the database exits (evidence for #464); a pass shows this pin bump is not what breaks the job.