[bernardladenthin]

Moves every bernardladenthin/actions pin from v1.0.3 (23543c85) to v1.1.0 (44390bd4, bernardladenthin/actions#5). The only other change is the CHANGELOG entry.

v1.1.0 adds java/audit-publication, which audits a published release from the outside: the run and its jobs, the files against release-assets.json, Maven Central, the signatures, the provenance, the bytecode floors and the next version. java-llama.cpp uses it in its new post-release.yml (bernardladenthin/java-llama.cpp#573). This repository does not use it yet; nothing changes for the actions in use.

Local checks: the templates have 0 problems, and no 23543c85 is left.

🤖 Generated with Claude Code

https://claude.ai/code/session_01AJGh28Gu8pLWYbTCqG1LZf

Summary by CodeRabbit

• Chores
  • Updated the automation used for code analysis, dependency submissions, vulnerability scanning, testing, and publishing. These updates keep the project’s release and maintenance workflows current.
  • Updated the unreleased changelog to reflect the workflow version change.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: a414a55b-d164-4b38-b304-0e031593f745

Commits

Reviewing files that changed from the base of the PR and between c2e9cc4 and 2eeeba7.

Files selected for processing: 6

• .github/workflows/codeql.yml
• .github/workflows/dependency-submission.yml
• .github/workflows/osv-scanner.yml
• .github/workflows/publish.yml
• .github/workflows/reuse.yml
• CHANGELOG.md

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

Walkthrough

The CI and publication workflows now reference the shared actions at v1.1.0 instead of v1.0.3. The changelog records the version update and notes that the publication-audit feature is not used here.

Changes: Shared action pin update

Layer / File(s)	Summary
CI workflow pins .github/workflows/codeql.yml, .github/workflows/dependency-submission.yml, .github/workflows/osv-scanner.yml, .github/workflows/reuse.yml	The CodeQL, dependency submission, OSV scanner, and test workflows now reference the shared v1.1.0 revision.
Publication checks and test pins .github/workflows/publish.yml	Actions used for repository checks, signing-key checks, builds, tests, smoke tests, and release-ref checks now reference v1.1.0.
Publication and changelog pins .github/workflows/publish.yml, CHANGELOG.md	Snapshot and release publication actions now reference v1.1.0. The changelog records the version and notes the unused publication-audit feature.

Priority: Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Possibly related PRs

• bernardladenthin/BitcoinAddressFinder#400: Updates the same shared action references from v1.0.1 to v1.0.2.
• bernardladenthin/BitcoinAddressFinder#397: Adds the release workflow wiring whose shared action pins this PR updates.

Suggested reviewers: claude

Merge Risk: Minimal · up to 2eeeb

The update is limited to immutable dependency pins and presents no concrete merge-blocking risk.

Architecture risk: Low · up to 2eeeb

The change affects 1 system.

Changed systems: CHANGELOG.md

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — CHANGELOG.md (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in CHANGELOG.md: The changelog replaces the v1.0.3 pin entry with v1.1.0, noting its unused java/audit-publication feature and that the actions currently in use are unchanged; it retains the v1.0.3 snapshot-publication details.
• observed — Modified behavior in .github/workflows/codeql.yml: The analyze job’s reusable workflow reference changed from v1.0.3 to v1.1.0, using the corresponding updated commit SHA.
• observed — Modified behavior in .github/workflows/dependency-submission.yml: The submit job’s reusable workflow reference changes from v1.0.3 to v1.1.0.
• observed — Modified behavior in .github/workflows/osv-scanner.yml: The scan job’s reusable workflow reference changes from the v1.0.3 commit to the v1.1.0 commit.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the main change: updating all bernardladenthin/actions references to v1.1.0.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (6 skipped: 6 unsupported.)

Finishing Touches: 💡 1

🛠️ Fix failing CI checks: 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud