PR-G 7a: deprecate Tier 1 third-party actions + zizmor provider safelist#1221

Merged

lmeyerov merged 9 commits intomasterfrom

chore/1130-pr-g-7a-safelist

Apr 27, 2026

Commits on Apr 26, 2026

ci(gpu): replace styfle/cancel-workflow-action with native concurrency

lmeyerov
and
claude
committed
ci: replace dorny/paths-filter with inline shell filter

lmeyerov
and
claude
committed
ci: add persist-credentials: false to remaining LFS / fetch-depth checkouts

lmeyerov
and
claude
committed
ci(security): enable zizmor unpinned-uses with provider safelist

lmeyerov
and
claude
committed
ci: clarify concurrency null-coercion + drop ephemeral dorny reference

lmeyerov
and
claude
committed
ci: fix path-filter fail-closed on unreachable base + SIGPIPE on huge diffs

lmeyerov
and
claude
committed

Commits on Apr 27, 2026