Changelog¶

What changed in each release of the workflows. A heading Breaking means callers must change before moving to the new major.

[Unreleased]¶

Documentation moved to the HardFOC MkDocs platform: one page per workflow, inputs tables and the permissions contract generated from the workflow files, published with ru-mkdocs-publish.yml. The README follows the HardFOC README standard; its license badge now names the repository's real license (GPL-3.0).

Self-CI (ci-self.yml):
pinned actionlint and shellcheck;
shellcheck for the composite actions;
a check for run: blocks ending in a bare cond && cmd;
the permissions contract check and the breaking-change check;
a check that ru-build's inlined tools-directory step matches the action;
unit tests.
README permissions table, listing exactly what each caller must grant.
release.yml: on a vX.Y.Z tag, creates a GitHub Release with generated notes and moves the vX major tag.
Dependabot for GitHub Actions (weekly).

Every third-party action is pinned to a full commit SHA with a version comment. dawidd6/action-download-artifact moves v2 → v28 and softprops/action-gh-release moves v1 → v3.0.3; the old majors used runtimes GitHub no longer supports.
Permissions are declared per job. ru-build asks for contents: read and pull-requests: write, and no longer for actions: read.
ru-build.yml runs the tools-directory logic inline instead of calling ensure-tools-directory@main. A caller pinned to @v1 therefore runs the v1 copy. The composite action stays available for direct use.

ru-build.yml size report: "`size.txt missing`" ran a command named size.txt instead of printing the text.

The first tagged release: the workflows as callers used them from @main.

ru-build.yml: the ESP-IDF Docker image is pulled before the build, with up to 4 attempts (10/30/60 s backoff). A transient Docker Hub error no longer fails the build with exit 125.
ru-build.yml frees runner disk space before the build.