[workflow-audit] 7 unexplained change(s) on 2026-08-16

[github-actions]

7 unexplained commit(s) touching .github/workflows/ or .config/tend.yaml since 2026-08-15T07:39:17Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

280632f — security(workflow-audit): verify Renovate provenance

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 17:27:50 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff

4843794 — security(workflow-audit): mirror the config guard into the Renovate arm

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 17:00:23 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff

7793ec5 — security(workflow-audit): put .config/tend.yaml in the audit window

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 16:38:32 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff

84003ef — security(workflow-audit): align the file header, declare pull-requests: read

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 16:31:25 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff

8494b9e — security(workflow-audit): report the unexplained, not the routine

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 15:22:24 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff

9233c8a — security(workflow-audit): correct the Renovate evidence claim, guard the tend config

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 15:47:29 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff

f38e4bd — Update .github/workflows/workflow-audit.yaml

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-15 17:43:27 -0700
• Refs: main,remotes/origin/docs/running-tend-org-secret-fixed remotes/origin/fix/nav-url-bracketed-ipv6,remotes/origin/main remotes/origin/tend/update-workflows
• Files:
  • .github/workflows/workflow-audit.yaml
• View diff