From e26fb71dddb776007ab721ed1a39d17433b7b1e4 Mon Sep 17 00:00:00 2001 From: codepuncher Date: Sat, 20 Jun 2026 12:57:23 +0100 Subject: [PATCH 1/2] chore: exclude submodules and build dirs from dprint --- dprint.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/dprint.json b/dprint.json index 7d77361..110030e 100644 --- a/dprint.json +++ b/dprint.json @@ -4,6 +4,11 @@ "README.md", "docs/**/*.md" ], + "excludes": [ + "lib/**", + "build/**", + "vcpkg_installed/**" + ], "plugins": [ "https://plugins.dprint.dev/markdown-0.22.1.wasm" ], From 16f4e8428d1bf99bb1e64a5f08509353f1b8c020 Mon Sep 17 00:00:00 2001 From: codepuncher Date: Sat, 20 Jun 2026 12:57:23 +0100 Subject: [PATCH 2/2] chore(ci): drop unused actions: write permission The test, build, and clang-tidy jobs only use actions/cache and upload-artifact, neither of which needs the actions scope. Drop it for least privilege. --- .github/workflows/ci.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1d67652..807338e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -94,7 +94,6 @@ jobs: permissions: contents: read - actions: write steps: - uses: actions/checkout@v6 @@ -148,7 +147,6 @@ jobs: permissions: contents: read - actions: write env: FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true" @@ -209,7 +207,6 @@ jobs: permissions: contents: read - actions: write steps: - name: Checkout