[dependabot]

Bumps devantler-tech/.github/.github/workflows/publish-manifests.yaml from 10.0.3 to 17.0.1.

Release notes

Sourced from devantler-tech/.github/.github/workflows/publish-manifests.yaml's releases.

v17.0.1

17.0.1 (2026-10-29)

Bug Fixes

• ci: preserve safety checks after runner tool updates (#801) (737bb3b)

v17.0.0

17.0.0 (2026-10-29)

Features

• todo: retire the temporary vendor exclusion switch (#799) (84f4cdd)

BREAKING CHANGES

• todo: retire the temporary vendor exclusion switch (#799)

v16.0.1

16.0.1 (2026-10-29)

Bug Fixes

• recovery: retire the verified rollout switch (#796) (7a209dc)

v16.0.0

16.0.0 (2026-10-29)

Features

• todos: exclude conventional vendor roots by default (#795) (d46f985)

BREAKING CHANGES

• todos: exclude conventional vendor roots by default (#795)

v15.0.1

15.0.1 (2026-10-29)

Bug Fixes

• ci: isolate explicit public evidence read credentials (#798) (d3c754c)

... (truncated)

Commits

• 737bb3b fix(ci): preserve safety checks after runner tool updates (#801)
• 84f4cdd feat(todo)!: retire the temporary vendor exclusion switch (#799)
• 7a209dc fix(recovery): retire the verified rollout switch (#796)
• d46f985 feat(todos)!: exclude conventional vendor roots by default (#795)
• d3c754c fix(ci): isolate explicit public evidence read credentials (#798)
• 582f136 fix(actions)!: bind catalogue components to defining source (#792)
• 8e2dfbd fix(release): publish existing tags without a creation target (#791)
• 7b18478 perf(ci): compare Go runner capacity policies (#789)
• ba60525 fix(governance): record provider adoption decisions (#790)
• 0b13751 fix: prove release recovery writer capability through GitHub (#788)
• Additional commits viewable in compare view

[github-code-quality]

Code coverage overview

Languages: Go

Go / code-coverage/test

main 737bb3b	dependabot/github_ac... 93eb0f0	+/-
50%	50%	0%

Go / code-coverage/go

main 737bb3b	dependabot/github_ac... 93eb0f0	+/-
50%	50%	0%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

---

_{Updated October 29, 2026 12:21 UTC}

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: #770 | upstream | last-verified 2026-10-29: At head 93eb0f0, native CI 40871898009 publication job 123441321386 rejects unreviewed publisher content for candidate source 737bb3b. The prior jq/capacity faults are fixed. Open issue 770 now records this maintained candidate and owns content review plus exact deployed consumer approval. Keep the current approved publisher; resume only after that candidate approval is independently read back.

[devantler]

🤖 Generated by the Agentic Engineer

The shared CI repairs are merged and verified on main. This branch contains only the original Dependabot commit and has no authored adaptation to discard. Refresh it against the repaired base; fresh CI, complete release-range assessment and the deployed publisher-identity approval remain required before merge.

@dependabot rebase

[dependabot]

Superseded by #818.