[workflow-audit] 4 unexplained change(s) on 2026-09-03

[github-actions]

4 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-02T12:04:33Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

006d97d — refactor(website): give the docs pipeline's inventories one owner each

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-02 14:58:45 -0700
• Refs: main,remotes/origin/fix/docs-parser-silent-mangling remotes/origin/main
• Files:
  • .github/workflows/release.yml
• View diff

2e103e1 — security(ci): freeze the standalone-smoketest install

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-02 10:15:49 -0700
• Refs: main,remotes/origin/fix/docs-parser-silent-mangling remotes/origin/generic-vpn,remotes/origin/main
• Files:
  • .github/workflows/ci.yml
• View diff

2e4e7be — security(ci): correct chromatic.yml's frozen-install rationale

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-02 10:31:11 -0700
• Refs: main,remotes/origin/fix/docs-parser-silent-mangling remotes/origin/generic-vpn,remotes/origin/main
• Files:
  • .github/workflows/chromatic.yml
• View diff

46d69a4 — Merge remote-tracking branch 'origin/main' into launch-marketing

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-02 09:31:58 -0700
• Refs: main,remotes/origin/fix/docs-parser-silent-mangling remotes/origin/main
• Files:
  • .github/workflows/release.yml
• View diff