[ptr727]

Summary

Promotes develop to main. The head is a merge of develop onto main rather than develop itself, since the two branches conflict. The merged tree is identical to develop.

Changes carried:

• Resync CODESTYLE.md and WORKFLOW.md and Bump Hub Task Pins to 2.0.1286 #222 Resync CODESTYLE.md and WORKFLOW.md with the hub, and bump the hub task pins to 2.0.1286.
• Resync AGENTS.md and GOVERNANCE.md With the Hub #223 Resync AGENTS.md and GOVERNANCE.md with the hub.
• Re-vendor the .github/skills Tree From the Hub #224 Re-vendor the .github/skills tree from the hub.
• Resync copilot-instructions.md and AUDIT.md With the Hub #225 Resync .github/copilot-instructions.md and AUDIT.md with the hub.
• Filter the GitHub Pre-Release Shield to Prerelease Tags #226 Filter the GitHub pre-release shield to prerelease tags.
• Move Local Runtime Credentials to the Repo-Scoped .secrets/ Convention #227 Move local runtime credentials to the repo-scoped .secrets/ convention.
• The Dependabot NuGet and Actions group bumps merged into develop since the last promotion.

Conflict Resolution

main took its own Dependabot bumps of the hub task pins to 2.0.1209 while develop moved them to 2.0.1286. The three conflicted files, merge-bot-pull-request.yml, publish-release.yml, and test-pull-request.yml, differ only in those pins. The 2.0.1209 commit is an ancestor of the 2.0.1286 commit in the hub, so develop's side supersedes main's and was taken. main holds no other content develop lacks: Directory.Packages.props, the only other file main changed, is identical on both branches.

Verification

• git diff origin/develop HEAD is empty.
• A local strict review ran at the frontier tier over the full diff against main, and its pass is recorded and attested on this head. The prose lint was clean. The review raised four findings, disposed of below.
  • .gitignore: dropping the bare secrets/ ignore leaves a legacy secrets/immich_api_key.txt untracked in a checkout that never migrated. This is Move Local Runtime Credentials to the Repo-Scoped .secrets/ Convention #227's deliberate choice, with the move step recorded in its body, and the maintainer confirmed keeping it.
  • .github/copilot-instructions.md and .github/skills/pr-review-conduct/SKILL.md: the coverage prose says a table must name exactly the changed files, while the hub engine since Place a Copilot Outstanding Findings List and Read a Table Leaving Out Only Lineless Files as Covering ProjectTemplate#3702 also accepts a table omitting only lineless files. Both files are carried, so the fix lands at the source: State the Lineless-File Allowance Where the Prose Describes Copilot Table Coverage ProjectTemplate#3726.
  • .github/skills/drive-pr/SKILL.md and .github/skills/merge-and-release/SKILL.md differ from hub tag 2.0.1286, the workflow pin. Declined: the skills tree is carried from hub main, which the fleet bootstrap names as ground truth, and the whole tree is byte-identical to hub main at 48ea7d6. The workflow pin is a separate, Dependabot-managed tag.

Pre-existing findings, not filed

• OPERATIONS.md:99, correctness (documentation): the list of hub tasks the workflows reach names three of the five, omitting publish-docker-readme-task.yml and merge-bot-task.yml.

🤖 Generated with Claude Code

[coderabbitai]

Important

• Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 9751e3a0-db0f-4707-a9e1-7d7d0634484e

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[ptr727]

A recorded local strict-review pass covers head 216df4706941c7ef3f71a2be28d85f6f7a9005bf, the content this pull request carries at that commit against main, and it recorded 4 findings.

[Copilot]

🟢 Approval recommended

The review records no active issues, with the intended workflow, credential, documentation, and prerelease-tag updates accounted for.

No open issues 🎉

What changed in this PR

Promotes develop to main, carrying the latest fleet guidance, workflow pin updates, repo-scoped credential convention, and prerelease badge correction. The merged tree matches develop, with conflicts resolved in favor of the newer hub task pins.

Changes:

• Updates reusable workflow pins from 2.0.1209 to 2.0.1286.
• Moves local Immich credentials to the repo-scoped .secrets/ convention.
• Resynchronizes governance, audit, Copilot, workflow, coding-style, and Skills content.
• Restricts the prerelease shield to -g tags.

This pull request is too complex or risky for automated approval.

File	Description
README.md	Filters the prerelease shield to prerelease tags.
OPERATIONS.md	Documents the repo-scoped secrets directory.
AUDIT.md	Updates audit wording and invocation.
.vscode/​launch.json	Reads the Immich key from .secrets/.
.secrets/​README.md	Catalogs local runtime credentials.
.secrets/​immich_api_key.example	Provides the tracked credential template.
.gitignore	Ignores real .secrets/ files while retaining examples and the catalog.
.github/​workflows/​test-pull-request.yml	Updates validation and smoke-build task pins.
.github/​workflows/​publish-release.yml	Updates release-chain task pins.
.github/​workflows/​merge-bot-pull-request.yml	Updates the merge-bot task pin.
.github/​skills/​workflow-ci-contract/​SKILL.md	Resynchronizes workflow contract guidance.
.github/​skills/​workflow-ci-contract/​references/​test-methodology.md	Updates workflow test methodology.
.github/​skills/​workflow-ci-contract/​references/​architecture.md	Updates workflow architecture guidance.
.github/​skills/​upstream-contribution-workflow/​SKILL.md	Resynchronizes upstream contribution guidance.
.github/​skills/​standup-a-repo/​SKILL.md	Resynchronizes repository stand-up guidance.
.github/​skills/​shell-codestyle/​SKILL.md	Updates shell style guidance.
.github/​skills/​resync-a-repo/​SKILL.md	Resynchronizes repository convergence guidance.
.github/​skills/​python-codestyle/​SKILL.md	Updates Python tooling, testing, and dependency guidance.
.github/​skills/​python-codestyle/​references/​testing.md	Updates Python coverage guidance.
.github/​skills/​python-codestyle/​references/​profiles.md	Updates Python profile and directory rules.
.github/​skills/​python-codestyle/​references/​code-style.md	Updates Python documentation and subprocess conventions.
.github/​skills/​git-commit-conventions/​SKILL.md	Resynchronizes commit, signing, and cleanup rules.
.github/​skills/​git-commit-conventions/​references/​history-rewrite.md	Updates history-rewrite guidance.
.github/​skills/​fleet-code-review/​SKILL.md	Updates fleet review guidance.
.github/​skills/​dotnet-codestyle/​SKILL.md	Resynchronizes .NET build and analyzer guidance.
.github/​skills/​dotnet-codestyle/​references/​testing.md	Updates .NET testing and coverage guidance.
.github/​skills/​dotnet-codestyle/​references/​project-config.md	Clarifies .NET AOT project configuration.
.github/​skills/​dotnet-codestyle/​references/​conventions.md	Updates C# conventions and member-ordering guidance.
.github/​skills/​copilot-instructions-keeper/​SKILL.md	Updates carried Copilot instruction maintenance guidance.
.github/​skills/​comment-and-doc-style/​references/​markdown-links.md	Updates Markdown link rules.
.github/​skills/​comment-and-doc-style/​references/​line-endings.md	Updates line-ending policy guidance.
.github/​skills/​comment-and-doc-style/​references/​carried-doc-references.md	Updates carried-document reference rules.
.github/​skills/​check-this-repo/​SKILL.md	Updates in-repository conformance check guidance.
.github/​skills/​carried-instruction-file-guard/​SKILL.md	Updates safeguards for carried instruction files.
.github/​skills/​branching-and-release-model/​SKILL.md	Resynchronizes branching and release guidance.
.github/​skills/​branching-and-release-model/​references/​release-publish-mechanics.md	Updates release publishing mechanics.
.github/​skills/​branching-and-release-model/​references/​branch-protection-and-promotion.md	Updates promotion and branch-protection mechanics.
.github/​skills/​audit-a-repo/​SKILL.md	Updates fleet audit procedure guidance.
.github/​copilot-instructions.md	Resynchronizes Copilot review and carried-content instructions.

_{Review effort: Lite}