bernardladenthin / llamacpp-ai-index-maven-plugin / 26045279093

61%

push

github

Reorder snapshot publishing workflow and update CI dependencies (#73)

* ci: sign snapshot artifacts and mirror release pipeline order

Snapshots were deployed to Maven Central unsigned and the GitHub
snapshot pre-release attached unsigned jars. Wire GPG into the
snapshot path and reorder so publish-snapshot signs + deploys first,
then github-snapshot attaches the signed assets. Same shape as
publish-release -> github-release.

* ci: bump outdated GitHub Actions to latest

- github/codeql-action/upload-sarif: v3 -> v4 (v3 deprecated Dec 2026)
- actions/upload-artifact: v4 -> v7 (where stale)
- ossf/scorecard-action: v2.4.0 -> v2.4.3 (where stale)
- fsfe/reuse-action: v5 -> v6 (where stale)

https://claude.ai/code/session_01SxxLmcu9vgaPjKnSPeTjEx

---------

Co-authored-by: Claude <noreply@anthropic.com>

155 of 479 branches covered (32.36%)

Branch coverage included in aggregate %.

647 of 1093 relevant lines covered (59.19%)

2.63 hits per line