bernardladenthin / BitcoinAddressFinder / 26045328751 / 1

77%

main: 77%

push

github

Reorder snapshot publishing workflow and update action versions (#203)

* ci: sign snapshot artifacts and mirror release pipeline order

Snapshots were deployed to Maven Central unsigned and the GitHub
snapshot pre-release attached unsigned jars. Wire GPG into the
snapshot path and reorder so publish-snapshot signs + deploys first,
then github-snapshot attaches the signed assets. Same shape as
publish-release -> github-release.

* ci: bump outdated GitHub Actions to latest

- github/codeql-action/upload-sarif: v3 -> v4 (v3 deprecated Dec 2026)
- actions/upload-artifact: v4 -> v7 (where stale)
- ossf/scorecard-action: v2.4.0 -> v2.4.3 (where stale)
- fsfe/reuse-action: v5 -> v6 (where stale)

https://claude.ai/code/session_01SxxLmcu9vgaPjKnSPeTjEx

---------

Co-authored-by: Claude <noreply@anthropic.com>

441 of 598 branches covered (73.75%)

Branch coverage included in aggregate %.

1864 of 2428 relevant lines covered (76.77%)

3.48 hits per line