James PineandClaude Opus 4.7 ddc42b4735 ci(release): pin free-disk-space action + stop removing LLVM ...

Review feedback on the Linux release workflow:

1. `jlumbroso/free-disk-space@main` was an unpinned ref in a job that
   runs with `contents: write` and handles signing secrets. Pin to the
   v1.3.1 commit SHA so a force-push or repo compromise can't inject
   arbitrary code into our release flow.

2. `large-packages: true` runs `apt-get remove '^llvm-.*'`, wiping LLVM
   just before the next step installs `llvm-dev`. That wastes CI time
   and risks cascade-removal of reverse deps that won't be pulled back
   in by `llvm-dev` alone. The remaining toggles (android, dotnet,
   haskell, swap-storage) already clear ~20 GB, which is enough
   headroom for the Python + torch + PyInstaller build.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

2026-04-19 19:19:19 -07:00

..

assets

Update date formatting logic and replace binary assets

2026-01-26 01:10:22 -08:00

workflows

ci(release): pin free-disk-space action + stop removing LLVM

2026-04-19 19:19:19 -07:00