chore(deps): bump the actions-all group with 3 updates

.forgejo/workflows/ci.yml

@@ -117,4 +117,3 @@ jobs:
         run: cargo deny check advisories bans licenses sources
       - name: Cargo audit
         run: cargo audit
-

.forgejo/workflows/deploy.yml

@@ -85,4 +85,4 @@ jobs:
         with:
           site: https://adafede.codeberg.page/dioxus/
           token: ${{ forge.token }}
-          source: _site/
+          source: _site/

.github/CODE_OF_CONDUCT.md

@@ -31,4 +31,3 @@ For conduct issues, contact maintainers through the private channel documented i
 
 Maintainers may edit/remove content, warn contributors, or restrict participation
 for behavior that violates this policy.
-

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -78,4 +78,3 @@ body:
           required: true
         - label: I am not reporting a security vulnerability (see `SECURITY.md`).
           required: true
-

.github/ISSUE_TEMPLATE/config.yml

@@ -6,4 +6,3 @@ contact_links:
   - name: Support
     url: https://github.com/adafede/dioxus/blob/main/SUPPORT.md
     about: Read support expectations and how to request help
-

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -66,4 +66,3 @@ body:
           required: true
         - label: I am willing to contribute a pull request for this feature.
           required: false
-

.github/PULL_REQUEST_TEMPLATE.md

@@ -61,4 +61,3 @@ By submitting this pull request I confirm that my contribution is made available
 under the terms of the **GNU Affero General Public License v3.0 (AGPL-3.0-only)**,
 as specified in the `LICENSE` file, and I certify the
 [Developer Certificate of Origin](https://developercertificate.org/).
-

.github/RELEASE_CHECKLIST.md

@@ -104,4 +104,3 @@ make supply-chain
 
 Review and commit `Cargo.lock` with any intentional updates.
 Treat each lock-file commit as a mini release validation.
-

.github/SECURITY.md

@@ -24,4 +24,3 @@ You will receive an acknowledgement within 3 business days. We aim to provide a
 3. Run `make qa` and supply-chain checks.
 4. Publish a fixed release and rotate any impacted credentials.
 5. Publish an advisory/changelog note after patch availability.
-

.github/SUPPORT.md

@@ -20,4 +20,3 @@ Best-effort support is provided for:
 - latest tagged release
 
 Older revisions may not receive fixes.
-

.github/workflows/ci.yml

@@ -101,7 +101,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 1
       - uses: dtolnay/rust-toolchain@stable
-      - uses: taiki-e/install-action@v2.81.1
+      - uses: taiki-e/install-action@v2.81.8
         with:
           # Pin tool versions for reproducible parser behavior in advisory DB checks.
           tool: cargo-deny@0.19.4,cargo-audit@0.22.1

.github/workflows/codeql.yml

@@ -35,11 +35,10 @@ jobs:
           persist-credentials: false
           fetch-depth: 1
 
-      - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
+      - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
         with:
           languages: ${{ matrix.language }}
 
-      - uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
-
-      - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa
+      - uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
 
+      - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e

.github/workflows/dependency-review.yml

@@ -28,4 +28,3 @@ jobs:
         with:
           fail-on-severity: high
           deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, GPL-1.0-only, GPL-1.0-or-later
-

.github/workflows/deploy.yml

@@ -28,7 +28,7 @@ jobs:
 
       - uses: Swatinem/rust-cache@v2.9.1
 
-      - uses: cargo-bins/cargo-binstall@v1.19.1
+      - uses: cargo-bins/cargo-binstall@v1.20.0
 
       - name: Install dioxus-cli
         run: cargo binstall dioxus-cli --version 0.7.9 --locked --force

CHANGELOG.md

@@ -5,4 +5,3 @@
 - Added AI agent onboarding docs and machine-readable project metadata.
 - Hardened `lotus-api` with secure response headers and a runtime metrics endpoint.
 - Simplified the `lotus-explorer` skillbook into plain skill modules with a separate suggestions file.
-

Cargo.toml

@@ -133,4 +133,3 @@ codegen-units = 16
 [profile.test]
 opt-level = 1
 lto = "thin"
-

apps/hello-world/assets/.well-known/security.txt

@@ -5,4 +5,3 @@ Contact: https://github.com/Adafede/dioxus/security/advisories/new
 Expires: 2027-01-01T00:00:00.000Z
 Preferred-Languages: en
 Policy: https://github.com/Adafede/dioxus/blob/main/SECURITY.md
-

apps/hello-world/assets/llms.txt

@@ -26,4 +26,3 @@ This is a starter template, not a production application.
 2. Edit `Cargo.toml` and `Dioxus.toml` (change `name`)
 3. Add the new app to workspace members in the root `Cargo.toml`
 4. Run: `dx serve --package my-new-app`
-

apps/hello-world/assets/robots.txt

@@ -3,4 +3,3 @@
 
 User-agent: *
 Disallow: /
-

apps/hello-world/public/assets/style.css

@@ -31,4 +31,4 @@ p {
   display: flex;
   gap: 12px;
   justify-content: center;
-}
+}

apps/lotus-api/Dockerfile

@@ -56,4 +56,3 @@ HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
     CMD wget --no-verbose --tries=1 --spider "http://localhost:${PORT}/health" || exit 1
 
 CMD ["lotus-api"]
-

apps/lotus-api/README.md

@@ -63,4 +63,3 @@ curl -sS http://127.0.0.1:8787/v1/search \
 - In production (`APP_ENV=production`), startup fails unless `CORS_ALLOWED_ORIGINS` is explicitly configured.
 - Responses are content-negotiated and compressed (Brotli/Gzip) when clients send `Accept-Encoding`.
 - Keep this service behind your reverse proxy and TLS termination layer.
-

apps/lotus-explorer/Dioxus.toml

@@ -19,4 +19,3 @@ watch_path = ["src", "public", "../../crates/shared/src"]
 # Proxy API requests to the lotus-api backend to avoid CORS issues in development
 path = "/v1"
 backend = "http://127.0.0.1:8787/v1"
-

apps/lotus-explorer/README.md

@@ -1,6 +1,6 @@
 # lotus-explorer
 
-A linked open data (LOD) explorer for the LOTUS compound-taxon-reference knowledge graph from Wikidata, queried via SPARQL.
+A linked open data (LOAD) explorer for the LOTUS compound-taxon-reference knowledge graph from Wikidata, queried via SPARQL.
 
 ## Architecture
 

apps/lotus-explorer/docs/ARCHITECTURE.md

@@ -41,4 +41,3 @@ api client → dto mapper → repository → service → state controller → co
 ## Skills index
 
 - `../SKILLS.md`
-

apps/lotus-explorer/docs/CITATION.md

@@ -7,4 +7,3 @@ If this explorer contributes to your work, please cite the LOTUS initiative pape
 - BibTeX (direct download in deployed app): `/docs/references.bib`
 
 Suggested citation key: `Rutz_2022_LOTUS`.
-

apps/lotus-explorer/docs/CURATION_SHARE_LINKS.md

@@ -29,4 +29,3 @@
 - Share links encode the queued input rows, not previously generated QuickStatements.
 - QuickStatements are regenerated on load so results stay reproducible after dependency creation or Wikidata changes.
 - If prerequisite entities are still missing, run the prerequisite block first in QS-Dev, create/merge items in Wikidata, then reopen or rerun the second pass.
-

apps/lotus-explorer/docs/skills/ARCHITECTURE_SKILLS.md

@@ -4,4 +4,3 @@
 - Private feature internals — export only what other modules need.
 - Transport boundaries — API DTOs stop at repository edges.
 - Architecture decision recording — capture problem, options, tradeoffs, and migration impact for boundary changes.
-

apps/lotus-explorer/docs/skills/ASYNC_DATA_ERROR_SKILLS.md

@@ -3,4 +3,3 @@
 - Async lifecycle safety — every request path has a stable identity and stale responses are ignored centrally.
 - Data layer normalization — API clients return DTOs, repositories map to domain types, and services consume domain types only.
 - Typed error boundaries — use contextual `thiserror`-style errors and derive user-facing messages separately.
-

apps/lotus-explorer/docs/skills/COLLABORATION_AI_SKILLS.md

@@ -4,4 +4,3 @@
 - AI-ready contribution protocol — name the target boundary, require tradeoff analysis, and demand test/lint validation.
 - Review checklist for human and AI changes — verify ownership, side effects, reactive scope, async safety, typed errors, and regressions.
 - Repository hygiene for collaboration — keep modules small, use explicit imports, and update architecture docs when boundaries change.
-

apps/lotus-explorer/docs/skills/DIOXUS_STATE_RENDER_SKILLS.md

@@ -3,4 +3,3 @@
 - Reactive scope minimization — subscribe only to the state slices a component consumes.
 - Component responsibility split — render in components, derive in models, side effects in hooks/controllers.
 - Table and virtualized rendering — keep scroll paths allocation-light and clamp visible windows safely.
-

apps/lotus-explorer/docs/skills/PERFORMANCE_SKILLS.md

@@ -3,4 +3,3 @@
 - Allocation and clone hygiene — avoid hot-path allocations, clone-heavy transforms, and unnecessary formatting in render code.
 - Measure before and after — capture the hotspot, the change, the expected complexity reduction, and the observed UX impact.
 - Reactive performance — narrow subscriptions, memo expensive derivations, and split monolithic components.
-

apps/lotus-explorer/docs/skills/SUGGESTIONS.md

@@ -3,4 +3,3 @@
 This file is reserved for non-normative improvement notes.
 
 Keep plain skill contracts in the sibling `*.md` skill modules.
-

apps/lotus-explorer/docs/skills/TESTING_QUALITY_SKILLS.md

@@ -3,4 +3,3 @@
 - Test seam extraction — move pure logic into testable modules and keep side effects at boundaries.
 - Deterministic async tests — avoid timing-based assertions and model stale or retry behavior explicitly.
 - Quality gates — require format, clippy, native tests, and wasm checks for non-trivial changes.
-

apps/lotus-explorer/public/.well-known/agent-skills.json

@@ -48,4 +48,3 @@
   "data_source": "https://query.wikidata.org/",
   "documentation": "https://lotusnprod.github.io/lotus-wikidata-interact/"
 }
-

apps/lotus-explorer/public/.well-known/api-catalog.json

@@ -38,4 +38,3 @@
   "last_updated": "2026-06-09",
   "contact": "https://github.com/Adafede/dioxus/issues"
 }
-

apps/lotus-explorer/public/.well-known/apple-app-site-association

@@ -22,4 +22,3 @@
     "details": []
   }
 }
-

apps/lotus-explorer/public/.well-known/security.txt

@@ -6,4 +6,3 @@ Expires: 2027-01-01T00:00:00.000Z
 Preferred-Languages: en, fr
 Canonical: https://adafede.github.io/dioxus/lotus-explorer/.well-known/security.txt
 Policy: https://github.com/Adafede/dioxus/blob/main/SECURITY.md
-

apps/lotus-explorer/public/_headers

@@ -76,4 +76,3 @@
 # ── SPA query parameters: exempt from cache variance ──────────────────────
 /index.html
   No-Vary-Search: params=("locale"), params_key_order=("locale","search","query")
-

apps/lotus-explorer/public/_redirects

@@ -7,4 +7,3 @@
 
 # Redirect any 404 back to index.html so the WASM SPA can handle routing
 /*  /index.html  200
-