- mise-tasks/branch-cleanup: delete merged local/remote branches via
git + Forgejo API (1Password/env/flag token resolution)
- mise.toml: add uv (runs PEP 723 task scripts) and bat (ai-docs output)
- CLAUDE.md: re-point at AGENTS.md
- prek.toml: drop taplo-lint hook. It fetches the remote SchemaStore
catalog, which the pinned (dormant) taplo CLI can no longer decode and
which fails in sandboxed CI. check-toml still validates syntax and
taplo-format still formats.
- .forgejo workflows / .gitea/template / dagger: minor resync
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The /releases/latest and /releases/tags/X reads were unauthenticated. On
private repos Forgejo returns 404 to unauth'd callers, so the workflow
silently fell back to v0.0.0 as the "previous version" and let a
BUMP_PATCH on top of v1.x.y produce v0.0.1. The duplicate-tag guard had
the same blind spot — it could not detect existing releases at all.
Both reads now send the Authorization header and treat any non-200 /
non-404 response as a hard failure instead of swallowing it.
