V8.03.512.2025.06.06

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

.gitea/workflows/generate_PRIVATE_iso_flavour_0.yaml

@@ -388,6 +388,15 @@ jobs:
           # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
           EOF
 
+      - name: 🚧 Stash local changes (including untracked).
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Temporarily store any local modifications or untracked files
+          git stash push --include-untracked -m "ci-temp" || echo "✔️ Nothing to stash"
+
       - name: 🔄 Sync with remote before commit using merge strategy.
         shell: bash
         env:
@@ -406,6 +415,15 @@ jobs:
           git status
           git log --oneline -n 5
 
+      - name: 🛠️ Restore stashed changes.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Apply previously stashed changes, falls vorhanden
+          git stash pop || echo "✔️ Nothing to pop"
+
       - name: 📦 Stage generated files.
         shell: bash
         env:

.gitea/workflows/generate_PRIVATE_iso_flavour_1.yaml

@@ -385,6 +385,15 @@ jobs:
           # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
           EOF
 
+      - name: 🚧 Stash local changes (including untracked).
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Temporarily store any local modifications or untracked files
+          git stash push --include-untracked -m "ci-temp" || echo "✔️ Nothing to stash"
+
       - name: 🔄 Sync with remote before commit using merge strategy.
         shell: bash
         env:
@@ -403,6 +412,15 @@ jobs:
           git status
           git log --oneline -n 5
 
+      - name: 🛠️ Restore stashed changes.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Apply previously stashed changes, falls vorhanden
+          git stash pop || echo "✔️ Nothing to pop"
+
       - name: 📦 Stage generated files.
         shell: bash
         env:

.gitea/workflows/generate_PUBLIC_iso.yaml

@@ -385,6 +385,15 @@ jobs:
           # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
           EOF
 
+      - name: 🚧 Stash local changes (including untracked).
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Temporarily store any local modifications or untracked files
+          git stash push --include-untracked -m "ci-temp" || echo "✔️ Nothing to stash"
+
       - name: 🔄 Sync with remote before commit using merge strategy.
         shell: bash
         env:
@@ -403,6 +412,15 @@ jobs:
           git status
           git log --oneline -n 5
 
+      - name: 🛠️ Restore stashed changes.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Apply previously stashed changes, falls vorhanden
+          git stash pop || echo "✔️ Nothing to pop"
+
       - name: 📦 Stage generated files.
         shell: bash
         env:

.gitea/workflows/linter_char_scripts.yaml

@@ -245,6 +245,15 @@ jobs:
           EOF
           fi
 
+      - name: 🚧 Stash local changes (including untracked).
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Temporarily store any local modifications or untracked files
+          git stash push --include-untracked -m "ci-temp" || echo "✔️ Nothing to stash"
+
       - name: 🔄 Sync with remote before commit using merge strategy.
         shell: bash
         env:
@@ -263,6 +272,15 @@ jobs:
           git status
           git log --oneline -n 5
 
+      - name: 🛠️ Restore stashed changes.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Apply previously stashed changes, falls vorhanden
+          git stash pop || echo "✔️ Nothing to pop"
+
       - name: 📦 Stage generated files.
         shell: bash
         env:

.gitea/workflows/render-dnssec-status.yaml

@@ -11,7 +11,7 @@
 
 ### Version Master V8.03.400.2025.06.05
 
-name: Retrieve DNSSEC status of coresecret.dev.
+name: 🛡️ Retrieve DNSSEC status of coresecret.dev.
 
 permissions:
   contents: write
@@ -25,7 +25,7 @@ on:
 
 jobs:
   build-dnssec-diagram:
-    name: Retrieve DNSSEC status of coresecret.dev.
+    name: 🛡️ Retrieve DNSSEC status of coresecret.dev.
     runs-on: ubuntu-latest
 
     steps:
@@ -127,6 +127,15 @@ jobs:
           dnsviz probe -s 8.8.8.8 -R SOA,A,AAAA,CAA,CDS,CDNSKEY,LOC,HTTPS,MX,NS,TXT coresecret.dev >| coresecret.dev.json
           dnsviz graph -T png < coresecret.dev.json >| docs/SECURITY/coresecret.dev.png
 
+      - name: 🚧 Stash local changes (including untracked).
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Temporarily store any local modifications or untracked files
+          git stash push --include-untracked -m "ci-temp" || echo "✔️ Nothing to stash"
+
       - name: 🔄 Sync with remote before commit using merge strategy.
         shell: bash
         env:
@@ -145,6 +154,15 @@ jobs:
           git status
           git log --oneline -n 5
 
+      - name: 🛠️ Restore stashed changes.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Apply previously stashed changes, falls vorhanden
+          git stash pop || echo "✔️ Nothing to pop"
+
       - name: 📦 Stage generated files.
         shell: bash
         env:
@@ -174,7 +192,7 @@ jobs:
             WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
             CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
 
-            COMMIT_MSG="DEPLOY BOT: Auto-Generate DNSSEC Status [skip ci]
+            COMMIT_MSG="DEPLOY BOT: 🛡️ Auto-Generate DNSSEC Status [skip ci]
 
           ${CI_HEADER}
 

.gitea/workflows/render-dot-to-png.yaml

@@ -11,7 +11,7 @@
 
 ### Version Master V8.03.400.2025.06.05
 
-name: Render Graphviz Diagrams.
+name: 🔁 Render Graphviz Diagrams.
 
 permissions:
   contents: write
@@ -26,7 +26,7 @@ on:
 
 jobs:
   build-graphiz-diagrams:
-    name: Render Graphviz Diagrams.
+    name: 🔁 Render Graphviz Diagrams.
     runs-on: ubuntu-latest
 
     steps:
@@ -120,6 +120,15 @@ jobs:
             dot -Tpng "${file}" -o "${out}"
           done
 
+      - name: 🚧 Stash local changes (including untracked).
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Temporarily store any local modifications or untracked files
+          git stash push --include-untracked -m "ci-temp" || echo "✔️ Nothing to stash"
+
       - name: 🔄 Sync with remote before commit using merge strategy.
         shell: bash
         env:
@@ -138,6 +147,15 @@ jobs:
           git status
           git log --oneline -n 5
 
+      - name: 🛠️ Restore stashed changes.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          ### Apply previously stashed changes, falls vorhanden
+          git stash pop || echo "✔️ Nothing to pop"
+
       - name: 📦 Stage generated files.
         shell: bash
         env:
@@ -167,7 +185,7 @@ jobs:
             WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
             CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
 
-            COMMIT_MSG="DEPLOY BOT: DEPLOY BOT: Auto-Generate PNG from *.dot. [skip ci]
+            COMMIT_MSG="DEPLOY BOT: 🔁 Auto-Generate PNG from *.dot. [skip ci]
 
           ${CI_HEADER}