V8.03.145.2025.06.02

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

.gitea/workflows/render-md-to-html.yaml

@@ -141,16 +141,27 @@ jobs:
               -o "${out}"
           done
 
-      #- name: Sync with remote before commit to avoid Job Race Conditions.
-      #  shell: bash
-      #  env:
-      #    GIT_SSH_COMMAND: "ssh -p 42842"
-      #  run: |
-      #    export GNUPGHOME="$(pwd)/.gnupg"
-      #    git fetch origin master
-      #    git rebase origin/master
-      #    git status
-      #    git log --oneline -n 5
+      - name: Sync with remote before commit to avoid Job Race Conditions.
+        shell: bash
+        env:
+          GIT_SSH_COMMAND: "ssh -p 42842"
+        run: |
+          set -euo pipefail
+          export GNUPGHOME="$(pwd)/.gnupg"
+
+          echo "🔒 Stashing local changes (if any) ..."
+          git stash push --include-untracked --message "pre-rebase stash" || true
+
+          echo "🔄 Fetching and rebasing from origin/master ..."
+          git fetch origin master
+          git rebase origin/master
+
+          echo "🎯 Restoring local changes from stash (if any) ..."
+          git stash pop || echo "ℹ️ Nothing to pop or merge conflict during stash pop."
+
+          echo "📋 Current status after rebase : "
+          git status
+          git log --oneline -n 5
 
       - name: Stage generated files.
         shell: bash

README.md

@@ -26,7 +26,7 @@ include_toc: true
 **Centurion Intelligence Consulting Agency Information Security Standard**<br>
 *Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
 **Master Version**: 8.02<br>
-**Build**: V8.03.143.2025.06.02<br>
+**Build**: V8.03.145.2025.06.02<br>
 
 This shell wrapper automates the creation of a Debian Bookworm live ISO hardened according to the latest best practices in server
 and service security. It integrates into your build pipeline to deliver an isolated, robust environment suitable for