From 6afbec6d8fd4b051e420e76fdbe33b59da003558 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Sat, 26 Apr 2025 20:15:59 +0200
Subject: [PATCH 1/5] build.yaml: Replace dead ubuntu-18.04 by current
 ubuntu-24.04

Package subversion turned out tonot be installed
with ubuntu-24.04.
---
 .github/workflows/build.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2e5c7eb..c5cb6b7 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -26,10 +26,10 @@ jobs:
       fail-fast: false
       matrix:
         include:
+          - runs-on: ubuntu-24.04
+            qt: qt5-qmake
           - runs-on: ubuntu-22.04
             qt: qt5-qmake
-          - runs-on: ubuntu-18.04
-            qt: qt5-default
 
     name: Build (Linux, ${{ matrix.runs-on }})
     runs-on: ${{ matrix.runs-on }}
@@ -43,7 +43,8 @@ jobs:
             libapr1-dev \
             libsvn-dev \
             ${{ matrix.qt }} \
-            qtbase5-dev
+            qtbase5-dev \
+            subversion
 
       - name: 'Checkout Git branch'
         uses: actions/checkout@v3

From 3772120fbc1b6b321ba86df3b309ffd9f35da613 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Sat, 26 Apr 2025 20:21:06 +0200
Subject: [PATCH 2/5] build.yaml: Use mapping syntax (for upcoming extension)

---
 .github/workflows/build.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index c5cb6b7..b7ee100 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -17,8 +17,8 @@
 name: Build (Linux, Ubuntu)
 
 on:
-- pull_request
-- push
+  pull_request:
+  push:
 
 jobs:
   build:

From 4a4ddfa881b1b1447474aade29a61986bb9caf21 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Sat, 26 Apr 2025 20:22:25 +0200
Subject: [PATCH 3/5] build.yaml: Run once a week to detect breakage early

Some part of below our feet is always moving, and when
that move breaks something for us, we'll now know in time.
---
 .github/workflows/build.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index b7ee100..16fdded 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -19,6 +19,8 @@ name: Build (Linux, Ubuntu)
 on:
   pull_request:
   push:
+  schedule:
+    - cron: '0 2 * * 5'  # Every Friday at 2am
 
 jobs:
   build:

From b1946fdb7a9bbf554d530e2a7f27a40e845a8433 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Sat, 26 Apr 2025 20:23:23 +0200
Subject: [PATCH 4/5] build.yaml: Allow triggering the CI manually

---
 .github/workflows/build.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 16fdded..eb6ba24 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -21,6 +21,7 @@ on:
   push:
   schedule:
     - cron: '0 2 * * 5'  # Every Friday at 2am
+  workflow_dispatch:
 
 jobs:
   build:

From 205f581b70be3467e81ab1136ddb1530e2bf50f0 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Sat, 26 Apr 2025 20:24:07 +0200
Subject: [PATCH 5/5] build.yaml: Reduce permissions to minimum for security

---
 .github/workflows/build.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index eb6ba24..c20e3bf 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -23,6 +23,10 @@ on:
     - cron: '0 2 * * 5'  # Every Friday at 2am
   workflow_dispatch:
 
+# Reduce permissions to minimum for security
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy: