• 2026-07-31 ci: add CodeQL scanning and CodeRabbit config (#15)
• 2026-07-31 docs(readme): add a "Contributions wanted right now" section
• 2026-07-31 feat(security): restrict scripts with a Content-Security-Policy
• 2026-07-31 refactor(site): single source for the theme guard
• 2026-07-31 refactor(site): move the model index search into site.js
• 2026-07-31 refactor(site): single source for recScore and the flag table
• 2026-07-31 refactor(site): move the explorer script out of index.html
• 2026-07-31 docs(security): state which workflows can write to main and which cannot
• 2026-07-31 chore: add CODEOWNERS so every pull request routes to the maintainer
• 2026-07-31 docs: stop the PR template asking for the build output
• 2026-07-31 chore(ci): bump the actions group with 5 updates
• 2026-07-31 chore: remove the inert Sponsor button
• 2026-07-31 ci: let the bot own the generated files
• 2026-07-31 chore(ci): pin the Node version in one place and add dependabot
• 2026-07-31 docs: publish 2.3.0 through 2.6.0 out of the Unreleased backlog
• 2026-07-31 build: keep CITATION.cff pinned to the dataset version
• 2026-07-31 docs: point the freshness docs at the workflow that actually runs weekly
• 2026-07-31 chore: normalize line endings via .gitattributes
• 2026-07-31 chore: gitignore _internal-docs/ (private dev documentation)
• 2026-07-31 site: revert hero H1 to the original (plain heading + blinking caret)