- dev/check-upstream.sh: pinned downloads still there and unchanged (pinned commits too), Arch
Linux ARM packages still there and not needing a newer glibc/libstdc++ than SteamOS has,
Homebrew's scrcpy vs the tested major; plus newer versions (check-pins, lib/tested-versions).
--quick only checks the pinned files exist.
- .github/workflows/upstream.yml runs it on Mondays; dev/upstream-issue.sh keeps one
"upstream-check" issue in step (comments only when the report changes, closes when clear),
and the run re-enables its own schedule so 60 days without commits don't switch it off.
- dev/bump-pin.py TWEAK[/NAME] | python: newest version, URL and a sha256 computed from the
download (cross-checked with a published .sha256), plus the upstream changes to read.
- check-pins: Hugging Face pins report whether the pinned file changed, not just the repository.
- CONTRIBUTING (keeping up with upstream, what happens unmaintained), SECURITY, CHANGELOG.