- .cz.toml, dev/check-commit-msg.sh (cz check, or the same pattern without commitizen), in the
commit-msg hook and CI; the Release workflow commits as chore(release).
- update and get.sh fetch tags with --force; a main checkout that can't fast-forward says how
to catch up.
- Pins: license_file= URLs at the pinned version; dev/mirror-pins.sh uploads them as
<copy>.<project>-<file>; CI requires them.
