2306892ce9
The gates of scripts/gates.sh that need neither the install nor a display (fmt, clippy, the workspace tests without an install, the doc-link and render-pass lints, the player build and its tests), on ubuntu-latest, so a red pull request is seen before anyone builds it. A branch of this repository skips the job: it runs the full chain before it lands. The job reads the repository only, keeps no credentials in the checkout, pins its two actions by commit, drops debuginfo for the runner's disk and caches dependencies. gates.sh and CONTRIBUTING say what runs where. actionlint passes; the system packages are the ones CONTRIBUTING names for Linux. The workflow's first run is a manual one on main once it lands. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>