Prepare release 4.11.0

.github/dependabot.yml

@@ -10,8 +10,12 @@ updates:
     directory: "/"
     patterns: ["*"]
     multi-ecosystem-group: "dependencies"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "maven"
     directory: "/"
     patterns: ["*"]
     multi-ecosystem-group: "dependencies"
+    cooldown:
+      default-days: 7

.github/workflows/broken_links_checker.yml

@@ -38,7 +38,7 @@ jobs:
             ]
           }
           EOF
-      - uses: tcort/github-action-markdown-link-check@e047c5b37f24ab722bbef1a27b6fab7f96bc4068
+      - uses: tcort/github-action-markdown-link-check@4e4c260e171095fad9a1c53696167469187b72ce # master
         with:
           use-quiet-mode: "yes"
           use-verbose-mode: "no"

.github/workflows/release.yml

@@ -33,10 +33,11 @@ jobs:
 
       - name: Fail if not running on main branch
         if: ${{ github.ref != 'refs/heads/main' }}
-        uses: actions/github-script@v9
-        with:
-          script: |
-            core.setFailed('Not running on main branch, github.ref is ${{ github.ref }}. Please start this workflow only on main')
+        run: |
+          echo "Not running on main branch, github.ref is ${GITHUB_REF}. Please start this workflow only on main."
+          exit 1
+        env:
+          GITHUB_REF: ${{ github.ref }}
 
       - name: Set up Maven Central Repository
         uses: actions/setup-java@v6

.github/zizmor.yml

@@ -0,0 +1,8 @@
+# See https://docs.zizmor.sh/configuration/#settings
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        "actions/*": ref-pin
+        "github/codeql-action/*": ref-pin
+        "*": hash-pin

doc/changes/changes_4.11.0.md

@@ -1,4 +1,4 @@
-# OpenFastTrace 4.11.0, released 2026-10-??
+# OpenFastTrace 4.11.0, released 2026-10-18
 
 Code name: Configurable Plugins
 

openfasttrace-mc-deployable-parent/pom.xml

@@ -38,7 +38,7 @@ It is maintained separately from the main parent POM for the following reasons:
                     <plugin>
                         <groupId>org.sonatype.central</groupId>
                         <artifactId>central-publishing-maven-plugin</artifactId>
-                        <version>0.11.0</version>
+                        <version>0.12.0</version>
                         <extensions>true</extensions>
                         <configuration>
                             <publishingServerId>central</publishingServerId>

parent/pom.xml

@@ -537,7 +537,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>versions-maven-plugin</artifactId>
-                <version>2.22.0</version>
+                <version>2.23.0</version>
             </plugin>
             <plugin>
                 <!-- Deployment of this module is not required -->