docs: update demo.gif

.github/labels.yml

@@ -139,6 +139,23 @@
   color: c2e0c6
   description: Docs site / README
 
+# --- Release / v1 routing ---
+- name: backport/v1
+  color: 0e8a16
+  description: Merge to master and backport to release/v1
+- name: target/v1
+  color: 1d76db
+  description: PR targets the release/v1 branch directly
+- name: backported
+  color: c5def5
+  description: Cherry-picked onto release/v1
+- name: backport-failed
+  color: b60205
+  description: Cherry-pick conflict — needs manual backport
+- name: skip-changelog
+  color: ededed
+  description: Exclude from generated release notes
+
 # --- Size ---
 - name: size/XS
   color: "3cbf00"

.github/workflows/backport.yml

@@ -0,0 +1,127 @@
+name: Backport to release/v1
+
+# Cherry-picks a merged PR's commit straight onto release/v1 and pushes it —
+# no intermediate PR. Fires when:
+#   - a PR labeled `backport/v1` is merged into master, or
+#   - a maintainer comments `/backport v1` on an already-merged PR.
+# On a clean cherry-pick the commit is pushed directly. On conflict nothing is
+# pushed; the source PR is labeled `backport-failed` and a comment asks for a
+# manual cherry-pick.
+
+on:
+  pull_request_target:
+    types: [closed]
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+jobs:
+  backport:
+    name: Backport
+    runs-on: ubuntu-latest
+    if: >
+      (github.event_name == 'pull_request_target'
+        && github.event.pull_request.merged == true
+        && contains(github.event.pull_request.labels.*.name, 'backport/v1'))
+      || (github.event_name == 'issue_comment'
+        && github.event.issue.pull_request
+        && github.event.issue.state == 'closed'
+        && startsWith(github.event.comment.body, '/backport v1')
+        && contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association))
+    steps:
+      - name: Resolve PR and merge commit
+        id: pr
+        uses: actions/github-script@v9
+        with:
+          github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const num = context.eventName === 'issue_comment'
+              ? context.payload.issue.number
+              : context.payload.pull_request.number;
+
+            const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: num });
+
+            if (!pr.merged || !pr.merge_commit_sha) {
+              core.notice(`PR #${num} is not merged; nothing to backport.`);
+              core.setOutput('run', 'false');
+              return;
+            }
+            core.setOutput('run', 'true');
+            core.setOutput('number', String(num));
+            core.setOutput('sha', pr.merge_commit_sha);
+            core.setOutput('title', pr.title);
+
+      - name: Checkout
+        if: steps.pr.outputs.run == 'true'
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          ref: release/v1
+          token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }}
+
+      - name: Cherry-pick onto release/v1
+        if: steps.pr.outputs.run == 'true'
+        id: pick
+        run: |
+          set -euo pipefail
+          SHA="${{ steps.pr.outputs.sha }}"
+          git config user.name "Floatpane Bot"
+          git config user.email "us@floatpane.com"
+          git fetch --no-tags origin "$SHA"
+
+          # A true merge commit has >1 parent and needs a mainline (-m 1);
+          # squash/rebase merges are a single commit cherry-picked as-is.
+          PARENTS=$(git rev-list --parents -n1 "$SHA" | wc -w)
+          PICK_ARGS="-x"
+          if [ "$PARENTS" -gt 2 ]; then PICK_ARGS="-x -m 1"; fi
+
+          if git cherry-pick $PICK_ARGS "$SHA"; then
+            git push origin HEAD:release/v1
+            echo "status=ok" >> "$GITHUB_OUTPUT"
+          else
+            git cherry-pick --abort || true
+            echo "status=conflict" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Report result
+        if: steps.pr.outputs.run == 'true'
+        uses: actions/github-script@v9
+        with:
+          github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const issue_number = Number('${{ steps.pr.outputs.number }}');
+            const status = '${{ steps.pick.outputs.status }}';
+            const sha = '${{ steps.pr.outputs.sha }}';
+
+            if (status === 'ok') {
+              await github.rest.issues.addLabels({ owner, repo, issue_number, labels: ['backported'] });
+              try {
+                await github.rest.issues.removeLabel({ owner, repo, issue_number, name: 'backport-failed' });
+              } catch (e) { if (e.status !== 404) throw e; }
+              await github.rest.issues.createComment({
+                owner, repo, issue_number,
+                body: `Cherry-picked \`${sha.substring(0, 7)}\` onto \`release/v1\`.`,
+              });
+            } else {
+              await github.rest.issues.addLabels({ owner, repo, issue_number, labels: ['backport-failed'] });
+              await github.rest.issues.createComment({
+                owner, repo, issue_number,
+                body: [
+                  `Backport to \`release/v1\` hit a conflict — cherry-pick it manually:`,
+                  '```bash',
+                  'git fetch origin',
+                  'git checkout release/v1',
+                  `git cherry-pick -x ${sha}`,
+                  '# resolve conflicts, then:',
+                  'git push origin release/v1',
+                  '```',
+                ].join('\n'),
+              });
+              core.setFailed('Cherry-pick conflict.');
+            }

.github/workflows/benchmarks.yml

@@ -15,14 +15,14 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout PR
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.3"
+          go-version: "1.26.4"
 
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y libpcsclite-dev

.github/workflows/bot-build.yml

@@ -68,7 +68,7 @@ jobs:
             core.setOutput('repo', pr.head.repo.full_name);
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ steps.pr.outputs.repo }}
           ref: ${{ steps.pr.outputs.ref }}
@@ -77,7 +77,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.3"
+          go-version: "1.26.4"
 
       - name: Set up Zig
         uses: goto-bus-stop/setup-zig@v2
@@ -134,8 +134,8 @@ jobs:
           zig cc -c -target aarch64-linux-musl -o "$RUNNER_TEMP/pcsclite_stub_arm64.o" "$RUNNER_TEMP/pcsclite_stub.c"
 
           mkdir -p "$PCSC_DIR/lib/amd64" "$PCSC_DIR/lib/arm64"
-          ar rcs "$PCSC_DIR/lib/amd64/libpcsclite.a" "$RUNNER_TEMP/pcsclite_stub_amd64.o"
-          ar rcs "$PCSC_DIR/lib/arm64/libpcsclite.a" "$RUNNER_TEMP/pcsclite_stub_arm64.o"
+          zig ar rcs "$PCSC_DIR/lib/amd64/libpcsclite.a" "$RUNNER_TEMP/pcsclite_stub_amd64.o"
+          zig ar rcs "$PCSC_DIR/lib/arm64/libpcsclite.a" "$RUNNER_TEMP/pcsclite_stub_arm64.o"
 
           cat > "$PCSC_DIR/lib/pkgconfig/libpcsclite.pc" << EOF
           Name: libpcsclite

.github/workflows/bot-check-ci.yml

@@ -61,9 +61,9 @@ jobs:
               lint: "Run `make lint` locally.",
               'mod-tidy': "Run `go mod tidy` and commit `go.mod`/`go.sum`.",
               nix: "Run `nix flake check --no-build` locally.",
-              snap: "Validate `snapcraft.yaml` with `snapcraft list-plugins`.",
+              snap: "Validate `snapcraft.yaml` with `snapcraft plugins`.",
               flatpak: "Validate the Flatpak manifest YAML structure.",
-              website: "Run `cd docs && npm ci && npx docusaurus build`.",
+              website: "Run `cd docs && npm ci && npm run build`.",
               'lua-plugins': "Run `luac -p plugins/*.lua` to check Lua syntax.",
               goreleaser: "Run `goreleaser check -f .goreleaser.yml`.",
               build: "Run `go build ./...` and `go test ./...` locally.",

.github/workflows/ci.yml

@@ -2,9 +2,10 @@ name: CI
 
 on:
   push:
-    branches: [master]
+    branches: [master, release/v1]
   pull_request:
-    branches: [master]
+    branches: [master, release/v1]
+  merge_group:
 
 jobs:
   build:
@@ -13,12 +14,12 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.3"
+          go-version: "1.26.4"
 
       - name: Install system dependencies
         if: runner.os == 'Linux'
@@ -36,12 +37,12 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.3"
+          go-version: "1.26.4"
 
       - name: Install system dependencies
         run: sudo apt-get update && sudo apt-get install -y libpcsclite-dev
@@ -68,12 +69,12 @@ jobs:
   mod-tidy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.3"
+          go-version: "1.26.4"
 
       - name: Check go.mod and go.sum are tidy
         run: |
@@ -90,7 +91,7 @@ jobs:
       run:
         working-directory: docs
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6
@@ -103,18 +104,18 @@ jobs:
         run: npm ci
 
       - name: Build
-        run: npx docusaurus build
+        run: npm run build
 
   snap:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Validate snapcraft.yaml
         run: |
           sudo snap install snapcraft --classic
           # Verify snapcraft can parse the project file
-          snapcraft list-plugins
+          snapcraft plugins
           # Validate YAML structure and required fields
           python3 << 'PYEOF'
           import yaml, sys
@@ -148,7 +149,7 @@ jobs:
   flatpak:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install dependencies
         run: |
@@ -190,7 +191,7 @@ jobs:
   nix:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install Nix
         uses: cachix/install-nix-action@v31
@@ -203,7 +204,7 @@ jobs:
   lua-plugins:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install Lua
         run: sudo apt-get update && sudo apt-get install -y lua5.4
@@ -222,14 +223,14 @@ jobs:
   goreleaser:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.3"
+          go-version: "1.26.4"
 
       - name: Install GoReleaser
         uses: goreleaser/goreleaser-action@v7

.github/workflows/demo.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false