chore(ci): bump reusable workflows to 0.1.0

[konradmichalik]

Bumps every konradmichalik/reusable-github-actions reference from the 0.0.1 freeze tag to 0.1.0, the first real release.

This one changes behaviour, unlike the 0.0.1 pin. Full list in the release notes. The changes most likely to matter:

• Jobs are capped at 10-25 minutes instead of the GitHub default of 360
• cgl.yml, cgl-test.yml and security.yml now cancel their own superseded runs
• Coveralls became opt-out (coveralls: false) and is skipped on fork pull requests
• The CodeClimate step is gone; its API was shut down on 2025-07-18
• Release tags are validated properly - unescaped dots used to let 1x2x3 through
• Scorecard never publishes from a private repository any more
• Checkouts no longer persist git credentials into later steps

Verified first on konradmichalik/typo3-ai-mate, which exercises five of these workflows at once: 21 checks, all green.

Files: .github/workflows/cgl.yml .github/workflows/release.yml .github/workflows/scorecard.yml .github/workflows/security.yml

Generated by scripts/pin-references.sh 0.1.0 --write.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8f1234cb-aba3-4443-abde-5f20b9017fc5

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}