uses the newly added description filter that only autlinks, and renders
backticks, bold and italics.

Signed-off-by: oppiliappan <me@oppi.li>

this sanitizer only renders a tiny subset of markdown, to be used in
inline elements like PR titles and repo descriptions etc.

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: oppiliappan <me@oppi.li>

Otherwise, when programs create files in $HOME, others that check the Git
repo's state may be sad (or at least emit warnings in response to) it
being dirty.

Signed-off-by: Winter <winter@winter.cafe>

IMO, we shouldn't make errors opt-in to actually show upon push, at least
not if/until we have a UI to show them to the user.

Signed-off-by: Winter <winter@winter.cafe>

This moves away from the old method of creating a container with some
shared volumes to one that most users would expect: any changes made
in one step will be accessible by the following steps, and not only if
they're in the workspace or `/etc/nix`. This also paves the way for a
more generic Docker image engine, as users can do things like `apt install`
without the results being blown away across steps.

Signed-off-by: Winter <winter@winter.cafe>

It's possible for SetupWorkflow to provision resources and also fail, so
this makes sense for robustness.

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: Winter <winter@winter.cafe>

Signed-off-by: Winter <winter@winter.cafe>

and fix empty-repo rendering.

Signed-off-by: oppiliappan <me@oppi.li>

From https://datatracker.ietf.org/doc/html/rfc9207#section-2.4 :

"Clients MUST [...] compare the result to the issuer identifier of the
authorization server where the authorization request was sent to. [...]
If the value does not match the expected issuer identifier, clients MUST
reject the authorization response and MUST NOT proceed with the
authorization grant."

Signed-off-by: Mike P <fentiger@mythik.co.uk>

Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>

Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>

This reverts commits 1931b62baa4452616203ccbb356da72688bc4587 and 86d0b4060de074759eff40666b90be86c244ab23.

Signed-off-by: Winter <winter@winter.cafe>

Causes too many regressions, unfortunately:

- https://discord.com/channels/1361963801993285692/1361991850327674932/1406398439830323292
- https://discord.com/channels/1361963801993285692/1361991850327674932/1406401591627747519

Ideally, our templates wouldn't be whitespace-sensitive (example #1),
but let's stop the bleeding while we figure it out.

Signed-off-by: Winter <winter@winter.cafe>