v11.19.3

11.19.3 (2026-08-26)

Bug Fixes

• author baseline PR as trusted user via release-please PAT (57858f4)
• correct landing page health checks and doc links (f1f0667)
• count CRITICAL package CVEs in baseline report (e20f28a)
• grant pull-requests write and always ensure baseline PR (3df982e)
• install trivy via apt in report job (e8827b1)
• land trivy baseline report via PR instead of direct push (0b2f5b2)
• only edit an OPEN baseline PR, create otherwise (cf491db)