cd3b2c2bea
CI / chart (push) Successful in 2s
CI / security (push) Successful in 33s
CI / test (push) Successful in 6m36s
Release / test (push) Successful in 8s
Release / chart (push) Successful in 2s
Release / image (push) Successful in 2m31s
Release / scan-image (push) Successful in 32s
Release / binaries (push) Successful in 3m16s
gosec's G115 failed the security job on v0.50.0's first push: the box filter narrows uint64 channel sums to uint8. They cannot overflow, since a premultiplied channel never exceeds its alpha, but the conversion now goes through to8, which clamps to 16 bits first so that holds by construction rather than by argument. No behaviour change, and nothing else in the avatar work moves. Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN