zizmor found that the pinned commit was not the one the v4 comment
named; the pin is the commit of v4.39.3 and says so.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

- CodeQL analyses the workflows and the TypeScript and Vue sources with
  the security-extended queries, on every push to main, every pull
  request and once a week.
- The tests run under c8, and a job of its own uploads the lcov report
  to Codecov through OIDC, away from the job that installs packages.
- .codacy.yml leaves out what is generated and what is copied from
  Progmasoft/tazel and Progmasoft/tala.
- actionlint joins zizmor in Workflow Security.
- CI Required gathers the site job and Dependency Review, so a ruleset
  can require one check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tazel.net is the site of Tazel itself: a Nuxt 4 site generated to static
files, in en-US, de-DE, ru-RU and he-IL, light by default with a dark
theme that is kept per browser.

- Home: the release and its kind, what Tazel does, the steps from a
  project file to a program, and a sample.
- Docs: Markdown through Nuxt Content, highlighted by Shiki (Kotlin,
  shell, PowerShell, and Tala through the grammar of the compiler
  repository), with a tree of the pages on the left, the headings of
  the page on the right, and the previous and next pages below.
  Installation, a first project, and releases and support are written
  in every language; the reference (commands, project file, lockfile,
  plugins, how Tazel works) is copied from the Documents of Tazel by
  scripts/sync-docs.mjs, and a language without a page shows the
  English one with a note.
- Every page has its canonical address, hreflang alternates and a
  sitemap entry; generation fails on a link to a page that does not
  exist.

CI checks the format, the types and the language helpers, generates
the site and runs Dependency Review on pull requests.