Merge master into V6.1

[reinkrul]

Needs to be kept up-to-date

(not sure why we have V6.1 while v6.1.x is the latest version?)

[qltysh]

❌ 13 blocking issues (13 total)

Tool	Category	Rule	Count
zizmor	Vulnerability	credential persistence through GitHub Actions artifacts	7	❌
zizmor	Vulnerability	overly broad permissions	4	❌
zizmor	Vulnerability	runtime artifacts potentially vulnerable to a cache poisoning attack	1	❌
zizmor	Vulnerability	unpinned action reference	1	❌

[qltysh]

Coverage Impact

⬇️ Merging this pull request will decrease total coverage on V6.1 by 0.03%.

Modified Files with Diff Coverage (13)

Rating	File	% Diff	Uncovered Line #s
	auth/api/iam/user.go	100.0%
	vcr/credential/util.go	100.0%
	discovery/client.go	100.0%
	vcr/api/vcr/v2/api.go	75.0%	262-263
	auth/api/iam/openid4vci.go	75.0%	141
	auth/services/selfsigned/types/types.go	100.0%
	vcr/revocation/types.go	100.0%
	vcr/issuer/sql_store.go	100.0%
	vcr/issuer/leia_store.go	77.8%	159-160
	vcr/issuer/issuer.go	89.2%	107-108, 121-122
	vcr/revocation/statuslist2021_issuer.go	95.2%	479
	vdr/didsubject/manager.go	100.0%
	vdr/didsubject/did_document.go	100.0%
	Total	90.0%

🤖 Increase coverage with AI coding...

In the `V6.1-master-merge` branch, add test coverage for this new code:

- `auth/api/iam/openid4vci.go` -- Line 141
- `vcr/api/vcr/v2/api.go` -- Line 262-263
- `vcr/issuer/issuer.go` -- Lines 107-108 and 121-122
- `vcr/issuer/leia_store.go` -- Line 159-160
- `vcr/revocation/statuslist2021_issuer.go` -- Line 479

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.