Unify release checks, fix upload credentials and add CodeRabbit

.fossa.yml

@@ -0,0 +1,11 @@
+# SPDX-FileCopyrightText: 2026 Bernard Ladenthin <bernard.ladenthin@gmail.com>
+# SPDX-License-Identifier: MIT OR Apache-2.0
+
+version: 3
+project:
+  locator: git+github.com/bernardladenthin/streambuffer
+
+# No fixed revision.branch: preserve the actual PR/main branch and commit.
+# No license overrides or scope exclusions: test and runtime findings stay visible.
+maven:
+  scope-exclude: []

.github/actions-config.json

@@ -0,0 +1,21 @@
+{
+  "$comment": "Configuration of the shared checks of bernardladenthin/actions (see its README).",
+  "templates": {
+    "sets": [
+      "common",
+      "java"
+    ],
+    "exclude": [
+      "lombok.config"
+    ]
+  },
+  "maven-versions": {
+    "poms": [
+      "pom.xml"
+    ],
+    "family": "java-maven",
+    "ignore-groups": [
+      "net.ladenthin"
+    ]
+  }
+}

.github/actions-config.json.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2026 Bernard Ladenthin <bernard.ladenthin@gmail.com>
+
+SPDX-License-Identifier: MIT OR Apache-2.0