build(release): UPX Linux envc binaries and trim link metadata

Use GoReleaser UPX (linux only, best+lzma), install upx-ucl in the tag release workflow, and add -buildvcs=false with empty -buildid=. Stop Dependabot auto bump PRs via open-pull-requests-limit 0. Remove stray LibreOffice lock file under docs.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/dependabot.yml

@@ -8,7 +8,7 @@ updates:
       day: monday
       time: "06:00"
       timezone: Etc/UTC
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 0
     commit-message:
       prefix: "chore(deps)"
       include: scope
@@ -29,7 +29,7 @@ updates:
       day: monday
       time: "06:00"
       timezone: Etc/UTC
-    open-pull-requests-limit: 5
+    open-pull-requests-limit: 0
     commit-message:
       prefix: "ci(actions)"
       include: scope

.github/workflows/release.yml

@@ -22,6 +22,12 @@ jobs:
           go-version: stable
           cache: true
 
+      - name: Install UPX
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y upx-ucl
+          upx --version
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:

.goreleaser.yml

@@ -25,12 +25,22 @@ builds:
         goarch: arm64
     flags:
       - -trimpath
+      - -buildvcs=false
     ldflags:
-      - -s -w
+      - -s -w -buildid=
       - -X main.version={{.Version}}
       - -X main.commit={{.Commit}}
       - -X main.date={{.Date}}
 
+# Linux only: UPX shrinks ELF; skip darwin/windows (signing / compatibility).
+# See https://goreleaser.com/customization/builds/upx/
+upx:
+  - enabled: true
+    ids: [envc]
+    goos: [linux]
+    compress: best
+    lzma: true
+
 archives:
   - id: envc
     ids: [envc]

docs/articles/.~lock.motivation.md#

@@ -1 +0,0 @@
-,ano,anoga,02.05.2026 18:15,/home/ano/.local/share/onlyoffice;