fix(repo): update branch references to main

Author: alexandreteles

.github/workflows/release.yml

@@ -4,14 +4,14 @@ on:
   pull_request:
   push:
     branches:
-      - master
+      - main
 
 permissions:
   contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
   validate:
@@ -45,7 +45,7 @@ jobs:
         run: uv run --python 3.14 coveralls --service=github
 
   release:
-    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     needs: validate
     runs-on: ubuntu-latest
     permissions:
@@ -231,7 +231,7 @@ jobs:
           gh attestation verify "./$wheel_name" --repo "$GITHUB_REPOSITORY" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3
           \`\`\`
 
-          Install from Git with an immutable ref, not \`master\`. Example:
+          Install from Git with an immutable ref, not \`main\`. Example:
 
           \`\`\`bash
           pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@$RELEASE_TAG"

README.md

@@ -34,7 +34,7 @@ pip install fastapi-paseto
 ```
 
 Releases are built from GitHub Actions after a successful semantic release on
-`master`. Each release publishes the wheel and source distribution as GitHub
+`main`. Each release publishes the wheel and source distribution as GitHub
 workflow artifacts and as downloadable assets on the corresponding GitHub
 Release.
 
@@ -56,7 +56,7 @@ If there is strong demand and a solid implementation, contributions adding cooki
 
 ## Release Process
 Releases are automated with conventional commits and semantic versioning.
-Commits merged into `master` should follow the Conventional Commits format, for
+Commits merged into `main` should follow the Conventional Commits format, for
 example `feat: add denylist cache metrics` or `fix: reject malformed token
 headers`.
 
@@ -83,7 +83,7 @@ gh attestation verify ./fastapi_paseto-X.Y.Z-py3-none-any.whl --repo Raze-System
 ```
 
 If you install directly from Git, pin an immutable tag or commit hash instead
-of `master`:
+of `main`:
 
 ```bash
 pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@vX.Y.Z"

docs/contributing.md

@@ -85,7 +85,7 @@ This command generates a directory `./htmlcov/`, if you open the file `./htmlcov
 
 ## Releases
 
-Releases are automated from `master` with Conventional Commits and
+Releases are automated from `main` with Conventional Commits and
 `python-semantic-release`.
 
 Use commit messages like:

docs/supply-chain-security.md

@@ -40,7 +40,7 @@ pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto
 pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@<commit-sha>"
 ```
 
-Avoid installs from `master`. A mutable branch reference can change after you
+Avoid installs from `main`. A mutable branch reference can change after you
 install it, which makes later verification weak even if the branch tip was
 signed at the time.
 

pyproject.toml

@@ -63,7 +63,7 @@ version_toml = ["pyproject.toml:project.version"]
 version_variables = ["src/fastapi_paseto/_version.py:__version__"]
 
 [tool.semantic_release.branches.main]
-match = "master"
+match = "main"
 prerelease = false
 
 [tool.semantic_release.changelog]