Repository navigation
chore(deps): Update compatible (actions) - #170
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.9.2→v2.9.3v1.4.2→v1.4.4v1.50.3→v1.51.1v4.38.2→v4.39.1v3.0.0→v3.1.0v0.5.4→v0.5.7v0.5.9v2.87.21→v2.88.0v2.88.1v0.6.4→v0.8.0Release Notes
Swatinem/rust-cache
v2.9.3Compare Source
What's Changed
New Contributors
Full Changelog: Swatinem/rust-cache@v2.9.2...v2.9.3
actions/upload-code-coverage
v1.4.4Compare Source
Fixed
v1.4.3Compare Source
Fixed
crate-ci/typos
v1.51.1Compare Source
[1.51.1] - 2026-10-06
Features
v1.51.0Compare Source
[1.51.0] - 2026-10-06
Fixes
bimapFeatures
github/codeql-action
v4.39.1Compare Source
v4.39.0Compare Source
codeql-action/analyzestep now validates that a correct argument for thecheckout_pathinput has been provided. Thecheckout_pathinput must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used bycodeql-action/init, then the CodeQL Action now produces a warning. #4148codeql-action/start-proxystep that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic ascodeql-action/init. This primarily benefits customers who are using GitHub instances other thangithub.comwhere thecodeql-action/start-proxystep may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198v4.38.3Compare Source
j178/prek-action
v3.1.0Compare Source
What's Changed
sha256input for prek downloads by @j178 in #184latest-knownfor prek versions by @j178 in #193Full Changelog: j178/prek-action@v3.0.2...v3.1.0
v3.0.2Compare Source
What's Changed
New Contributors
Full Changelog: j178/prek-action@v3.0.1...v3.0.2
v3.0.1Compare Source
What's Changed
Full Changelog: j178/prek-action@v3.0.0...v3.0.1
j178/prek (prek)
v0.5.7: 0.5.7Compare Source
Release Notes
Released on 2026-10-21.
Enhancements
Performance
Other changes
Contributors
Install prek 0.5.7
Install prebuilt binaries via shell script
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.7/prek-installer.ps1 | iex"Install prebuilt binaries via Homebrew
Download prek 0.5.7
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
You can also download the attestation from GitHub and verify against that directly:
v0.5.6: 0.5.6Compare Source
Release Notes
Released on 2026-10-19.
Enhancements
check-commit-trailers(#2885)check-signed-commit(#2725)Performance
Bug fixes
check-json(#2879)prek update(#2853)Documentation
Other changes
Contributors
Install prek 0.5.6
Install prebuilt binaries via shell script
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.6/prek-installer.ps1 | iex"Install prebuilt binaries via Homebrew
Download prek 0.5.6
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
You can also download the attestation from GitHub and verify against that directly:
v0.5.5: 0.5.5Compare Source
Release Notes
Released on 2026-10-05.
Enhancements
ppc64lewheel and binary builds (#2809)Performance
Bug fixes
core.fileModein shebang checks (#2832)trailing-whitespacecharacter sets (#2830)check-json(#2826)check-json(#2828)check-added-large-files(#2827)Documentation
Contributors
Install prek 0.5.5
Install prebuilt binaries via shell script
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.5/prek-installer.ps1 | iex"Install prebuilt binaries via Homebrew
Download prek 0.5.5
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
You can also download the attestation from GitHub and verify against that directly:
taiki-e/install-action
v2.88.0: 2.88.0Compare Source
similarity-rs. (#2017, thanks @HardMax71)v2.87.33: 2.87.33Compare Source
Update
vacuum@latestto 0.35.4.Update
uv@latestto 0.13.6.Update
trunk@latestto 0.22.1.Update
tombi@latestto 1.9.6.Update
release-plz@latestto 0.4.2.Update
mise@latestto 2026.10.21.Update
cargo-nextest@latestto 0.9.150.Update
cargo-about@latestto 0.9.3.v2.87.32: 2.87.32Compare Source
Update
wild@latestto 0.11.0.Update
vacuum@latestto 0.35.2.Update
tombi@latestto 1.9.5.Update
sccache@latestto 0.19.0.Update
release-plz@latestto 0.4.1.Update
mise@latestto 2026.10.19.Update
knope@latestto 0.23.2.Update
dprint@latestto 0.64.3.Update
cargo-vet@latestto 0.10.3.Update
cargo-sort@latestto 2.1.4.Update
cargo-binstall@latestto 1.26.1.Update
biome@latestto 2.6.3.v2.87.31: 2.87.31Compare Source
Downgrade
cargo-sort@latestto 2.1.3.Update
vacuum@latestto 0.35.0.Update
xh@latestto 0.26.3.Update
uv@latestto 0.13.5.Update
ubi@latestto 0.13.0.Update
trivy@latestto 0.76.1.Update
tombi@latestto 1.9.0.Update
release-plz@latestto 0.3.174.Update
prek@latestto 0.5.7.Update
mise@latestto 2026.10.17.Update
jaq@latestto 3.1.2.Update
espup@latestto 0.17.1.Update
cargo-zigbuild@latestto 0.24.0.Update
cargo-nextest@latestto 0.9.149.Update
biome@latestto 2.6.2.v2.87.30: 2.87.30Compare Source
Update
zizmor@latestto 1.31.1.Update
wasmtime@latestto 50.0.0.Update
vacuum@latestto 0.33.2.Update
uv@latestto 0.13.4.Update
trunk@latestto 0.22.0.Update
tombi@latestto 1.8.9.Update
syft@latestto 1.55.0.Update
release-plz@latestto 0.3.173.Update
prek@latestto 0.5.6.Update
mise@latestto 2026.10.15.Update
knope@latestto 0.23.1.Update
kingfisher@latestto 2.14.0.Update
kache@latestto 1.2.2.Update
dprint@latestto 0.64.1.Update
cosign@latestto 3.1.4.Update
cargo-crap@latestto 0.9.0.Update
cargo-binstall@latestto 1.26.0.v2.87.29: 2.87.29Compare Source
Update
zizmor@latestto 1.31.0.Update
wasmtime@latestto 49.0.3.Update
wasm-tools@latestto 1.262.0.Update
uv@latestto 0.13.1.Update
trivy@latestto 0.76.0.Update
tombi@latestto 1.8.4.Update
release-plz@latestto 0.3.172.Update
osv-scanner@latestto 2.7.0.Update
mise@latestto 2026.10.11.Update
mdbook-d2@latestto 0.3.9.Update
kingfisher@latestto 2.13.0.Update
kache@latestto 1.2.1.Update
just@latestto 1.59.0.Update
dprint@latestto 0.63.0.Update
cargo-crap@latestto 0.8.0.Update
bpf-linker@latestto 0.12.0.v2.87.28: 2.87.28Compare Source
Update
dprint@latestto 0.62.0.Update
vacuum@latestto 0.33.0.Update
uv@latestto 0.13.0.Update
tombi@latestto 1.8.1.Update
release-plz@latestto 0.3.171.Update
rclone@latestto 1.75.2.Update
mise@latestto 2026.10.7.Update
cargo-binstall@latestto 1.25.3.v2.87.27: 2.87.27Compare Source
Update
vacuum@latestto 0.32.0.Update
uv@latestto 0.12.24.Update
typos@latestto 1.51.1.Update
tombi@latestto 1.7.3.Update
syft@latestto 1.54.1.Update
release-plz@latestto 0.3.170.Update
mise@latestto 2026.10.4.Update
kingfisher@latestto 2.11.1.Update
hyperfine@latestto 2.0.0.Update
dprint@latestto 0.61.1.Update
cargo-nextest@latestto 0.9.148.Update
cargo-neat@latestto 0.6.0.Update
cargo-binstall@latestto 1.25.2.v2.87.26: 2.87.26Compare Source
Update
tombi@latestto 1.7.2.Update
prek@latestto 0.5.5.Update
mise@latestto 2026.10.3.Update
kache@latestto 1.0.0.Update
hyperfine@latestto 1.21.0.v2.87.25: 2.87.25Compare Source
Update
uv@latestto 0.12.23.Update
mise@latestto 2026.10.2.Update
kingfisher@latestto 2.10.0.Update
dprint@latestto 0.60.1.Update
cargo-semver-checks@latestto 0.51.0.Update
cargo-binstall@latestto 1.25.1.v2.87.24: 2.87.24Compare Source
Update
wasmtime@latestto 49.0.2.Update
dprint@latestto 0.59.0.Update
cargo-leptos@latestto 0.3.11.Update
cargo-insta@latestto 1.49.0.Update
cargo-binstall@latestto 1.25.0.v2.87.23: 2.87.23Compare Source
Update
wasm-tools@latestto 1.261.0.Update
uv@latestto 0.12.22.Update
trivy@latestto 0.75.0.Update
tombi@latestto 1.7.1.Update
protoc-gen-connect-openapi@latestto 0.28.0.Update
mise@latestto 2026.10.0.Update
kingfisher@latestto 2.9.1.Update
kache@latestto 0.28.1.Update
espup@latestto 0.18.0.Update
dprint@latestto 0.58.0.Update
cargo-crap@latestto 0.6.1.Update
cargo-auditable@latestto 0.7.7.Update
biome@latestto 2.5.15.Update
syft@latestto 1.54.0.v2.87.22: 2.87.22Compare Source
Update
typos@latestto 1.50.3.Update
tombi@latestto 1.5.8.Update
prek@latestto 0.5.4.Update
mise@latestto 2026.9.16.Update
kache@latestto 0.28.0.Update
gungraun-runner@latestto 0.20.0.Update
cargo-tarpaulin@latestto 0.37.5.Update
cargo-leptos@latestto 0.3.10.Update
cargo-binstall@latestto 1.24.0.zizmorcore/zizmor-action
v0.8.0Compare Source
The action now supports prereleases.
The default has not changed, but you can pass a prerelease version
of zizmor or
version: prereleaseto get whatever latestprerelease the action knows about.
What's Changed
Full Changelog: zizmorcore/zizmor-action@v0.7.1...v0.8.0
v0.7.1Compare Source
zizmor changes
Bug Fixes 🐛🔗
action changes
The default version of zizmor is now 1.31.1.
What's Changed
Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1
v0.7.0Compare Source
Sponsorship is appreciated!
zizmor notes
Enhancements 🌱🔗
The typosquat-uses audit now supports pre-commit config inputs (#2437)
The self-hosted-runner audit is now significantly more precise (#2350)
Many thanks to @ubiratansoares for proposing and implementing this enhancement!
The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)
zizmor is now aware of the image_version workflow trigger (#2397)
The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)
The cache-poisoning audit is now aware of pnpm/setup (#2409)
The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#2395)
Many thanks to @ubiratansoares for proposing and implementing this enhancement!
The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#2418)
The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#2426)
zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#2444)
Bug Fixes 🐛🔗
Fixed a class of false positives/imprecisions in adhoc-packages that caused some pnpm and yarn invocations to be misclassified as package installations (#2386)
Many thanks to @marcalexiei for implementing this improvement!
Fixed a bug where zizmor would fail to honor Git submodules and worktrees when discovering configuration files relative to a repo root (#2390)
Fixed a bug where the ref-version-mismatch audit would crash on unusually placed version comments (#2394)
Fixed a bug where zizmor would fail to handle some pre-commit inputs that use prek extensions to the language_version and default_language_version keys (#2413)
Fixed a bug where the use-trusted-publishing audit would fail to detect certain true-positive patterns inside of PowerShell blocks (#2444)
action notes
What's Changed
New Contributors
Full Changelog: zizmorcore/zizmor-action@v0.6.4...v0.7.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.