Repository navigation
chore(deps): Update compatible (actions) - #88
Merged
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/compatible-(actions)
branch
from
November 1, 2026 05:02
6bc8452 to
8ec27ed
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.9.2→v2.9.3v1.4.2→v1.4.4v1.50.0→v1.51.1v4.37.9→v4.39.1v3.0.0→v3.1.0v2.87.0→v2.88.0v2.88.1v0.6.2→v0.8.0Release Notes
Swatinem/rust-cache
v2.9.3Compare Source
What's Changed
New Contributors
Full Changelog: Swatinem/rust-cache@v2.9.2...v2.9.3
actions/upload-code-coverage
v1.4.4Compare Source
Fixed
v1.4.3Compare Source
Fixed
crate-ci/typos
v1.51.1Compare Source
[1.51.1] - 2026-10-06
Features
v1.51.0Compare Source
[1.51.0] - 2026-10-06
Fixes
bimapFeatures
v1.50.3Compare Source
[1.50.3] - 2026-09-25
Fixes
v1.50.2Compare Source
[1.50.2] - 2026-09-15
Fixes
v1.50.1Compare Source
[1.50.1] - 2026-09-01
Fixes
asendin Python codegithub/codeql-action
v4.39.1Compare Source
v4.39.0Compare Source
codeql-action/analyzestep now validates that a correct argument for thecheckout_pathinput has been provided. Thecheckout_pathinput must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used bycodeql-action/init, then the CodeQL Action now produces a warning. #4148codeql-action/start-proxystep that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic ascodeql-action/init. This primarily benefits customers who are using GitHub instances other thangithub.comwhere thecodeql-action/start-proxystep may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198v4.38.3Compare Source
v4.38.2Compare Source
v4.38.1Compare Source
v4.38.0Compare Source
linux-arm64CodeQL bundle when available. #4072j178/prek-action
v3.1.0Compare Source
What's Changed
sha256input for prek downloads by @j178 in #184latest-knownfor prek versions by @j178 in #193Full Changelog: j178/prek-action@v3.0.2...v3.1.0
v3.0.2Compare Source
What's Changed
New Contributors
Full Changelog: j178/prek-action@v3.0.1...v3.0.2
v3.0.1Compare Source
What's Changed
Full Changelog: j178/prek-action@v3.0.0...v3.0.1
taiki-e/install-action
v2.88.0: 2.88.0Compare Source
similarity-rs. (#2017, thanks @HardMax71)v2.87.33: 2.87.33Compare Source
Update
vacuum@latestto 0.35.4.Update
uv@latestto 0.13.6.Update
trunk@latestto 0.22.1.Update
tombi@latestto 1.9.6.Update
release-plz@latestto 0.4.2.Update
mise@latestto 2026.10.21.Update
cargo-nextest@latestto 0.9.150.Update
cargo-about@latestto 0.9.3.v2.87.32: 2.87.32Compare Source
Update
wild@latestto 0.11.0.Update
vacuum@latestto 0.35.2.Update
tombi@latestto 1.9.5.Update
sccache@latestto 0.19.0.Update
release-plz@latestto 0.4.1.Update
mise@latestto 2026.10.19.Update
knope@latestto 0.23.2.Update
dprint@latestto 0.64.3.Update
cargo-vet@latestto 0.10.3.Update
cargo-sort@latestto 2.1.4.Update
cargo-binstall@latestto 1.26.1.Update
biome@latestto 2.6.3.v2.87.31: 2.87.31Compare Source
Downgrade
cargo-sort@latestto 2.1.3.Update
vacuum@latestto 0.35.0.Update
xh@latestto 0.26.3.Update
uv@latestto 0.13.5.Update
ubi@latestto 0.13.0.Update
trivy@latestto 0.76.1.Update
tombi@latestto 1.9.0.Update
release-plz@latestto 0.3.174.Update
prek@latestto 0.5.7.Update
mise@latestto 2026.10.17.Update
jaq@latestto 3.1.2.Update
espup@latestto 0.17.1.Update
cargo-zigbuild@latestto 0.24.0.Update
cargo-nextest@latestto 0.9.149.Update
biome@latestto 2.6.2.v2.87.30: 2.87.30Compare Source
Update
zizmor@latestto 1.31.1.Update
wasmtime@latestto 50.0.0.Update
vacuum@latestto 0.33.2.Update
uv@latestto 0.13.4.Update
trunk@latestto 0.22.0.Update
tombi@latestto 1.8.9.Update
syft@latestto 1.55.0.Update
release-plz@latestto 0.3.173.Update
prek@latestto 0.5.6.Update
mise@latestto 2026.10.15.Update
knope@latestto 0.23.1.Update
kingfisher@latestto 2.14.0.Update
kache@latestto 1.2.2.Update
dprint@latestto 0.64.1.Update
cosign@latestto 3.1.4.Update
cargo-crap@latestto 0.9.0.Update
cargo-binstall@latestto 1.26.0.v2.87.29: 2.87.29Compare Source
Update
zizmor@latestto 1.31.0.Update
wasmtime@latestto 49.0.3.Update
wasm-tools@latestto 1.262.0.Update
uv@latestto 0.13.1.Update
trivy@latestto 0.76.0.Update
tombi@latestto 1.8.4.Update
release-plz@latestto 0.3.172.Update
osv-scanner@latestto 2.7.0.Update
mise@latestto 2026.10.11.Update
mdbook-d2@latestto 0.3.9.Update
kingfisher@latestto 2.13.0.Update
kache@latestto 1.2.1.Update
just@latestto 1.59.0.Update
dprint@latestto 0.63.0.Update
cargo-crap@latestto 0.8.0.Update
bpf-linker@latestto 0.12.0.v2.87.28: 2.87.28Compare Source
Update
dprint@latestto 0.62.0.Update
vacuum@latestto 0.33.0.Update
uv@latestto 0.13.0.Update
tombi@latestto 1.8.1.Update
release-plz@latestto 0.3.171.Update
rclone@latestto 1.75.2.Update
mise@latestto 2026.10.7.Update
cargo-binstall@latestto 1.25.3.v2.87.27: 2.87.27Compare Source
Update
vacuum@latestto 0.32.0.Update
uv@latestto 0.12.24.Update
typos@latestto 1.51.1.Update
tombi@latestto 1.7.3.Update
syft@latestto 1.54.1.Update
release-plz@latestto 0.3.170.Update
mise@latestto 2026.10.4.Update
kingfisher@latestto 2.11.1.Update
hyperfine@latestto 2.0.0.Update
dprint@latestto 0.61.1.Update
cargo-nextest@latestto 0.9.148.Update
cargo-neat@latestto 0.6.0.Update
cargo-binstall@latestto 1.25.2.v2.87.26: 2.87.26Compare Source
Update
tombi@latestto 1.7.2.Update
prek@latestto 0.5.5.Update
mise@latestto 2026.10.3.Update
kache@latestto 1.0.0.Update
hyperfine@latestto 1.21.0.v2.87.25: 2.87.25Compare Source
Update
uv@latestto 0.12.23.Update
mise@latestto 2026.10.2.Update
kingfisher@latestto 2.10.0.Update
dprint@latestto 0.60.1.Update
cargo-semver-checks@latestto 0.51.0.Update
cargo-binstall@latestto 1.25.1.v2.87.24: 2.87.24Compare Source
Update
wasmtime@latestto 49.0.2.Update
dprint@latestto 0.59.0.Update
cargo-leptos@latestto 0.3.11.Update
cargo-insta@latestto 1.49.0.Update
cargo-binstall@latestto 1.25.0.v2.87.23: 2.87.23Compare Source
Update
wasm-tools@latestto 1.261.0.Update
uv@latestto 0.12.22.Update
trivy@latestto 0.75.0.Update
tombi@latestto 1.7.1.Update
protoc-gen-connect-openapi@latestto 0.28.0.Update
mise@latestto 2026.10.0.Update
kingfisher@latestto 2.9.1.Update
kache@latestto 0.28.1.Update
espup@latestto 0.18.0.Update
dprint@latestto 0.58.0.Update
cargo-crap@latestto 0.6.1.Update
cargo-auditable@latestto 0.7.7.Update
biome@latestto 2.5.15.Update
syft@latestto 1.54.0.v2.87.22: 2.87.22Compare Source
Update
typos@latestto 1.50.3.Update
tombi@latestto 1.5.8.Update
prek@latestto 0.5.4.Update
mise@latestto 2026.9.16.Update
kache@latestto 0.28.0.Update
gungraun-runner@latestto 0.20.0.Update
cargo-tarpaulin@latestto 0.37.5.Update
cargo-leptos@latestto 0.3.10.Update
cargo-binstall@latestto 1.24.0.v2.87.21: 2.87.21Compare Source
Update
wasm-bindgen@latestto 0.2.129.Update
protoc-gen-connect-openapi@latestto 0.27.3.Update
wasmtime@latestto 49.0.1.Update
uv@latestto 0.12.19.Update
mise@latestto 2026.9.13.Update
kingfisher@latestto 2.7.0.v2.87.20: 2.87.20Compare Source
Update
uv@latestto 0.12.18.Update
cargo-shear@latestto 1.14.0.v2.87.19: 2.87.19Compare Source
Update
wasmtime@latestto 49.0.0.Update
cargo-shear@latestto 1.13.5.Update
cargo-nextest@latestto 0.9.146.v2.87.18: 2.87.18Compare Source
Update
oxfmt@latestto 1.84.0.Update
mise@latestto 2026.9.12.Update
kache@latestto 0.26.3.Update
cargo-tarpaulin@latestto 0.37.4.Update
cargo-rdme@latestto 2.2.3.v2.87.17: 2.87.17Compare Source
Update
uv@latestto 0.12.17.Update
release-plz@latestto 0.3.169.Update
kingfisher@latestto 2.5.0.Update
kache@latestto 0.25.0.Update
git-cliff@latestto 2.14.2.Update
cargo-tarpaulin@latestto 0.37.3.Update
cargo-leptos@latestto 0.3.9.v2.87.16: 2.87.16Compare Source
Update
uv@latestto 0.12.16.Update
release-plz@latestto 0.3.168.Update
protoc@latestto 3.36.2.Update
mise@latestto 2026.9.11.v2.87.15: 2.87.15Compare Source
Update
syft@latestto 1.52.0.Update
mise@latestto 2026.9.10.Update
kingfisher@latestto 2.4.0.Update
kache@latestto 0.23.1.Update
coreutils@latestto 0.12.0.Update
cargo-nextest@latestto 0.9.145.v2.87.14: 2.87.14Compare Source
Update
vacuum@latestto 0.30.6.Update
uv@latestto 0.12.15.Update
typos@latestto 1.50.2.Update
sccache@latestto 0.18.0.Update
oxfmt@latestto 1.83.0.Update
mise@latestto 2026.9.9.Update
kingfisher@latestto 2.3.0.Update
kache@latestto 0.22.0.Update
biome@latestto 2.5.14.v2.87.13: 2.87.13Compare Source
Update
zola@latestto 0.23.6.Update
vacuum@latestto 0.30.5.Update
tombi@latestto 1.5.5.Update
release-plz@latestto 0.3.167.Update
protoc-gen-connect-openapi@latestto 0.27.2.Update
prek@latestto 0.5.3.Update
osv-scanner@latestto 2.6.0.Update
mise@latestto 2026.9.7.Update
kache@latestto 0.21.0.Update
cargo-leptos@latestto 0.3.8.Update
cargo-auditable@latestto 0.7.6.v2.87.12: 2.87.12Compare Source
Update
wasmtime@latestto 48.0.2.Update
wasm-tools@latestto 1.259.0.Update
uv@latestto 0.12.13.Update
release-plz@latestto 0.3.165.Update
protoc-gen-connect-openapi@latestto 0.27.1.Update
mise@latestto 2026.9.5.Update
cargo-nextest@latestto 0.9.144.v2.87.11: 2.87.11Compare Source
Update
biome@latestto 2.5.13.Update
uv@latestto 0.12.12.Update
mise@latestto 2026.9.4.Update
kache@latestto 0.19.0.v2.87.10: 2.87.10Compare Source
Update
zizmor@latestto 1.30.1.Update
uv@latestto 0.12.11.Update
tombi@latestto 1.5.4.Update
release-plz@latestto 0.3.164.Update
mise@latestto 2026.9.3.Update
kingfisher@latestto 2.2.0.v2.87.9: 2.87.9Compare Source
Update
oxfmt@latestto 1.82.0.Update
mise@latestto 2026.9.2.Update
kache@latestto 0.18.0.Update
d2@latestto 0.9.0.Update
bpf-linker@latestto 0.11.1.v2.87.8: 2.87.8Compare Source
Update
shfmt@latestto 3.14.1.Update
release-plz@latestto 0.3.162.Update
protoc-gen-connect-openapi@latestto 0.26.0.Update
dprint@latestto 0.57.4.Update
cargo-llvm-cov@latestto 0.9.1.Update
cargo-crap@latestto 0.5.0.Update
cargo-binstall@latestto 1.23.0.v2.87.7: 2.87.7Compare Source
Update
wasm-bindgen@latestto 0.2.128.Update
uv@latestto 0.12.10.Update
tombi@latestto 1.5.2.Update
rclone@latestto 1.75.1.v2.87.6: 2.87.6Compare Source
Update
rafn@latestto 0.1.6.Update
editorconfig-checker@latestto 3.11.3.Update
dprint@latestto 0.57.1.Update
convco@latestto 0.7.2.v2.87.5: 2.87.5Compare Source
Update
vacuum@latestto 0.30.3.Update
uv@latestto 0.12.9.Update
typos@latestto 1.50.1.Update
tombi@latestto 1.5.1.Update
release-plz@latestto 0.3.161.Update
prek@latestto 0.5.2.Update
oxfmt@latestto 1.81.0.Update
mise@latestto 2026.9.1.Update
martin@latestto 1.15.0.Update
git-cliff@latestto 2.14.1.Update
cargo-zigbuild@latestto 0.23.4.Update
cargo-deb@latestto 3.8.0.Update
biome@latestto 2.5.12.v2.87.4: 2.87.4Compare Source
Update
uv@latestto 0.12.8.Update
protoc@latestto 3.36.1.Update
coreutils@latestto 0.11.0.v2.87.3: 2.87.3Compare Source
Update
zizmor@latestto 1.30.0.Update
ubi@latestto 0.12.0.Update
protoc-gen-connect-openapi@latestto 0.25.8.Update
mise@latestto 2026.8.16.Update
kingfisher@latestto 2.1.0.Update
dprint@latestto 0.57.0.v2.87.2: 2.87.2Compare Source
Update
typos@latestto 1.50.0.Update
tombi@latestto 1.5.0.Update
shfmt@latestto 3.14.0.v2.87.1: 2.87.1Compare Source
Update
uv@latestto 0.12.7.Update
typos@latestto 1.49.1.Update
syft@latestto 1.51.1.Update
prek@latestto 0.5.0.Update
d2@latestto 0.8.2.Update
cargo-zigbuild@latestto 0.23.3.Update
cargo-rdme@latestto 2.2.2.Update
biome@latestto 2.5.11.zizmorcore/zizmor-action
v0.8.0Compare Source
The action now supports prereleases.
The default has not changed, but you can pass a prerelease version
of zizmor or
version: prereleaseto get whatever latestprerelease the action knows about.
What's Changed
Full Changelog: zizmorcore/zizmor-action@v0.7.1...v0.8.0
v0.7.1Compare Source
zizmor changes
Bug Fixes 🐛🔗
action changes
The default version of zizmor is now 1.31.1.
What's Changed
Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1
v0.7.0Compare Source
Sponsorship is appreciated!
zizmor notes
Enhancements 🌱🔗
The typosquat-uses audit now supports pre-commit config inputs (#2437)
The self-hosted-runner audit is now significantly more precise (#2350)
Many thanks to @ubiratansoares for proposing and implementing this enhancement!
The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)
zizmor is now aware of the image_version workflow trigger (#2397)
The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)
The cache-poisoning audit is now aware of pnpm/setup (#2409)
The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#2395)
Many thanks to @ubiratansoares for proposing and implementing this enhancement!
The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#2418)
The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#2426)
zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#2444)
Bug Fixes 🐛🔗
Fixed a class of false positives/imprecisions in adhoc-packages that caused some pnpm and yarn invocations to be misclassified as package installations (#2386)
Many thanks to @marcalexiei for implementing this improvement!
Fixed a bug where zizmor would fail to honor Git submodules and worktrees when discovering configuration files relative to a repo root (#2390)
Fixed a bug where the ref-version-mismatch audit would crash on unusually placed version comments (#2394)
Fixed a bug where zizmor would fail to handle some pre-commit inputs that use prek extensions to the language_version and default_language_version keys (#2413)
Fixed a bug where the use-trusted-publishing audit would fail to detect certain true-positive patterns inside of PowerShell blocks (#2444)
action notes
What's Changed
New Contributors
Full Changelog: zizmorcore/zizmor-action@v0.6.4...v0.7.0
v0.6.4Compare Source
Sponsorship is appreciated!
zizmor 1.30.1 is now the default version.
Release notes: https://docs.zizmor.sh/release-notes/#1301
v0.6.3Compare Source
zizmor 1.30.0 is now the default version.
Release notes: https://docs.zizmor.sh/release-notes/#1300
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.