Skip to content

build(deps): bump zizmor in /tools - #823

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/tools/pip-8dfadbb855
Open

build(deps): bump zizmor in /tools#823
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/tools/pip-8dfadbb855

build(deps): bump zizmor in /tools

d46420f
Select commit
Loading
Failed to load commit list.
Kusari Inspector / Kusari Inspector succeeded Sep 3, 2026 in 31s

Security Analysis Passed

No security issues found

Details

Kusari Inspector

Kusari Analysis Results:

Proceed with these changes

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both analyses support proceeding. Dependency analysis: routine update of zizmor (a CI/dev-only tool, not part of the compiled application) from 1.26.1 to 1.29.0, with no advisories, deprecation, EOL, or license concerns, and a permissive MIT license; the low code review score reflects an upstream maintenance characteristic, not a vulnerability introduced by this bump. Code analysis found no code issues, exposed secrets, or workflow issues. Combined, there are no critical or high-risk findings; this is a low-risk, routine maintenance PR safe to merge.

Note

View full detailed analysis result for more information on the output and the checks that were run.


@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: d46420f, performed at: 2026-09-03T07:06:34Z