Repository navigation
Update stale CI tool dependencies before 2.0.0 #542
Description
The open tool-currency tracker #414 reports stale CI dependencies: shfmt 3.13.1 -> 3.14.1, diff-cover 10.5.1 -> 10.6.0, and zizmor 1.29.0 -> 1.30.1 (last successful check 2026-09-28).
The operator has included RigForge bugs, security gaps and dependency updates in the 2.0.0 release scope. Update these pins on the development branch, checking the current upstream stable releases first. Refresh matching checksums, installed versions, workflow pins, documentation and tests together. Preserve scanner coverage and fail-closed security gates; a newly discovered scanner finding must be fixed, not suppressed to make an upgrade pass.
Acceptance: run the repository's required checks and security workflows with the new versions; verify the XMRig and Dependabot watchers still cover their dependency classes; report any additional stale runtime or build dependency found while checking. Link the resulting PR to this issue so its v2 milestone is copied automatically. Keep #414 as the recurring report rather than closing it as completed.
Activity
pithead-developer commentedon Sep 30, 2026
Resolved by merged PR #543, commit a509635, confirmed on develop. All eight final-head CI and Security checks passed, and independent adversarial-review passed. The PR contains the validation and watcher evidence; no hardware test was required for these CI-only changes. Recurring tracker #414 remains open; the additional Markdown tool update and watcher gap are tracked in #544.