Skip to content

Update CI configuration dependencies - #182

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/ci-configuration-dependencies
Sep 22, 2026
Merged

Update CI configuration dependencies#182
renovate[bot] merged 1 commit into
mainfrom
renovate/ci-configuration-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/deploy-pages action patch v5.0.0 → v5.0.1
alibaba/open-code-review action minor v1.10.2 → v1.12.1 v1.12.8 (+6)
astral-sh/setup-uv action minor v10.0.1 → v10.1.0 v10.2.0
github/codeql-action action minor v4.37.9 → v4.38.0 v4.38.1
zizmorcore/zizmor-action action patch v0.6.2 → v0.6.4

Release Notes

actions/deploy-pages (actions/deploy-pages)

v5.0.1

Compare Source

Changelog

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

alibaba/open-code-review (alibaba/open-code-review)

v1.12.1

Compare Source

🚀 Features

  • feat(git): validate if PATH git version is safe git (#​865)

🐛 Bug Fixes

  • fix(rules): route Python stub files to the Python review rules (#​1232)
  • fix(preview): show provider-excluded diffs (#​1223)
  • fix(opencode): support OpenCode 2.x via native tools and commands (#​1213)
  • fix(skill): align review skill with current CLI semantics (#​1225)
  • fix(llm): install the embedded BPE loader from package init (#​1228)
  • fix(actions): post findings against the reviewed commit (#​1230)

Other Changes

  • chore: remove stale alias pointing to deepseek-flash (#​1219)

Full Changelog: alibaba/open-code-review@v1.12.0...v1.12.1

v1.12.0

Compare Source

Other Changes

  • perf(grouping): return file indices instead of paths (#​1209)
  • chore: synchronize glm-5.3 to from z-ai coding plan to z ai api (#​923)

Full Changelog: alibaba/open-code-review@v1.11.9...v1.12.0

v1.11.9

Compare Source

🚀 Features

  • feat(viewer): add session compare page (#​1175)

🐛 Bug Fixes

  • fix(llm): add deepseek-flash model (#​1210)
  • fix(agent): make --preview apply the same selection the review applies (#​801)

Full Changelog: alibaba/open-code-review@v1.11.8...v1.11.9

v1.11.8

Compare Source

🚀 Features

  • feat(rules): add Rego policy review support (#​1199)

🐛 Bug Fixes

  • fix(llm): request stream usage by default with extra_body override (#​822)
  • fix(scan): align preview selection with execution (#​1041)

📖 Documentation

  • docs: enforce responsible AI usage (#​1037)

Full Changelog: alibaba/open-code-review@v1.11.7...v1.11.8

v1.11.7

Compare Source

🐛 Bug Fixes

  • fix(output): write reports atomically (#​1160)
  • fix(mcp): bound the MCP shutdown phase (#​1183)
  • fix(review): exit immediately on the second signal (#​1185)
  • fix(config): support timeout_sec in config set (#​1179)

📖 Documentation

  • docs(skill): prefer --output flag over shell redirection (#​1097)

Full Changelog: alibaba/open-code-review@v1.11.6...v1.11.7

v1.11.6

Compare Source

🚀 Features

  • feat(allowlist): add OCaml/ReasonML language support (#​942) (#​951)
  • feat(action): first-class review controls (effort, max_tokens_budget, llm_reasoning_effort) and live progress (#​1154)
  • feat(viewer): number the lines inside the Existing Code block (#​1172) (#​1180)

🐛 Bug Fixes

  • fix(launcher): forward SIGINT/SIGTERM signals to child process (#​1145)
  • fix(rules): route Kotlin script files to Kotlin review rules (#​1091)

📖 Documentation

  • docs(pages): correct FAQ JSON output shape and plan-threshold cost lever (#​1190)
  • docs(pages): correct the developer guide to match the actual project (#​1182)

Other Changes

Full Changelog: alibaba/open-code-review@v1.11.5...v1.11.6

v1.11.5

Compare Source

🚀 Features

  • feat(viewer): mark comments as fixed/ignored and hide them (#​1101)

🐛 Bug Fixes

  • fix(deps): bump grpc, fast-uri and browserslist to patch high-severity advisories (#​1169)

🔧 Refactoring

  • refactor: retire per-file naming left over from grouped review (#​1168)

Full Changelog: alibaba/open-code-review@v1.11.4...v1.11.5

v1.11.4

Compare Source

🚀 Features

  • feat(tool): include arguments in failure details (#​1152)

🐛 Bug Fixes

  • fix(rules): route Objective-C++ files to Objective-C rules (#​1166)
  • fix(tool): repair serialized code_comment arguments instead of losing the batch (#​1153)

Other Changes

  • Keep repeated documentation headings independently addressable (#​1151)
  • ci: add plugin distribution contract guardrails (#​1117)

Full Changelog: alibaba/open-code-review@v1.11.3...v1.11.4

v1.11.3

Compare Source

🚀 Features

  • feat(raw): capture raw LLM traffic via SDK middleware (opt-in) (#​1109)

🐛 Bug Fixes

  • fix(tool): report tool call failures (#​1144)
  • fix(diff): propagate untracked file listing errors (#​1140)
  • fix(review): handle SIGTERM for graceful shutdown (#​1111)

Other Changes

  • chore(deps-dev): bump the vscode-dependencies group (#​1129)

Full Changelog: alibaba/open-code-review@v1.11.2...v1.11.3

v1.11.2

Compare Source

🚀 Features

  • feat(cmd, viewer): open viewer URL in default browser (#​1108)

🐛 Bug Fixes

  • fix(rules): route .cxx and .hxx files to C++ rules (#​1123)
  • fix(rules): route JavaScript module files to JS rules (#​1122)

📖 Documentation

  • docs(mcp): document remote setup with Parallel Search example (#​1107)
  • docs(zh-CN): improve branch range wording (#​1124)

Other Changes

  • build: keep node_modules out of the Go package list via a module boundary (#​1125)

Full Changelog: alibaba/open-code-review@v1.11.1...v1.11.2

v1.11.1

Compare Source

🚀 Features

  • feat(allowlist): add Pug template support (#​1114)
  • feat(grouping): skip the grouping LLM call for small change sets (#​1103)
  • feat(allowlist): add Verilog, SystemVerilog, and VHDL support (#​1050)

🐛 Bug Fixes

  • fix(security): prevent rule.json from reading arbitrary files on the review host (#​1100)
  • fix(viewer): report selected files from run manifest (#​1096)

📖 Documentation

  • docs(site): replace concurrency feature card with effort (#​1116)
  • docs(skill): correct timeout description to reflect effort-scaled group timeout (#​1110)

Other Changes

  • chore(skill): remove Prerequisites section from delegate SKILL.md (#​1098)

Full Changelog: alibaba/open-code-review@v1.11.0...v1.11.1

v1.11.0

Compare Source

🚀 Features

  • feat(allowlist): add Handlebars and Mustache support (#​1086)
  • feat(config): validate provider existence before auxiliary fields (#​1093)
  • feat(agent): include churn stats (+N/-M) in the other-changed-files list (#​1078) (#​1082)

🐛 Bug Fixes

  • fix(llm): preserve provider reasoning/thinking across assistant turns (#​1070)
  • fix(agent): scale subtask timeout linearly with effort review rounds (#​1085)
  • fix(filter): omit forced tool choice (#​1065)
  • fix(tool): support subpath and cross-platform queries in file_find (#​1075)

📖 Documentation

  • docs(ko): polish the six new Korean pages (#​1087)
  • docs(ko): complete the Korean docs locale (#​1084)
  • docs(ko): add Korean translation for the core user guide (#​1080)
  • docs(cli): align --max-tools help text with min 50 clamp (#​1077)

Full Changelog: alibaba/open-code-review@v1.10.2...v1.11.0

astral-sh/setup-uv (astral-sh/setup-uv)

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

  • On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
  • The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
  • Update default CodeQL bundle version to 2.27.0. #​4129
zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.4

Compare Source

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1301

v0.6.3

Compare Source

zizmor 1.30.0 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1300

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • On day 3 and 22 of the month (* * 3,22 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot merged commit 867b9b8 into main Sep 22, 2026
20 checks passed
@renovate
renovate Bot deleted the renovate/ci-configuration-dependencies branch September 22, 2026 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants