Skip to content

build(deps): Update Minor and Patch Updates - #34

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/minor-and-patch-updates
Aug 31, 2026
Merged

build(deps): Update Minor and Patch Updates#34
renovate[bot] merged 1 commit into
mainfrom
renovate/minor-and-patch-updates

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
ghcr.io/zizmorcore/zizmor uses-with minor 1.29.01.30.0 age confidence
node (source) minor 24.19.024.20.0 age confidence
pnpm (source) packageManager minor 11.22.011.24.0 age confidence
ruff (source, changelog) dependency-groups patch ==0.16.4==0.16.5 age confidence
zizmorcore/zizmor-action action patch v0.6.2v0.6.3 age confidence

Release Notes

zizmorcore/zizmor (ghcr.io/zizmorcore/zizmor)

v1.30.0

Compare Source

Sponsorship is appreciated!

New Features 🌈🔗

Bug Fixes 🐛🔗

  • Fixed a bug where zizmor would reject a .pre-commit-config.yml input containing a prek-specific builtin section (#​2259)

  • Fixed a bug where the unpinned-uses audit would fail to honor ignore comments within the same step scope (#​2289)

  • Fixed a bug where zizmor would reject a dependabot.yml containing a goproxy-server registry definition (#​2300)

  • Fixed a bug where zizmor would reject pre-commit configurations containing prek-specific glob patterns in files or exclude (#​2308)

  • Fixed a handful of unsound patch bugs when performing YAML add and/or replace operations (#​2295)

    Many thanks to @​dmbuil for proposing and implementing this improvement!

  • Fixed a bug where the cache-poisoning audit would incorrectly flag newer astral-sh/setup-uv versions that disable caching behavior automatically (#​2330)

  • Fixed a bug where the ref-version-mismatch audit would produce a misleading diagnostic when an action has overlapping branch and tag names (#​2337)

  • Fixed a bug where the artipacked audit would incorrectly flag the with: clauses of unrelated actions (#​2339)

  • Fixed a class of bugs where zizmor would incorrectly match an action's commit to a sibling action's tag (#​2247)

    Many thanks to @​potiuk for proposing and implementing this improvement!

  • Fixed a bug where zizmor would crash on deeply nested GitHub Actions expressions (#​2349)

nodejs/node (node)

v24.20.0: 2026-08-26, Version 24.20.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot merged commit e4e5e6d into main Aug 31, 2026
6 checks passed
@renovate
renovate Bot deleted the renovate/minor-and-patch-updates branch August 31, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants