Skip to content

Bump zizmor-action to v0.6.4 - #13

Merged
SantaClaas merged 1 commit into
mainfrom
claude/bump-zizmor-action
Oct 25, 2026
Merged

SantaClaas merged 1 commit into
mainfrom
claude/bump-zizmor-action

Conversation

@SantaClaas

Copy link
Copy Markdown
Owner

Summary

Bumps zizmorcore/zizmor-action in check-workflows.yaml from v0.6.2 (3dc1ecc) to v0.6.4 (cc914d7f3750a2d13d75c7f184a1060aa0e9d482), keeping the version comment on the line above the pin.

Changes between v0.6.2 and v0.6.4 (git log v0.6.2..v0.6.4):

  • zizmor: the default version: latest now runs zizmor 1.30.1 instead of 1.29.0 (support/versions).
  • SARIF upload: the github/codeql-action/upload-sarif pin moves from v4.37.1 to v4.37.9. It's only used with advanced-security: true, so it doesn't apply here.
  • Otherwise only README, self-test and maintenance-script changes. No input or behaviour changes.

Validation

  • actionlint passes.
  • The same bump on SantaClaas/tug#7 ran green: zizmor 1.30.1 with online audits found nothing in its workflows. The Lint CI workflows run on this PR checks this repo with the new version.

🤖 Generated with Claude Code

https://claude.ai/code/session_01TZUQdX17pR2bJr9vg1nSF6


Generated by Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TZUQdX17pR2bJr9vg1nSF6
@SantaClaas
SantaClaas merged commit 1c449de into main Oct 25, 2026
2 checks passed
@SantaClaas
SantaClaas deleted the claude/bump-zizmor-action branch October 25, 2026 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants