From bfe06a4d5c6e95e2701b76b3b61a46df35875b6f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Oct 2026 05:55:13 +0000 Subject: [PATCH 1/2] Bump zizmorcore/zizmor-action Bumps the github-actions group with 1 update: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.4 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/3dc1ecc9bcb9e94e9b2c709687979e1298497054...cc914d7f3750a2d13d75c7f184a1060aa0e9d482) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9b8d9043..8f26d044 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,7 +32,7 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2 + uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4 with: persona: pedantic annotations: true From 5ab6719cd7cf3e5e0a548bd99865095b5d3d95d0 Mon Sep 17 00:00:00 2001 From: bluwy Date: Fri, 2 Oct 2026 14:12:59 +0800 Subject: [PATCH 2/2] Fix zizmor lints --- .github/workflows/publish.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 04619aac..37dd720d 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -33,7 +33,7 @@ jobs: - name: Select mode id: select-mode - uses: ./select-mode + uses: $/select-mode version: name: Version @@ -62,7 +62,7 @@ jobs: - name: Create or update release pull request id: changesets - uses: ./version + uses: $/version with: github-token: ${{ steps.bot-auth.outputs.token }} script: pnpm bump @@ -92,7 +92,7 @@ jobs: permission-contents: write # to bypass branch and tag protection rules (release.ts) - name: Publish to marketplace - uses: ./publish + uses: $/publish with: github-token: ${{ steps.bot-auth.outputs.token }} script: pnpm release