chore(deps): update dependency actionlint to v1.7.12 (#2030)

renovate[bot] · web-flow · commit 9e1ee4431a48 · 2026-04-22T15:48:35.000Z
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [actionlint](https://redirect.github.com/rhysd/actionlint) | patch | `1.7.10` → `1.7.12` | --- ### Release Notes <details> <summary>rhysd/actionlint (actionlint)</summary> ### [`v1.7.12`](https://redirect.github.com/rhysd/actionlint/blob/HEAD/CHANGELOG.md#v1712---2026-03-30) [Compare Source](https://redirect.github.com/rhysd/actionlint/compare/v1.7.11...v1.7.12) - Support the [`timezone` configuration in `on.schedule`](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#onschedule) with checks for IANA timezone string. See the [documentation](https://redirect.github.com/rhysd/actionlint/blob/main/docs/checks.md#check-cron-syntax-and-timezone) for more details. Note that actionlint starts to embed the timezone database in the executables from this version so the binary sizes slightly increase. ([#&#8203;641](https://redirect.github.com/rhysd/actionlint/issues/641), thanks [@&#8203;martincostello](https://redirect.github.com/martincostello)) ```yaml on: schedule: # ERROR: The timezone is not a valid IANA timezone string - cron: '*/5 * * * *' timezone: 'Asia/Somewhere' ``` - Support the [`jobs.<job_name>.environment.deployment` configuration](https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/control-deployments#using-environments-without-deployments). ([#&#8203;639](https://redirect.github.com/rhysd/actionlint/issues/639), thanks [@&#8203;springmeyer](https://redirect.github.com/springmeyer)) - Support the [`macos-26-intel` runner label](https://github.blog/changelog/2026-02-26-macos-26-is-now-generally-available-for-github-hosted-runners/). ([#&#8203;629](https://redirect.github.com/rhysd/actionlint/issues/629), thanks [@&#8203;hugovk](https://redirect.github.com/hugovk)) - Fix the [table of webhook activity types](https://redirect.github.com/rhysd/actionlint/blob/main/all_webhooks.go) are outdated by rebuilding the [script to scrape the table](https://redirect.github.com/rhysd/actionlint/tree/main/scripts/generate-webhook-events) from scratch. - Support Go 1.26 and drop the support for Go 1.24. Now supported versions are 1.25 and 1.26. - Tests are run on arm64 Windows in CI. - Update the popular actions data set to the latest. \[Changes]\[v1.7.12] <a id="v1.7.11"></a> ### [`v1.7.11`](https://redirect.github.com/rhysd/actionlint/blob/HEAD/CHANGELOG.md#v1711---2026-02-14) [Compare Source](https://redirect.github.com/rhysd/actionlint/compare/v1.7.10...v1.7.11) - Support the [`case()` function](https://docs.github.com/en/actions/reference/workflows-and-actions/expressions#case) in `${{ }}` expressions which was recently added to GitHub Actions. ([#&#8203;612](https://redirect.github.com/rhysd/actionlint/issues/612), [#&#8203;614](https://redirect.github.com/rhysd/actionlint/issues/614), thanks [@&#8203;heppu](https://redirect.github.com/heppu)) ```yaml env: # ERROR: case() requires an odd number of arguments ENVIRONMENT: |- ${{ case( github.ref == 'refs/heads/main', 'production', github.ref == 'refs/heads/staging', 'staging' ) }} ``` - Support new `macos-26-large` and `windows-2025-vs2026` runner labels. See the [GitHub's announce](https://github.blog/changelog/2026-02-05-github-actions-early-february-2026-updates/) for more details. ([#&#8203;615](https://redirect.github.com/rhysd/actionlint/issues/615), thanks [@&#8203;hugovk](https://redirect.github.com/hugovk) and [@&#8203;muzimuzhi](https://redirect.github.com/muzimuzhi)) - Enable [Artifact attestations](https://docs.github.com/en/actions/concepts/security/artifact-attestations) for the released binaries. From v1.7.11 [`gh` command](https://cli.github.com/) can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. ([#&#8203;608](https://redirect.github.com/rhysd/actionlint/issues/608), thanks [@&#8203;takaram](https://redirect.github.com/takaram)) ```console $ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11 $ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz Loaded 1 attestation from GitHub API The following policy criteria will be enforced: - Predicate type must match:................ https://slsa.dev/provenance/v1 - Source Repository Owner URI must match:... https://github.com/rhysd - Source Repository URI must match:......... https://github.com/rhysd/actionlint - Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/ - OIDC Issuer must match:................... https://token.actions.githubusercontent.com ✓ Verification succeeded! The following 1 attestation matched the policy criteria - Attestation #&#8203;1 - Build repo:..... rhysd/actionlint - Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11 - Signer repo:.... rhysd/actionlint - Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11 ``` - Report path filters with `./` because they never match anything. ([#&#8203;521](https://redirect.github.com/rhysd/actionlint/issues/521)) ```yaml on: push: paths: # ERROR: This never matches anything. `foo/bar.txt` is correct. - ./foo/bar.txt ``` - Fix comparing matrix items when an item is a super set of another item. ([#&#8203;523](https://redirect.github.com/rhysd/actionlint/issues/523), [#&#8203;613](https://redirect.github.com/rhysd/actionlint/issues/613), thanks [@&#8203;michaelgruenewald](https://redirect.github.com/michaelgruenewald)) - Fix stack overflow crash by a recursive anchor in matrix items. ([#&#8203;610](https://redirect.github.com/rhysd/actionlint/issues/610)) - Fix a unassigned variable false positive from shellcheck by disabling SC2153 rule. ([#&#8203;573](https://redirect.github.com/rhysd/actionlint/issues/573)) - Reduce the number of memory allocations on resolving anchors. - Update the popular actions data set to the latest. - Update Go dependencies to the latest. - Remove legacy Homebrew formula in rhysd/actionlint repository in favor of the [cask package](https://redirect.github.com/rhysd/actionlint/blob/main/Casks/actionlint.rb). Note that this change does not affect Homebrew's official formula. - Add a link to the release page of the version in the [playground](https://rhysd.github.io/actionlint/). \[Changes]\[v1.7.11] <a id="v1.7.10"></a> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/prometheus/client_java).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/mise.toml b/mise.toml
@@ -8,7 +8,7 @@ node = "24.15.0"
 protoc = "34.0"
 
 # Linters
-actionlint = "1.7.10"
+actionlint = "1.7.12"
 "cargo:xmloxide" = "0.4.1"
 editorconfig-checker = "v3.6.1"
 "github:grafana/flint" = "0.20.3"
