From 615034bb14e5d240e559f941ce9769beb5e14fb0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Oct 2026 06:17:23 +0000 Subject: [PATCH] Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.4 in the github-actions group (#743) * Bump zizmorcore/zizmor-action Bumps the github-actions group with 1 update: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.4 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/3dc1ecc9bcb9e94e9b2c709687979e1298497054...cc914d7f3750a2d13d75c7f184a1060aa0e9d482) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] * Fix zizmor lints --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: bluwy --- .github/workflows/ci.yml | 2 +- .github/workflows/publish.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9b8d904..8f26d04 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,7 +32,7 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2 + uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4 with: persona: pedantic annotations: true diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 04619aa..37dd720 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -33,7 +33,7 @@ jobs: - name: Select mode id: select-mode - uses: ./select-mode + uses: $/select-mode version: name: Version @@ -62,7 +62,7 @@ jobs: - name: Create or update release pull request id: changesets - uses: ./version + uses: $/version with: github-token: ${{ steps.bot-auth.outputs.token }} script: pnpm bump @@ -92,7 +92,7 @@ jobs: permission-contents: write # to bypass branch and tag protection rules (release.ts) - name: Publish to marketplace - uses: ./publish + uses: $/publish with: github-token: ${{ steps.bot-auth.outputs.token }} script: pnpm release