Skip to content

Build: Bump zizmorcore/zizmor-action from 0.6.2 to 0.8.1 - #3920

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/zizmorcore/zizmor-action-0.6.3
Open

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/zizmorcore/zizmor-action-0.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps zizmorcore/zizmor-action from 0.6.2 to 0.8.1.

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.8.1

Sponsorship is appreciated!

zizmor 1.32 is now the default version used by this action.

Full release notes: zizmorcore/zizmor-action#1320

Full Changelog: zizmorcore/zizmor-action@v0.8.0...v0.8.1

v0.8.0

The action now supports prereleases.

The default has not changed, but you can pass a prerelease version of zizmor or version: prerelease to get whatever latest prerelease the action knows about.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.7.1...v0.8.0

v0.7.1

zizmor changes

Bug Fixes 🐛🔗

  • Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit

action changes

The default version of zizmor is now 1.31.1.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1

v0.7.0

Sponsorship is appreciated!

zizmor notes

Enhancements 🌱🔗

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 7, 2026

@rambleraptor rambleraptor left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we close this? Seems like a lot of changes for a dependabot PR.

@Fokko

Fokko commented Sep 24, 2026

Copy link
Copy Markdown
Contributor

@rambleraptor I tried to fix the issues on the branch itself. Still something we have to follow up on.

@Fokko

Fokko commented Sep 24, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@rambleraptor

Copy link
Copy Markdown
Collaborator

@Fokko that makes sense. I made a separate PR (#4014) with you as a co-author to move us over to Ruff. Once that happens, we should be able to do a clean rebase and have this PR work.

(We can also add in zizmor-action upgrade to the new PR or somewhere else. Was trying to keep a clean record in case we ever need to revert something)

@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of zizmorcore/zizmor-action exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@Fokko

Fokko commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@Fokko

Fokko commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

1 similar comment
@Fokko

Fokko commented Nov 7, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@Fokko

Fokko commented Nov 15, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.6.2 to 0.8.1.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@3dc1ecc...45d7276)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot changed the title Build: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 Build: Bump zizmorcore/zizmor-action from 0.6.2 to 0.8.1 Nov 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/zizmorcore/zizmor-action-0.6.3 branch from c4604c4 to 465609c Compare November 15, 2026 06:53
Fokko and others added 2 commits November 15, 2026 07:56
@Fokko
Fokko enabled auto-merge November 15, 2026 07:11

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants