Version updated for https://github.com/gouef/go-test-with-coverage-action to version v1.0.3. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed ChangesDiff: v1.0.2...v1.0.3 [Upgrade] actions/checkout and actions/setup-go versions [ 524280e ] (@JanGalek)[Update] Automate update contributors [ 761b00c ] (@actions-user)

Version updated for https://github.com/gouef/release-action to version v1.0.2. This action is used across all versions by 63 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed ChangesDiff: v1.0.1...v1.0.2 [Update] checkout action to version 6 [ 45f3bf5 ] (@JanGalek)[Update] Automate update contributors [ 533f304 ] (@actions-user)

Version updated for https://github.com/heronlabs/action-lambda-publish to version v3.0.12. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed [skip ci] bump v3.0.12 (0657d06) chore: update action-lambda-publish to action-tag-release-build v5.0.12 (#20) (92d9fda) [skip ci] bump v3.0.11 (d90741b) chore(deps): bump the actions group across 1 directory with 3 updates (#18) (111bfbe) [skip ci] bump v3.0.10 (6ea8ec3) Add branding icon and color to action.yml (c79ecda) [skip ci] bump v3.0.9 (ce780a2) docs: standardize README badges and add repo-specific CLAUDE.md (#17) (13f3b58) [skip ci] bump v3.0.8 (eea976e) chore: standardize action pipeline, architecture, and step names (964097b)

Version updated for https://github.com/ivoronin/openbsd-action to version v1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed First marketplace release of openbsd-action. This action runs one GitHub Actions command inside an OpenBSD VM. It downloads a pre-built OpenBSD image from ivoronin/openbsd-cloudimg releases, verifies its GitHub attestation, boots it with QEMU, syncs the workspace into /home/openbsd/work, runs your command, then syncs the workspace back even if the command exits non-zero.

Version updated for https://github.com/kurajs/pages to version v1.0.8. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Retire the sed link pre-fix: native resolution (kura >=0.0.27, docs >=0.0.50) covers every class it handled plus everything it structurally could not (anchors, ../../ escapes, subfolder docs, pruned targets, code-span link text, non-.md files), with exact-sha blob URLs and a never-guess git-tracked oracle. Verified live on rustbgpd: 132/132 docs covered, 146 oracle targets, zero dead relative links site-wide.

Version updated for https://github.com/mattybellx/Ansede to version v6.1.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed [6.1.0] — 2026-07-08 Added Taint-aware demotion engine: pattern-only findings with no taint trace are now demoted from HIGH/CRITICAL to MEDIUM at most. CWE-617/200/532 (code-quality rules) are always LOW. CWE-798 (hardcoded secrets) is exempt. _HARDCODED_DEMOTE_CWES and _NO_TRACE_DEMOTE_CWES constants in CLI post-processing pipeline Changed HIGH/CRITICAL precision: 0% → 19.1% across 43 repos Findings/file: 3.1 → 1.7 (default filter) CWE-617 (silent exceptions) severity: HIGH → LOW CWE-117 (log injection) without user input: CRITICAL → LOW CWE-89/78/1188/352/601 without taint trace: HIGH → MEDIUM Verified 43 repos scanned, 4,114 findings, 1,075 HIGH/CRIT → 205 suspected real 1 confirmed real vulnerability (CWE-601 open redirect via request.referrer) 1,249 tests pass, 0 regressions Noise gate CI: 0% HIGH/CRIT false-negative guarantee maintained

Version updated for https://github.com/msaad00/agent-bom to version v0.94.0. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed fix(docs): repair out-of-tree links breaking strict mkdocs build by @msaad00 in https://github.com/msaad00/agent-bom/pull/3632 fix(cli): unified terminal UX — sections, deduped CIS, quiet cloud by @msaad00 in https://github.com/msaad00/agent-bom/pull/3633 fix(cloud): Key Vault CIS false-PASS + least-privilege deep-scan grants by @msaad00 in https://github.com/msaad00/agent-bom/pull/3636 fix(cloud): scan Lambda deployment packages + deep-scan pre-tagged container images by @msaad00 in https://github.com/msaad00/agent-bom/pull/3634 fix(cloud): Lambda discovery on by default (no –include-lambda) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3635 ci(docs): gate PRs on mkdocs build –strict by @msaad00 in https://github.com/msaad00/agent-bom/pull/3638 feat(output): scale-ready tabbed + paginated HTML report by @msaad00 in https://github.com/msaad00/agent-bom/pull/3637 feat(ui): Storybook harness for large dashboard components by @msaad00 in https://github.com/msaad00/agent-bom/pull/3640 feat(enrich): mature the multi-provider LLM enrichment harness by @msaad00 in https://github.com/msaad00/agent-bom/pull/3639 fix(scanners): correct OSV fixed_version resolution by @msaad00 in https://github.com/msaad00/agent-bom/pull/3644 fix(output): SARIF/json finding-count parity + –reproducible timestamps + /dev/null exit by @msaad00 in https://github.com/msaad00/agent-bom/pull/3645 Part of #1469 (Phase 0: hardware-backed device identity) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3646 chore: logo + branding consistency pass by @msaad00 in https://github.com/msaad00/agent-bom/pull/3647 Part of #3499 (Iceberg catalog export) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3648 Part of #3499 (ClickHouse findings-ingest) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3650 perf(db): fix cvss filesort + O(table) origin count on hub current reads by @msaad00 in https://github.com/msaad00/agent-bom/pull/3654 Part of #3192 (drift-as-UI lens) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3649 Part of #1969 (phase 1: strict mypy for models + core API) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3655 Closes #3499 tail (Swift bare-call precision) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3656 perf(db): generic RANGE-partition maintenance + retention rollover by @msaad00 in https://github.com/msaad00/agent-bom/pull/3657 fix(rbac): resolve NO_AUTH_ROLE from env at call time (kills release-blocker CI flake) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3660 docs: canonical how-it-works + deployment matrix + editions page by @msaad00 in https://github.com/msaad00/agent-bom/pull/3668 fix(api): consistent empty-scan response shape across MCP and HTTP surfaces (CI flake) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3663 Closes #1522 (split output/html.py) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3661 perf(graph): bounded snapshot-stats, rollup orphans, deep-offset cap (Part of #3664) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3669 refactor(cli): unify scan verb, tier flags behind –help-all, dedup formats by @msaad00 in https://github.com/msaad00/agent-bom/pull/3672 fix(cis): fail-closed on per-resource permission denial across ~25 checks (Closes #3679) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3691 fix(mcp): gate ingest_external_scan as a destructive write (Closes #3681) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3692 fix(ingest): chunked reconcile_absent + pip-visible ai-enrich security floors by @msaad00 in https://github.com/msaad00/agent-bom/pull/3693 fix(cis): ERROR on partial permission denial (strict GRC coverage) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3695 fix(malicious): synthesize vuln-less malicious findings end-to-end by @msaad00 in https://github.com/msaad00/agent-bom/pull/3694 fix(audit): genesis chain verification and git-SHA range false-positive by @msaad00 in https://github.com/msaad00/agent-bom/pull/3696 feat(runtime): shield fail-closed defaults, cred redact, SSRF guard by @msaad00 in https://github.com/msaad00/agent-bom/pull/3699 feat(audit): signed chain checkpoint detects tail truncation by @msaad00 in https://github.com/msaad00/agent-bom/pull/3700 feat(identity): SCIM patch fixes, audit RBAC, session logout hardening by @msaad00 in https://github.com/msaad00/agent-bom/pull/3701 chore(dev): ‘make preflight’ to catch OpenAPI/schema drift before push by @msaad00 in https://github.com/msaad00/agent-bom/pull/3702 docs: consolidate duplicate doc clusters (stage 1 of #3703) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3704 feat(identity): auto-bind SCIM subject on API key issuance by @msaad00 in https://github.com/msaad00/agent-bom/pull/3705 feat(platform): DB-aware /readyz and firewall reload fail-closed by @msaad00 in https://github.com/msaad00/agent-bom/pull/3707 feat(cloud,runtime): full coverage and shield hardening by @msaad00 in https://github.com/msaad00/agent-bom/pull/3706 fix(config): warn on unparseable env bool/int/float values by @msaad00 in https://github.com/msaad00/agent-bom/pull/3711 feat(output): add SARIF partialFingerprints for GitHub dedup by @msaad00 in https://github.com/msaad00/agent-bom/pull/3712 docs(config): canonical env aliases and regenerated ENV_VARS (#3677) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3713 refactor(api): centralize /v1 mount on shared API router (#3666) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3715 chore(tests): group cloud tests under tests/cloud/ (#3703) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3716 fix(security): resolve CodeQL sensitive export and exception alerts by @msaad00 in https://github.com/msaad00/agent-bom/pull/3717 chore(tests): group API tests under tests/api/ (#3703) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3718 fix(security): clear CodeQL alerts and finalize MCP catalog drift (#3675) by @msaad00 in https://github.com/msaad00/agent-bom/pull/3719 docs(deploy): add README for raw Kubernetes manifests by @andres-linero in https://github.com/msaad00/agent-bom/pull/3720 docs(deploy): add README for Snowflake deployment assets by @andres-linero in https://github.com/msaad00/agent-bom/pull/3721 chore(release): prepare 0.94.0 by @msaad00 in https://github.com/msaad00/agent-bom/pull/3722 fix(accuracy): git-SHA advisory false positives + malicious packages missing from CSV by @msaad00 in https://github.com/msaad00/agent-bom/pull/3723 docs(release): fold #3723 into 0.94.0 changelog by @msaad00 in https://github.com/msaad00/agent-bom/pull/3724 Full Changelog: https://github.com/msaad00/agent-bom/compare/v0.93.5...v0.94.0

Version updated for https://github.com/nao1215/setup-atago to version v0.1.1. This action is used across all versions by 10 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s changed fix: a successful install no longer exits nonzero (the EXIT-trap cleanup referenced an out-of-scope local under set -u, failing every green run at the very end) docs: drop the “atago is unreleased” warning — atago v0.1.0 is published and this action now installs it The floating v0 tag points at this release. Verified end-to-end against the real v0.1.0 release: checksum, SLSA attestation (gh attestation verify), install, and atago version / init / run.

Version updated for https://github.com/neebs12/lambda-microvm-github-runner to version v1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. What’s Changed Full Changelog: https://github.com/neebs12/lambda-microvm-github-runner/commits/v1

Version updated for https://github.com/Nikita-Filonov/ai-review to version v0.69.0. This action is used across all versions by 8 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed azure openai (978e700) Merge pull request #99 from crow-ua/add-support-for-gpt-5-max-complete-tokens (e28ac59) renamed files (61d7b2b) bitbucket server (1bbc1d8) openai stream (da6aabb) ripgrep (ffd969f) Add support for max_completion_tokens in Azure OpenAI schemas and client for GPT-5 models (185b557) up version (e553e3c) Merge pull request #90 from crow-ua/fix-azure-devops-ai-comments (f20fdf6) Removing hidden state dependency (971ff32)