Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.46. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Installation pip: pip install agent-audit-kit==v0.3.46 Docker: docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.46 GitHub Action: - uses: sattyamjjain/agent-audit-kit@v0.3.46 with: fail-on: high Supply chain rules.json — deterministic rule bundle rules.json.sha256 — trusted digest sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle) What’s Changed feat: State of MCP Security 2026 data-report harness by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/373 docs: kill public rule-count drift (221->225) + promote MCP-security data-report by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/382 chore(deps): Bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/sattyamjjain/agent-audit-kit/pull/377 chore(deps): Bump click from 8.1.8 to 8.4.2 by @dependabot[bot] in https://github.com/sattyamjjain/agent-audit-kit/pull/376 chore(deps): bump github/codeql-action to v4.36.2 (all steps together) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/383 docs: finish State of MCP Security 2026 report (launch-ready) + v0.3.42 by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/392 feat: MCP prevalence scan (664 configs) + score calibration (#23) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/393 feat(rules): pin CVE-2026-52830 bearer-token path-traversal (AAK-MCP-AUTH-PATHTRAVERSAL-001, #394) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/396 feat: MCP Server Card (SEP-1649) static scanner + prevalence crawler by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/397 feat: public OWASP coverage leaderboard (#67) + Kong Konnect MCP CVE-2026-13341 by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/405 feat(bench): reproducibility head-to-head — 20-run byte-identical finding set by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/406 fix(rules): AAK-FLOWISE-001 pin 3.1.2→3.1.3 for CVE-2026-58057 (closes #372) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/407 Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.41...v0.3.46

Version updated for https://github.com/sedlukha/snapshot-autofix-pr to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Initial public release. Composite GitHub Action that runs a visual-snapshot command which updates baselines, then opens, updates, or closes a single auto-fix pull request carrying only the changed snapshot files. Capture-agnostic — works with Playwright, Storybook, or your own script.

Version updated for https://github.com/sipyourdrink-ltd/bernstein to version v2.16.1. This action is used across all versions by 5 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed v2.16.1 Released 2026-07-06. Fixes Windows: adapter binaries installed as .cmd/.bat shims (for example Codex via nvm-windows) now spawn correctly. The worker resolves the adapter binary to its absolute path before spawning and routes resolved shims through the command interpreter on Windows, and PATHEXT is passed through the worker environment. Real executables and all POSIX spawns are unchanged. (#2287, #2290; thanks @ViteaVlaikov for the report and diagnostics)

Version updated for https://github.com/somus/pipr to version v0.2.1. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed 0.2.1 (2026-07-06) Features cli: bundle pipr setup skill (#18) (801957d) make review runs retry-safe (#21) (98dc50f)

Version updated for https://github.com/Trigv/trigv-github-action to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. What’s Changed First public release of the official Trigv GitHub Action. Send a native push notification when a workflow succeeds or fails — one step, no curl. Requirements: Trigv account, API key, Trigv for iOS on your phone.

Version updated for https://github.com/vbem/setup-hcloud to version v1.0.5. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Full Changelog: https://github.com/vbem/setup-hcloud/compare/v1.0.4...v1.0.5

Version updated for https://github.com/Vilancer/bugbit to version v1.1.1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. What’s Changed Fixed action.yml load failure — Removed invalid workflow expression from action metadata that caused Failed to load action.yml on all consumers. workflow_dispatch runtime — resolveEvent uses fetch for GitHub API instead of an unbundled @actions/github import. @v1 updated to this release.

Version updated for https://github.com/Vishisht16/Humane-Proxy to version v0.5.6. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed This release rolls up the 0.5.x bug-fix series (0.5.1-0.5.6) — the result of a full audit of the codebase against its documentation. Every fix ships with regression tests: the suite grew from 298 to 353 tests, with zero skips and zero expected failures.

Version updated for https://github.com/wgtechlabs/build-flow-action to version v0.1.9. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed [0.1.9] - 2026-07-06 Changed address review feedback in docs update readme and architecture for full primitive input passthrough clarify architecture principle for passthrough vs silent defaults (#38) expose all package-build-flow-action inputs (#35) expose all release-build-flow-action inputs (#34) expose all container-build-flow-action inputs (#33) Security fix ghcr-token fallback to github.token when unset (#37)

Version updated for https://github.com/yacchi/backlog-cli to version v0.29.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Changelog 74cc75852815ae5feb5c373f2192e1736f272ab9 feat(action): 認証情報の入力を追加しCI設定を集約 (#32)