July 5, 2026
IsReadyAI — readiness audit
Version updated for https://github.com/isreadyai/audit-action to version v1.0.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed bump actions to node24 versions (de249af) fix: marketplace-compliant description (fd40855) feat: initial action release tree (63ef75c)
July 5, 2026
NeuroLink AI
Version updated for https://github.com/juspay/neurolink to version v9.81.2.
This action is used across all versions by 10 repositories. Action Type This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed 9.81.2 (2026-07-05) Bug Fixes (mcp): do not cache error tool results (BZ-664 follow-up) (8f876dc)
July 5, 2026
Setup runner cli
Version updated for https://github.com/kjanat/runner to version v0.19.1.
This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Added runner lsp completes [tasks.overrides] entry keys with the project’s own task names (discovered from the document’s directory, same detection as the CLI), each carrying its source and description. Works both under the [tasks.overrides] header and as a dotted overrides.<task> key in [tasks]; names that aren’t bare TOML keys (e.g. build:web) insert quoted. Dotted overrides.<task> = values now complete the source-label vocabulary like their [tasks.overrides] equivalents. runner lsp key completions scaffold the value shape the field’s schema type calls for, when the client supports snippets: array fields insert pms = ["|"], string fields node = "|", others a bare tab stop; table fields continue the dotted key path (overrides.), which re-triggers completion. Clients without snippet support keep the plain name = insert. Fixed runner lsp no longer offers field completions after a dotted key (group_output. suggested the section’s whole field list; TOML reads the dot as a key path, and no section has enumerable sub-keys). Key completions also now carry an explicit text edit replacing the typed token, so a completion accepted from a stale list (e.g. left open across a backspace) substitutes the token instead of pasting after it (group_outputgroup_output =). runner lsp value completions inside an open string literal (prefer = ["ba) insert the bare word instead of a quoted one — the quotes are already typed (and auto-paired), so accepting previously produced ""bacon"". runner lsp is now comment-aware: no completions or hover at or after a # (whole-line or trailing); a # inside a string literal still isn’t treated as a comment. What’s Changed fix(lsp): dotted-key completion fixes + complete [tasks.overrides] keys with project task names by @kjanat in https://github.com/kjanat/runner/pull/85 Full Changelog: https://github.com/kjanat/runner/compare/v0.19.0...v0.19.1
July 5, 2026
conventional-semver
Version updated for https://github.com/logi-camp/conventional-semver to version v1.1.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed v1.1.0 — Prerelease Support New Features Prerelease versioning — New prerelease input to generate tags like v1.3.0-rc.1 or v1.3.0-rc.a1b2c3d. Prerelease identifier modes — numbered (auto-incrementing rc.1, rc.2, …) or sha (commit hash-based). SHA suffix control — include_sha input: auto (prerelease only), true, or false. New Outputs base_version — Base version without prerelease suffix (e.g. 1.3.0) base_version_tag — Base version tag with prefix (e.g. v1.3.0) rc_number — The prerelease identifier number or SHA Improvements Expanded test suite with dedicated prerelease test cases Improved test output formatting and helper utilities Usage - uses: Logiconamp/conventional-semver@v1.1.0 with: prerelease: rc prerelease_identifier: numbered # or sha
July 5, 2026
ReviewGate
Version updated for https://github.com/LVTD-LLC/reviewgate to version v0.1.12.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed [Docs] Add ReviewGate Agent Skills by @rasulkireev in https://github.com/LVTD-LLC/reviewgate/pull/31 Highlights Added public check-reviewgate and reviewgate-loop agent skills. Documented npx skills add LVTD-LLC/reviewgate installation. Added comment-before-resolve guidance for agent repair loops. Added CI validation for public skill frontmatter, fenced Markdown, and shell snippets. Full Changelog: https://github.com/LVTD-LLC/reviewgate/compare/v0.1.11...v0.1.12
July 5, 2026
EIS — Upload Signals
Version updated for https://github.com/machuz/eis to version v2.20.2.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Changelog 12b8647cfb0faefd02757e3e2df9f56591ccf8b8 feat(attribution): expand + configure bot/AI co-author exclusion (#330) dc19e28d53502e089ce3cd4093238cfaca7eb2f7 feat(oss-map): monthly ingest + git/git (Linus) + identity pin + per-window streaming (#328)
July 5, 2026
Sentrik Gate
Version updated for https://github.com/maxgerhardson/sentrik-community to version v1.6.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed v1.6.0 Fixes the silent Linux binary. The v1.4.0 Linux binary produced no output and exited 0 due to a missing CLI entry-point invocation in the frozen build. All platform binaries in this release are built from a dedicated entry point and verified to produce output in CI before upload.
July 5, 2026
FHIR Validator
Version updated for https://github.com/medvertical/records-fhir-validator to version validator-v0.4.2.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed npm tarball release for @records-fhir/validator@0.4.2. Synced from medvertical/records monorepo.
Install npm install @records-fhir/validator@0.4.2 What’s new in 0.4.2 Patch release for validator architecture boundaries, evidence policy, and maintainability after the 0.4.1 evidence release.
Added Added stable host and conformance package surfaces for embedding and evidence tooling, keeping repository consumers off deprecated implementation subpaths. Added dedupeIssuesWithTrace() so duplicate-suppression decisions expose the named policy rule that removed an issue. Added an explicit FHIR Schema runtime policy export that keeps the graph path evidence-only until Java/reference and dual-path gates justify promotion. Changed Hardened public-export and mirror-import architecture guards so new internal validator exports or repository imports fail fast. Split terminology remote CodeSystem budget handling out of the API client and kept the fail-open budget reason traceable. Split remote CodeSystem budget aggregation tests into focused coverage. Documentation Documented validator fallback, fail-open, fail-closed, legacy compatibility, and release-gate guardrails. Verification Verified with merged PR #252 CI, main CI, validator build, OSS boundary audit, OSS package smoke, architecture guards, focused Vitest suites, and npm publish dry-run. Matched npm tarballs @records-fhir/validator@0.4.2 — also tagged validator-v0.4.2 @records-fhir/validation-types@0.1.5 The matching GitHub Action release (if any) is published separately under tag v0.4.2 and is not auto-synced; this release covers the npm package only.
July 5, 2026
moult-action
Version updated for https://github.com/moult-rb/moult-rb to version v0.4.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Add clone_group fingerprints to duplication findings and gate contributions by @GoodPie in https://github.com/moult-rb/moult-rb/pull/8 Full Changelog: https://github.com/moult-rb/moult-rb/compare/v0.3.0...v0.4.0
July 5, 2026
Agent Security Harness
Version updated for https://github.com/msaleme/red-team-blue-team-agent-fabric to version v4.9.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Closes the honest gap flagged in Discussion #231 and named by the ACM SIGOPS ATC ‘26 analysis Free-Riding the Agentic Web (arXiv:2605.30998).
Three of that paper’s four x402 attack primitives were already covered. The fourth — denial of settlement (consume the resource while withholding or delaying finality) — is a liveness attack with a different shape than a tamper→reject differential, so it was an untested gap. This release closes it: 3-of-4 → 4-of-4.