Version updated for https://github.com/pezhik/skilltotal to version v0.31.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Fixed Ruleset 29 — four architectural false-positive fixes from a full audit of production reports (see RULES_CHANGELOG.md). The tandem “critical exfil” verdict was a symptom of broader engine gaps in where evidence is trusted; each class is fixed at the demotion layer so recall is preserved (efficacy + FP floors stay at 0): Example/demo/benchmark scaffolding (examples/, demo/, samples/, .env.example templates) is demoted to needs_review — it ships as illustration, not the component’s own runtime behavior. Also blocks such scaffolding from feeding ST-COMBO-EXFIL. Prompt-injection phrases inside structured-data values (.json / .yaml / .toml fixtures, scenario/eval data) are demoted — a string in a data blob is not an agent-facing instruction. MCP manifests are excluded (a tool description there is an instruction surface), so injection in mcp.json still scores. Over-broad MCP scope (ST-MCP-OVERBROAD-SCOPE) now only applies in an MCP context and ignores file-path globs (**/*.ts, .github/**) — a build-tool angular.json / greptile.json scope key is no longer misread as a permission wildcard. Net effect on audited projects: nopua high→low, ECC low/0, browser-use scaffold FP removed (real findings kept), and the tandem false “critical/malicious” collapses to medium/not-malicious.

Version updated for https://github.com/pipewell/confluence-publisher to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What changed Manifest write-back now handled by the action itself. Previously, the consuming repo’s workflow was responsible for committing updated page IDs back to confluence-manifest.yaml after new pages were created. This required a direct push to main, which broke when branch protection was enabled.

Version updated for https://github.com/rlespinasse/drawio-export-action to version v2.52.0. This action is used across all versions by 124 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed 2.52.0 (2026-07-05) Features bump actions/checkout from 6 to 7 in the dependencies group (#104) (05de7b5)

Version updated for https://github.com/sahitya1903/resume-syncer to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Refactor Overleaf parser, rename portfolio variables to external, and update docs What’s Changed Refactor Overleaf parser, rename portfolio variables to external, and update docs by @sahitya1903 in https://github.com/sahitya1903/resume-syncer/pull/1 New Contributors @sahitya1903 made their first contribution in https://github.com/sahitya1903/resume-syncer/pull/1 Full Changelog: https://github.com/sahitya1903/resume-syncer/compare/v1...v1.0.1

Version updated for https://github.com/seijikohara/docker-compose-cache-action to version v1.8.16. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed chore(deps): lock file maintenance by @renovate[bot] in https://github.com/seijikohara/docker-compose-cache-action/pull/303 Full Changelog: https://github.com/seijikohara/docker-compose-cache-action/compare/v1.8.15...v1.8.16

Version updated for https://github.com/spaceraccoon/vulnerability-spoiler-alert-action to version v1.6.0. This action is used across all versions by 3 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed refactor: diff truncation by @spaceraccoon in https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/pull/21 Full Changelog: https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/compare/v1.5.0...v1.6.0

Version updated for https://github.com/squid-protocol/gitgalaxy to version v2.3.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed This release represents a massive architectural maturation for GitGalaxy. The primary focus of v2.3.0 is the total alignment of the core parsing engine with formal, enterprise-grade DevSecOps terminology, alongside a complete overhaul of the CI/CD ingestion pipelines for air-gapped resilience and absolute data provenance.

Version updated for https://github.com/srbsa/diffgate to version v0.7.11. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed release: 0.7.11 — finding-led positioning + PR-trail study post (9f9b019) release: 0.7.10 — fix mcpb/Smithery bundle crash, MCP tool metadata (6eb9373) fix: mcpb/Smithery bundle crashed with no node_modules; add MCP tool metadata (8ed0ea0) release: 0.7.9 — per-rule path scoping + docs-prose carve-out (Backstage eval fixes) (54110d9) release: 0.7.8 — dependency-manifest goes section-aware (version bumps no longer flagged) (2f992bc) release: 0.7.7 — fix GH Marketplace action.yml rejection + MCP registry description cap (87b8fdf) fix: action.yml name collision + description over Marketplace’s 125-char cap (05227d2) fix: shorten server.json description under the MCP registry’s 100-char cap (2a4ada1) release: 0.7.6 — distribution plumbing (MCP registry, Docker/GHCR, pre-commit, GH Action, Claude plugin) (56fc4a6) release: 0.7.5, republish with updated README after 0.7.4 publish (3c778dd)

Version updated for https://github.com/starhaven-io/pinprick-action to version v0.4.1. This action is used across all versions by 7 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Updates the pinned pinprick version. Defaults to pinprick 0.20.1 (was 0.20.0 in v0.4.0), pinned for deterministic runs. pinprick 0.20.1 restores the documented checksum-verification suppression for saved shell fetches that 0.20.0 dropped: an unversioned-URL download verified against a pinned digest within the three-line window is recorded as an allowed match again, including the piped manifest form. Pipe-to-shell and latest-URL findings remain exempt. The action’s behavior, inputs, and permissions are unchanged. See the README for usage.

Version updated for https://github.com/sun-praise/pi-review-agent to version v1.3.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed Fixed Team mode now respects the model input (#16). Previously the model was registered into the LiteLLM provider but never forwarded to runReview, so every persona and the coordinator fell back to the hardcoded default deepseek-v4-flash and failed for any non-default model such as mimo-v2.5. Single mode model input also fixed: it had the same omission and would fail for non-default models because the provider only registers the user-selected model. Verification Tested end-to-end in PR #18 with team: quality:1,security:1,performance:1 and model: mimo-v2.5: all three personas plus the coordinator completed successfully and posted a review comment. New Contributors None.