July 5, 2026
Skilldrift — Skills Drift Monitor
Version updated for https://github.com/kpab/skilldrift to version v0.1.2.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Changelog 1ecdde4a554e5e2817954060cd83e326217bf5f6 action.yml: marketplace公開向けにname一意化とdescription短縮
July 5, 2026
invAIriant audit gate
Version updated for https://github.com/mindicator/invAIriant to version v0.2.5.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed The CLI seatbelt now uses semantic color on a real terminal — green ✓/OK, red ✗/FAILED/S0, amber S1 — so a live terminal recording reads clearly. Color is emitted only on a TTY (honoring NO_COLOR); piped and CI output stay byte-for-byte plain, so exit codes and parsed output are unaffected. Auto-published to PyPI via Trusted Publishing. No new lenses; the CLI still performs no judgment.
July 5, 2026
Totem Shield
Version updated for https://github.com/mmnto-ai/totem to version @mmnto/pack-rust-architecture@1.89.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Cohort-link bump (no direct package changes). See .changeset/config.json for the fixed-cohort definition.
July 5, 2026
DeepRabbit Code Review
Version updated for https://github.com/n0namedeveloper/DeepRabbit to version v1.2.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Minor stuctural rework of comments. Should look perfect by now.
July 5, 2026
Go Proxy Cache Updater
Version updated for https://github.com/nicholas-fedor/go-proxy-pull-action to version v1.1.14.
This action is used across all versions by 10 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed 1.1.14 (2026-07-04)
July 5, 2026
Run AER Tests
Version updated for https://github.com/octoberswimmer/aer-dist to version v1.2.8.
This publisher is shown as ‘verified’ by GitHub.
This action is used across all versions by 0 repositories.
Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Version v1.2.8
Resolve Method Calls To Methods, Not Constructors Sharing The Class Name
Maintain Map Insertion Order In Builtins So values() And keySet() See Every Entry
July 5, 2026
Next CalVer Version
Version updated for https://github.com/okaryo/calver to version v1.1.0.
This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s changed Use @actions/github and GitHub matching refs to load only tags for the resolved release date, reducing API requests in repositories with many tags. Change previous-version to report the latest matching version for the resolved date only. Full Changelog: https://github.com/okaryo/calver/compare/v1.0.0...v1.1.0
July 5, 2026
SkillTotal AI Component Security Scan
Version updated for https://github.com/pezhik/skilltotal to version v0.29.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Added skilltotal inventory --sbom — AI-BOM export. The installed-component inventory (every MCP server and skill your agent hosts reference) as a standard CycloneDX 1.6 JSON document, ready for Dependency-Track / compliance pipelines. Components carry a purl when the source is an npm:/pypi: spec and the SkillTotal scan verdict as skilltotal:* properties (host, kind, risk level/score, verdict). New pure module skilltotal.sbom. skilltotal scan --provenance — opt-in registry provenance signals. For npm: / pypi: sources: recently published (<30 days), deprecated (npm) / yanked (PyPI), no recent releases (>3 years), no repository link. Registry metadata is context about a component, not component content, so the component-only invariant holds: opt-in flag, fetched at the CLI layer (never inside the engine), and emitted only as needs_review — never findings, never the score, never the verdict. New pure module skilltotal.provenance.
July 5, 2026
PR Explainer AI
Version updated for https://github.com/rafaeltorresng/pr-explainer-action to version v1.0.2.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Patch release for PR Explainer AI.\n\n- Add a minimal success message to the PR comment\n- Keep the artifact and run link concise and readable\n- Preserve the existing v1.0.1 pipeline and compatibility fixes
July 5, 2026
MaintainerOps AI
Version updated for https://github.com/rtonf/maintainerops-ai to version v0.1.13.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Summary Adds maintainerops demo, a no-key/no-token/no-fixture CLI path that prints a real offline review packet. Demo mode is forced offline and rejects live GitHub/model options. Updates README, Marketplace notes, and external feedback docs so testers can try a packet with one npm command. Records an API-free security diff review for the demo path. Verification node dist/cli.js demo --format markdown node dist/cli.js demo --format json node dist/cli.js demo --model gpt-4o-mini fails closed node dist/cli.js demo --repo owner/repo fails closed npm run format:check git diff --check npm run verify PR #79 checks passed post-merge CodeQL passed Safety The demo command does not require OPENAI_API_KEY, GITHUB_TOKEN, repository access, or local fixture files. It does not modify GitHub state.