Version updated for https://github.com/martian56/setup-raven to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Installs the Raven toolchain (raven, rvpm) on Linux and Windows runners from the Raven GitHub releases and caches the rvpm package cache between runs. raven-version input: a release like 2.22.0, or latest (the default) cache input: caches ~/.rvpm/cache keyed on the repository’s rv.toml files raven-version output: the tag that was installed Use it with:

Version updated for https://github.com/Mic92/hestia to version v2.0.0. This action is used across all versions by 8 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. What’s Changed Usage - uses: Mic92/hestia@v2.0.0 with: version: v2.0.0 ⚠️ New cache format — one-time reset v2 introduces a new on-disk cache format, so existing cache entries from v1 will not be reused. The first runs after upgrading repopulate the cache from scratch; old data ages out automatically via GC. No action is required.

Version updated for https://github.com/misospace/pr-reviewer-action to version v2.1.0. This action is used across all versions by 3 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed chore: dead-code removal and dedup sweep by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/366 fix(forgejo): structured gh api for GitHub comments, unified sticky-comment selection by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/376 refactor(classifier): declarative rule tables for pr_kind and risk flags by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/377 fix(security): derive fork-ness once, fail closed on degraded PR metadata by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/380 fix(precheck): read prior-review metadata via JSON side-file, drop eval by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/378 refactor(ci-gate): normalize external checks once in the platform seam by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/379 test(redact): comprehensive secret-redaction coverage by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/381 docs(verdict): pin the bash/Python verdict-turn contract with equivalence tests by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/385 refactor(enrichment): extract run_enrichment core into pr_reviewer modules by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/386 ci: enforce pytest coverage gate (baseline 76%, gate 72%) by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/382 test(forgejo): unit-test _diff_positions in isolation by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/383 test(env): hard gate on cross-block env binding drift in action.yml by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/384 fix(platform): resolve platform once in the precheck; PLATFORM-aware _is_forgejo_mode by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/387 fix(mcp): correct tool-name docs, log loop outcome, resolve separator aliases by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/390 refactor(utils): consolidate env_int, DeadlineBudget, and compare summarization by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/391 ci(github-action): update action misospace/pr-reviewer-action (v2.0.0 → v2.0.5) by @its-miso[bot] in https://github.com/misospace/pr-reviewer-action/pull/392 docs(agents): replace stale saffron-lane label table with ad-hoc agent/ convention by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/393 docs(release): document versioning policy; keep pre-releases off the floating major tag by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/394 perf(native-loop): dedup verdict-turn corpus sections; collapse skipped-source boilerplate by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/395 refactor(review): unify primary/fallback/smart model calls behind call_model_tier by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/396 perf(context): parallelize advisory phases, fan out enrichment API calls, collapse repo-impact scans by @joryirving in https://github.com/misospace/pr-reviewer-action/pull/397 Full Changelog: https://github.com/misospace/pr-reviewer-action/compare/v2.0.5...v2.1.0

Version updated for https://github.com/Nox-HQ/nox to version v1.4.2. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Nox v1.4.2 (2026-07-04T12:58:01Z) Language-agnostic security scanner with first-class AI application security. Installation macOS/Linux (Homebrew) brew tap felixgeelhaar/tap brew install nox Direct Download Download the appropriate archive for your platform from the assets below. What’s Changed Changelog Bug Fixes cf5037c61c7b201a8a53976c0c05096aa089a380 fix(discovery): honor .gitignore when scanning from a git worktree (#140) (#141) Others 2ea7b7ffd9f8ab7ff6cc57842bca1cbe9589edd1 chore(deps): bump golang.org/x/net from 0.48.0 to 0.55.0 in /plugins/nox-plugin-reachability (#138) fb2e6cdd8aa6ee8adc20162aa6436d885ece0ff5 chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 in /plugins/nox-plugin-red-team (#139) Full Changelog: https://github.com/nox-hq/nox/compare/v1.4.1...v1.4.2

Version updated for https://github.com/nyaomaru/changelog-bot to version v0.6.3. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed refactor: simplify changelog run and why utilities by @nyaomaru in https://github.com/nyaomaru/changelog-bot/pull/151 test: type changelog run mocks by @nyaomaru in https://github.com/nyaomaru/changelog-bot/pull/152 Release: 0.6.3 by @github-actions[bot] in https://github.com/nyaomaru/changelog-bot/pull/153 Full Changelog: https://github.com/nyaomaru/changelog-bot/compare/v0...v0.6.3

Version updated for https://github.com/pezhik/skilltotal to version v0.25.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Changed Prompt-injection/secret precision (ruleset 26): two FPs on a real popular project (infiniflow/ragflow) closed, recall-preserving. (1) Prompt-injection phrases held in C-family value-strings — a security tool’s own pattern table (Description: "prompt injection: ignore previous instructions", "DAN (Do Anything Now) …" in a Go file) — no longer flag ST-PROMPT-INJECTION. A new code_context policy strings_and_comments_all demotes matches inside Go/JS/TS/Rust/… string literals (new IndexedFile.in_c_string machinery), opted into only by ST-PROMPT-INJECTION; every other rule still treats a credential path in a C-family string as real access. (2) A commented-out secret in a Python comment (# OAuthConfig(client_secret="…")) no longer flags ST-SECRET-EMBEDDED — the rule now uses code_context="comments". Recall preserved: a live injection in an instruction surface / prose and a real embedded secret in code still fire. New unit tests + a benign fp_go_pattern_defs fixture; FP floor and efficacy (100%/100%) stay green.

Version updated for https://github.com/python-semantic-release/publish-action to version v10.6.0. This action is used across all versions by 660 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed v10.6.0 (2026-07-04) Build System deps: Bump python-semantic-release from v10.5.3 to v10.6.0 (#101, 4f3c5d7) Detailed Changes: v10.5.3…v10.6.0

Version updated for https://github.com/quantcdn/quant-cloud-agent-tools-action to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed fix: send edgeFunctionCode per the v3 custom-tools contract (422 on every run) by @steveworley in https://github.com/quantcdn/quant-cloud-agent-tools-action/pull/17 chore(deps-dev): bump @types/node from 20.19.35 to 25.9.1 by @dependabot[bot] in https://github.com/quantcdn/quant-cloud-agent-tools-action/pull/16 New Contributors @steveworley made their first contribution in https://github.com/quantcdn/quant-cloud-agent-tools-action/pull/17 @dependabot[bot] made their first contribution in https://github.com/quantcdn/quant-cloud-agent-tools-action/pull/16 Full Changelog: https://github.com/quantcdn/quant-cloud-agent-tools-action/compare/v1...v1.1.0

Version updated for https://github.com/sipyourdrink-ltd/bernstein to version v2.14.1. This action is used across all versions by 5 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed v2.14.1 Released 2026-07-04. Security and hygiene patch. Security Log injection: user-controlled values (task ids, roles, session ids, reasons, branches, and git output) are sanitized before they reach a log entry across the task-server routes, task store, spawner, orchestrator, and retrospective paths, so a crafted value can no longer forge log lines. Task-failure/reopen/cancel/block reasons are additionally CR/LF-stripped and length-capped at the request boundary. Sensitive-data logging: the openai_agents adapter and runner no longer log request headers, body, or the resolved API key value; only the env var name is recorded. Fixes The qwen adapter passes --approval-mode yolo, the current documented qwen-code auto-approve flag, clearing the adapter contract drift. (#2197) Internal Restored the integration-test harness (server auth disabled in the fixture, all role templates created, merge-preflight guards satisfied) so the end-to-end orchestration tests pass again. (#2205) Resolved refurb idiom findings across the routes, cost, agents, and orchestration modules.

Version updated for https://github.com/sjames/syscribe to version v0.30.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed fix(find): avoid panic when doc-body cap lands mid-UTF-8-char by @sjames in https://github.com/sjames/syscribe/pull/80 fix(matrix): render covered-but-failing requirement as ▣, not ✗ by @sjames in https://github.com/sjames/syscribe/pull/81 feat(scan): LLM-scale corpus scanning — Tiers A/B/C (stats, digest, search-text, summarize, topics, clusters) by @sjames in https://github.com/sjames/syscribe/pull/82 feat: displayOrder field + W047 unrecognized-field warning by @sjames in https://github.com/sjames/syscribe/pull/83 Full Changelog: https://github.com/sjames/syscribe/compare/v0...v0.30.0