Version updated for zgosalvez/github-actions-report-lcov to version 4.1.20. This action is used across all versions by 561 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes What’s Changed Bump npm from 10.9.0 to 10.9.1 by @dependabot in https://github.com/zgosalvez/github-actions-report-lcov/pull/270 Bump eslint from 9.14.0 to 9.15.0 by @dependabot in https://github.com/zgosalvez/github-actions-report-lcov/pull/267 Bump @vercel/ncc from 0.38.2 to 0.38.3 by @dependabot in https://github.com/zgosalvez/github-actions-report-lcov/pull/268 Full Changelog: https://github.com/zgosalvez/github-actions-report-lcov/compare/v4...4.1.20

Version updated for houseabsolute/actions-rust-cross to version v0.0.17. This action is used across all versions by 735 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes Added support for running cargo bench or cross bench. Implemented by @RaulTrombin (Raul Victor Trombin). GH #32.

Version updated for astral-sh/setup-uv to version v4.0.0. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 4,314 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes 🚨 Breaking change 🚨 By default, the action will now fail if caching is enabled but there is nothing to upload (the uv cache directory does not exist). If you want to ignore this, set the ignore-nothing-to-cache input to true.

Version updated for oxsecurity/megalinter to version v8.3.0. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 1,365 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes What’s Changed Core Display command log (truncated to 250 chars) even when LOG_LEVEL is not DEBUG Allow to replace an ENV var value with the value of another ENV var before calling a PRE_COMMAND (helps for tflint run from GitHub Enterprise) Fix handling of git submodule paths Fixes

Version updated for yc-actions/yc-obj-storage-upload to version v2.2.0. This action is used across all versions by 19 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes What’s Changed feat: add cache-control config by @nikolaymatrosov in https://github.com/yc-actions/yc-obj-storage-upload/pull/457 Full Changelog: https://github.com/yc-actions/yc-obj-storage-upload/compare/v2.1.0...v2.2.0

Version updated for astral-sh/setup-uv to version v3.2.4. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 4,306 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes This release adds support for expanding the ~ character to the user’s home directory for the following inputs: cache-local-path tool-dir tool-bin-dir cache-dependency-glob - name: Expand the tilde character uses: astral-sh/setup-uv@v3 with: cache-local-path: "~/path/to/cache" tool-dir: "~/path/to/tool/dir" tool-bin-dir: "~/path/to/tool-bin/dir" cache-dependency-glob: "~/my-cache-buster" In order to make this work cache-dependency-glob also got support to glob files outside the working directory:

Version updated for cargo-bins/cargo-binstall to version v1.10.14. This action is used across all versions by 12 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

Version updated for gofrolist/molecule-action to version v2.7.43. This action is used across all versions by 648 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes v2.7.43 (2024-11-23) Bug Fixes deps: Bump docker/metadata-action from 5.5.1 to 5.6.1 (1ba608e) Bumps docker/metadata-action from 5.5.1 to 5.6.1. Release notes Commits updated-dependencies: dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-minor … Signed-off-by: dependabot[bot] support@github.com

Version updated for trufflesecurity/trufflehog to version v3.84.1. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 218 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes What’s Changed Remove AzureAD/microsoft-authentication-library-for-go by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/3642 Remove golang-jwt@v4 by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/3644 Detect GCP credentials in encoded JSON by @rgmz in https://github.com/trufflesecurity/trufflehog/pull/2865 fixed test failure by @kashifkhan0771 in https://github.com/trufflesecurity/trufflehog/pull/3646 [chore] - fix test by @ahrav in https://github.