June 3, 2026
graph-sync
Version updated for https://github.com/wordlift/graph-sync to version v6.10.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Embed resource monitor to report peak memory usage on each run by @rpanfili in https://github.com/wordlift/graph-sync/pull/4 Full Changelog: https://github.com/wordlift/graph-sync/compare/v6.9...v6.10.0
June 3, 2026
env-kit/node-settings
Version updated for https://github.com/Changsik00/node-settings to version v1.1.2.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Bug Fixes Deep freeze settings output. Object.freeze() was shallow — nested objects and arrays inside the returned settings were still mutable. The loader now applies a recursive deep freeze so the full settings tree is immutable. (closes #8) Throw on whitespace-only overrideEnvKey env var. When the override env var was set to a whitespace-only string (e.g. " "), the override was silently skipped with no indication anything was wrong. Now raises NodeSettingsError with code OVERRIDE_ENV_EMPTY at boot time. Empty string ("") continues to be silently skipped. (closes #12)
June 3, 2026
Aptu Triage
Version updated for https://github.com/clouatre-labs/aptu to version v0.8.5.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Features Security: Detect leaked GitHub App installation tokens (ghs_) – covers both the current opaque format and the new stateless JWT format rolling out in May 2026 (#1283) Refactor Edition 2024: Remove redundant ref patterns and into_owned residuals across the workspace (#1289) Tests Replace assert!(matches!()) with assert_matches! (stabilized in Rust 1.96); remove two placeholder assert!(true) tests in facade.rs (#1287) Docs Security: Update authority_url description to reflect CWE-1336 for prompt-injection patterns (#1290) Chores Toolchain: Bump Rust to 1.96.0 (#1286) CI: Use ubuntu-24.04-arm runners everywhere (#1277) Deps: Bump aptu-coder-core to 0.15.0 (#1278) Deps: Update octocrab to 0.51 (#1280) Deps: Update non-major dependencies (#1285) Deps: Update GitHub Actions (#1279, #1284) Full changelog: https://github.com/clouatre-labs/aptu/compare/v0.8.4...v0.8.5
June 3, 2026
Install .NET Tool - Report Generator
Version updated for https://github.com/codebeltnet/dotnet-tool-install-reportgenerator to version v1.0.3.
This action is used across all versions by 25 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Bump to 5.5.10 Full Changelog: https://github.com/codebeltnet/dotnet-tool-install-reportgenerator/compare/v1...v1.0.3
June 3, 2026
Solana Security Standard
Version updated for https://github.com/Copenhagen0x/solana-security-guidance to version v1.3.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Solana Security Standard — now installable everywhere.
The SOL-0XX rule set (28 Solana/Anchor bug classes drawn from real audits) now runs wherever you work, all from one source of truth:
GitHub Action — scan every PR in CI: uses: Copenhagen0x/solana-security-guidance@v1. Uploads SARIF for inline annotations + an adoption badge. CLI — npx @jelleo/solana-security-standard scan ./programs (human / JSON / SARIF output; non-zero exit gates CI). VS Code extension — inline SOL-0XX squiggles as you type, in VS Code, Cursor, and Windsurf. 100% local, no telemetry. Semgrep ruleset — semgrep --config for any Semgrep pipeline. Claude Code plugin — the original guidance file + patterns. Same 17 deterministic patterns + 28 documented rules, no logic duplicated. SOL-001 is backed by two confirmed bounty wins. Built by Jelleo — the team that finds the bugs.
June 3, 2026
Setup aimock
Version updated for https://github.com/CopilotKit/aimock to version v1.28.0.
This action is used across all versions by 151 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Update competitive matrix and migration pages by @github-actions[bot] in https://github.com/CopilotKit/aimock/pull/237 ci(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 in the minor-and-patch group by @dependabot[bot] in https://github.com/CopilotKit/aimock/pull/243 Record gpt-oss harmony tool calls + stream/recorder hardening by @jpr5 in https://github.com/CopilotKit/aimock/pull/245 Full Changelog: https://github.com/CopilotKit/aimock/compare/v1.27.3...v1.28.0
June 3, 2026
CodeForerunner Doc Check
Version updated for https://github.com/derek-palmer/codeforerunner to version v0.4.8.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed chore(release): bump to v0.4.8 (#96) (c69e48d) feat(gaps): add forerunner-gaps skill (#95) (da1207a) chore(release): bump to v0.4.7 (1596e4f) fix(installer): fix agent detection, global install, and add interactive agent selection (#93) (7ce30a3) chore(release): bump to v0.4.6 (#92) (980a74f) refactor(prompt-session): own bundle outcome behind resolve() (f9dd50b) chore(npm): declare SPDX license, add author, add SECURITY.md (0542703) refactor(installer): make Install Plan the unit of work (f06b264) chore: purge iCloud sync-conflict files and block future ones (e56432a) refactor(skill-parity): own canonical↔copies body rule in one module (c7ec8dd)
June 3, 2026
PR BUILD
Version updated for https://github.com/exo-actions/pr-action to version 1.0.15.
This action is used across all versions by 67 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Fix show-progress boolean evaluation
Use == ’true’ comparison so the string ‘false’ evaluates to a proper boolean false instead of being truthy in actions/checkout.
June 3, 2026
npm-pkg-lint
Version updated for https://github.com/ext/npm-pkg-lint to version v5.1.4.
This action is used across all versions by 35 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed 5.1.4 (2026-06-02) Bug Fixes deps: update dependency tar to v7.5.16 (b29e498)
June 3, 2026
forsakringskassan/eslint-config
Version updated for https://github.com/Forsakringskassan/eslint-config to version v15.0.6.
This action is used across all versions by 22 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed 15.0.6 (2026-06-02) Bug Fixes deps: update dependency eslint to v10.4.1 1f484c9