June 2, 2026
go-install
Version updated for https://github.com/reconcilerio/go-install-action to version v1.0.3.
This action is used across all versions by 3 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Use GOTOOLCHAIN for all go commands by @scothis in https://github.com/reconcilerio/go-install-action/pull/14 Full Changelog: https://github.com/reconcilerio/go-install-action/compare/v1...v1.0.3
June 2, 2026
Andy — PR Handoff by Drift
Version updated for https://github.com/refactorlab/drift to version drift-action-v0.1.24.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed feat(action): commit-driven audio on docs-only PRs + drop MP4 sibling by @ilyashusterman in https://github.com/refactorlab/drift/pull/74 Full Changelog: https://github.com/refactorlab/drift/compare/drift-action-v0.1.23...drift-action-v0.1.24
June 2, 2026
cdk-express-pipeline-github-diff
Version updated for https://github.com/rehanvdm/cdk-express-pipeline-github-diff to version v0.1.8.
This action is used across all versions by 2 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed chore: bump leftover node from 20 to 24 by @rehanvdm in https://github.com/rehanvdm/cdk-express-pipeline-github-diff/pull/53 Full Changelog: https://github.com/rehanvdm/cdk-express-pipeline-github-diff/compare/v0.1.7...v0.1.8
June 2, 2026
PolinRider Guard
Version updated for https://github.com/richkazz/Operation-PolinRider to version v0.1.4.
This action is used across all versions by ? repositories. Action Type This is a Docker action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Reduce false positives in Unicode scanner for emojis by @richkazz in https://github.com/richkazz/Operation-PolinRider/pull/14 Full Changelog: https://github.com/richkazz/Operation-PolinRider/compare/v0.1.3...v0.1.4
June 2, 2026
Droid LLM Hunter
Version updated for https://github.com/roomkangali/droid-llm-hunter to version 1.1.8.
This action is used across all versions by ? repositories. Action Type This is a Docker action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Droid LLM Hunter — Update v1.1.8 BUGFIX UPDATE: “CLI Stability, JSON Parser Fix & Documentation Restructure”
🐛 Bug Fixes [1] dlh.py — create_profile() destroys settings.yaml 🔴 CRITICAL Problem os.rename() permanently deleted settings.yaml after profile creation, causing the tool to crash on the next run. Fix Safe backup-restore flow: Backup → Run wizard → Copy to profile → Restore original. [2] dlh.py — config model silently fails for anthropic / openrouter 🟠 HIGH Problem Only 4 providers handled (ollama, gemini, groq, openai). Calling config model with anthropic or openrouter did nothing — no error, no save. Fix Replaced if/elif chain with provider_model_key dict. All 6 providers now supported with a clear error message for unknown providers. [3] dlh.py — config wizard missing anthropic / openrouter support 🟠 HIGH Problem Wizard printed “Invalid provider selected.” for anthropic and openrouter. Fix Added branches for both providers with default model prompts. Also fixed a deep merge bug — wizard now only updates the llm key, preserving analysis, rules, and other config sections. [4] dlh.py — list-rules linter error from hidden=True 🟡 MEDIUM Problem @app.command("list-rules", hidden=True) caused a VS Code linter error. hidden= is not a valid parameter in most Typer versions. Fix Removed hidden=True. Command is now visible in --help output. [5] dlh.py — scan command returns exit code 0 on failure 🟡 MEDIUM Problem On scan error, process exited with code 0. CI/CD pipelines could not detect scan failures. Fix Added raise typer.Exit(code=1) after the error log. [6] core/engine.py — JSON parse fails on nested LLM responses 🔴 CRITICAL Problem Regex \{.*?\} (non-greedy) stopped at the first } found. Nested JSON from gemini-2.5-flash was truncated and discarded silently (is_vulnerable: false). Fix Changed capture group to [\s\S]*? — captures all content between markdown fences. _extract_json_str() (brace-counting) handles the actual JSON boundary correctly. 📄 Documentation Restructure README.md was too long (619 lines) and hard to navigate on GitHub. Restructured into focused files with backlinks.
June 2, 2026
rumdl-action
Version updated for https://github.com/rvben/rumdl to version v0.2.5.
This action is used across all versions by 3 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Added lsp: resolve buffer-file links and extend hover previews (94e088a) Fixed md034: don’t flag URLs in JSX component attributes (MDX) (5ed2c5d) md013: avoid byte-slice underflow on all-emphasis lines (ad5647a) fix-utils: reject non-char-boundary ranges in validate_fix_range too (9d07c16) md072: span quoted keys fully in unsorted-key diagnostics (8aa9140) config: don’t create phantom rule entries for unconvertible values (4b21cb0) md004: guard empty marker in count_marker_prevalence too (5584c23) config: keep pyproject [tool.rumdl] with only cache=true set (774a1b3) wasm: cover AzureDevOps and MyST flavors in round-trip test (58f8d0d) config: tighten pyproject rumdl-section detection (b8a5966) config: keep pyproject [tool.rumdl] with only scalar globals (7da87d7) md078,md079: declare Unfixable to match fix() returning Err (d1d838a) config: skip unconvertible markdownlint values instead of exiting (9bfc296) md004: guard against empty list marker instead of unwrapping (a73d0bf) check: emit cross-file diagnostics in a stable path order (8eb5027) md063: preserve URLs with nested parens and image alt text (ba68a84) md057: only treat bare .com domains as external, not relative paths (a0f8a86) md046: no trailing spaces on blank lines and tighter list detection (eceb1d6) md072: preserve trailing newline and sort quoted keys by content (73f80cf) fix-utils: reject fix ranges that split UTF-8 codepoints (1ded124) md033: avoid non-char-boundary panic on multi-byte whitespace in tags (5dfbec7) Performance md037: use cached HTML-comment lookup in the warning filter (e5dcf91) lint-context: cache math byte ranges for is_in_math_context (33ff165) md057: index lines via raw_lines() instead of lines().nth() (251e8ff) md032: compare blockquote prefixes as &str without allocating (c4f37d6) lint-context: skip kramdown masking when there are no extension lines (29378b2) rules: use LazyLock regexes instead of the mutex-backed cache (f757bae) workspace: clear reverse deps via the file’s own links (f28a27d) lint-context: precompute math-block closer lookahead (be6796a) lint-context: make is_in_list_block/is_in_table_block O(1) (9dc96a4) reflow: scan is_horizontal_rule without allocating a Vec (9664d22) reflow: hoist char collection out of is_sentence_boundary (457cbad) Downloads File Platform Checksum rumdl-v0.2.5-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum rumdl-v0.2.5-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum rumdl-v0.2.5-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum rumdl-v0.2.5-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum rumdl-v0.2.5-x86_64-apple-darwin.tar.gz macOS x86_64 checksum rumdl-v0.2.5-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum rumdl-v0.2.5-x86_64-pc-windows-msvc.zip Windows x86_64 checksum Installation Using uv (Recommended) uv tool install rumdl Using pip pip install rumdl Using pipx pipx install rumdl Direct Download Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
June 2, 2026
Create Robots.txt
Version updated for https://github.com/s-thom/create-robots-txt-action to version v2.0.0.
This action is used across all versions by 5 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed v2.0.0 - 2026-06-02 Updated This action now requires Node 24 Updated dependencies
June 2, 2026
aislop Quality Gate
Version updated for https://github.com/scanaislop/aislop to version v0.10.2.
This action is used across all versions by 1 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed A patch release: safer release/CI plumbing and sharper scan consistency.
Added Suppression directives — silence an intentional finding inline: // aislop-ignore-next-line [rule...], // aislop-ignore-line [rule...], or // aislop-ignore-file [rule...]. Scope to named rules or omit to silence every rule on the line, and add a reason after --. Works in any comment syntax. Suppressed findings are dropped before scoring and reported as a count. .aislopignore — a root-level ignore file (same glob semantics as the exclude config) to keep whole paths out of every scan. aislop fix --safe — an opt-in mode restricted to behaviour-preserving fixes (unused-import removal, import merging, narrative-comment removal, formatting). Anything that deletes code or rewrites behaviour is skipped. The default fix is unchanged. Action smoke coverage across default/explicit latest, pinned npm-version, JSON, human, and node-version-override modes. Changed Coverage gate — the numeric score is now withheld when only a negligible fraction of a repo is analysable: no files in a supported language, or unsupported-language code (C, C++, C#, Swift, Kotlin, etc.) outnumbering supported files by more than three to one. --json returns score: null with scoreable: false and a coverage breakdown, and ci does not gate on a withheld score. Fixed No-downgrade guard on aislop fix -f: a dependency override that would pin a package below the installed version is skipped and reported, not applied. CVE root-cause collapse: a transitive vulnerability is attributed to the package that carries the advisory instead of emitting a near-duplicate finding for every intermediate package. Python comma imports: import os, sys is now handled per-module instead of deleting the whole line when one module is unused. Hook telemetry: aislop hook <agent> flushes its event before the process exits (bounded to 1.5s) instead of dropping it. GitHub Action exact-version pins: pins such as version: "0.10.1" run from an isolated temp directory so npm resolves the published package, not a checked-out local one. Rule catalog consistency across aislop rules, rule labels, and docs/rules.md. Empty-function detection: ai-slop/empty-function recognises normal function declarations, not only arrow stubs. Tests 1029 passing; self-scan 100/100 with zero diagnostics.
June 2, 2026
pi GitHub Action
Version updated for https://github.com/shaftoe/pi-coding-agent-action to version v2.19.0.
This action is used across all versions by 5 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed 2.19.0 - 2026-06-02 Added add loaded_tools input for selective tool loading (#218) add CI/CD awareness tools (get_ci_status / get_workflow_run_logs) (#216) add optional auto-compaction and JSONL session export (#227) add separate Cost column in comment footer (#248) Changed add auto-compaction and JSONL session export to README (#231) add PR review with existing context example to README (#234) cleanup AGENTS.md consolidate ESLint config to reduce duplication (#220) eliminate env-var coupling in library code (#242) eliminate module-level singletons and @actions/* fallbacks (#238) implement reusable Pi orchestrator library (#233) (#236) README.md: fix | char escape (#246) replace build-time constants with runtime version resolution (#244) Update AGENTS.md deps: update dependencies (#217) deps: update dependencies (#223) Fixed ensure custom models/providers are imported before Agent setup ensure newline char before debug log ensure packages are loaded correctly in the build ensure versions strings are ok stop tracking dist/ in git, prevent PRs from sneaking in dist changes update dependencies and simplify loaded_tools with SDK native tools option (#222) use correct path for packageDir use list for loaded_tools inputs
June 2, 2026
Setup UniRTM
Version updated for https://github.com/snowdreamtech/setup-unirtm to version v0.3.0.
This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed 0.3.0 (2026-06-02) Features rename version input to unirtm-version to avoid collisions (3f7d925)