June 2, 2026
lacuna-cli
Version updated for https://github.com/Octagon-simon/lacuna to version v0.1.5.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Full Changelog: https://github.com/Octagon-simon/lacuna/compare/v1...v0.1.5
June 2, 2026
Carbon-Aware Dispatcher
Version updated for https://github.com/peterklingelhofer/carbon-aware-dispatcher to version v1.2.2.
This action is used across all versions by 1 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed v1.2.2 — Cleaner routing chart Minor refinement to the routing comparison panel from v1.2.1: removed the in-chart “avoided (dirtiest)” label. The chart is sorted by intensity, so the dirtiest zone is already obvious, and the chosen zone is still clearly marked.
June 2, 2026
pgrls — Postgres RLS linter
Version updated for https://github.com/pgrls/pgrls-action to version v1.0.3.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Marketplace copy refresh for pgrls 0.16.0 — rule count 47 → 51 rules (17 with mechanical auto-fixes).
Highlight — SEC038 (semantic anonymous-read, Z3-backed). The semantic sibling of SEC004: it uses the Z3 SMT solver to prove a read-capable policy’s USING clause is unconditionally true for an unauthenticated session, catching inverted-auth variants (e.g. NOT (auth.uid() IS NOT NULL) OR …) that pattern-matching misses. Activates with the optional pgrls[diff-z3] extra; the always-on syntactic SEC004 guards inverted-auth out of the box.
June 2, 2026
OSS Readiness Checker
Version updated for https://github.com/plainloop-jp/oss-readiness-checker-action to version v0.3.1.
This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Fixes running the action in a repository with the same name as the npm package.
June 2, 2026
XLSX Cache Doctor
Version updated for https://github.com/proompteng/bilig to version libraries-v0.145.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Libraries v0.145.0 Release type: minor Previous libraries tag: libraries-v0.144.0 Manual override: no Features feat(workpaper): add provider-backed agent evaluator (78ba66f9)
June 2, 2026
Andy — PR Handoff by Drift
Version updated for https://github.com/refactorlab/drift to version drift-static-profiler-v0.8.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed feat(chrome-extension): Andy chat assistant + Chrome Web Store publishing prep (b6359cc) feat(profiler): React finding reference links + bump 0.7.1 → 0.8.0 (019eaef) feat(profiler): React framework detector + dedicated TSX language module (33522cd) feat(profiler): import-aware resolution + changed-root priority — React flow in the graph (892210a) feat(profiler): parse .tsx with the JSX grammar + capture JSX composition edges (50cb0cb) feat(chrome-extension): add Drift Chrome extension (dff6a5d) fix(profiler): connect unrendered changed files to a hub so they render (5e1a674) feat(profiler): multi-language PR scan — show every changed file in the diff graph (15d66e9) fix(profiler): guarantee every changed file appears in the diff graph (5607e8a) chore(profiler): bump drift-static-profiler 0.7.0 → 0.7.1 (af383c5)
June 2, 2026
Remyx Outrider
Version updated for https://github.com/remyxai/outrider to version v1.2.0.
This action is used across all versions by 2 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Outrider is now on the GitHub Marketplace 🎉 Marketplace listing →
One-click install from the listing. uses: path is unchanged — existing customers on @v1 get this release with no workflow edits required.
- uses: remyxai/outrider@v1 with: interest-id: ${{ vars.REMYX_INTEREST_ID }} What’s new since v1.1.3 New inputs claude-timeout (default 900). Wall-clock budget for the Claude Code implementation pass. Default raised from 600s after large repos hit the ceiling. Bump for very large codebases, lower to cap cost. pin-arxiv. Force-select a specific arxiv_id from the candidate pool and skip the LLM selection pass. Use it for reproducible eval re-runs. Empty = normal selection (default). Robustness Brand-new interests auto-refresh. An empty recommendation pool now triggers POST /papers/recommended/refresh and polls until picks appear (up to ~150s) instead of failing the run. Day-zero interests work without a manual nudge. master-default repos supported. PR base + the commit-time sanity check now read the repo’s actual default branch via git symbolic-ref rather than hardcoding main. unvalidated pytest classification. A pytest run that can’t collect (missing repo deps on the CI runner, exit 5, ImportError during collection) is no longer reported as failed. PR body labels it ℹ️ Tests could not run in CI and points reviewers at local validation. Issues-disabled repos. When the target repo has Issues turned off (HTTP 410 on POST /issues), the orchestrator enables them via PATCH and retries once. Branch-ref safety in commit cleanup. Build-artifact prune excludes .git/ from traversal, eliminating a class of orphan-root-commit failures on branches whose names contain /. Shallow-clone-friendly pushes. Branch push is now delete-then-plain-push instead of --force, which was confusing GitHub’s PR validator into rejecting --depth 20 clones as “no history in common with main.” LFS smudge skip. GIT_LFS_SKIP_SMUDGE=1 on clone, so repos with exhausted LFS bandwidth don’t fail at checkout. The orchestrator only reads code structure and writes small text edits; pointer files are sufficient. --untracked-files=all in change detection. Files inside a brand-new directory (first-ever tests/, first-ever docs/) are now seen per-file instead of collapsed to the directory entry. Visibility Non-zero exit on claude_failed and error. Workflow step fails visibly instead of going green with no PR or Issue. Enriched selection log. $GITHUB_STEP_SUMMARY lists rejected candidates as clickable arxiv links with reasons. selection_rejected in $GITHUB_OUTPUT carries {arxiv_id, title, reason} triples. Per-run cost accumulation across all Claude passes. Pre-flight + selection + implementation + self-review token and dollar costs sum into a single line in the step summary and the cost_usd / input_tokens / output_tokens outputs. Customer signal Outrider Validate waitlist linked from the PR body. Eval-on-every-PR (paid tier, coming soon); design-partner pilot open at discussions/19. Backward compatibility All existing workflows continue to work without changes. The uses: path, every existing with: input, and every output are unchanged from v1.1.3. The two new inputs (claude-timeout, pin-arxiv) are optional with safe defaults.
June 2, 2026
Microsoft Teams Workflows Webhook Notification
Version updated for https://github.com/sideokyou/microsoft-teams-workflows-webhook-notification to version v1.0.0.
This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Changelog All notable changes to this project will be documented in this file. Format follows Keep a Changelog.
[1.0.0] - 2026-06-01 Added Initial release of MS Teams Workflow Webhook Notification action. Adaptive Card support (new Power Automate Workflow webhook format). Legacy Message Card support as fallback (card-type: message). Automatic GitHub context facts (repo, ref, actor, workflow, run number). Optional action button with HTTPS-only URL validation. SSRF prevention via Azure domain allowlist. Webhook URL masking via core.setSecret(). Input sanitization and length limits for all text fields. dry-run mode for payload verification without sending. Request timeout (10 seconds) to prevent hanging workflows.
June 2, 2026
Go Changelog Generator
Version updated for https://github.com/somaz94/go-changelog-action to version v1.0.8.
This action is used across all versions by 10 repositories. Action Type This is a Docker action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Build bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] bump actions/github-script from 8 to 9 by @dependabot[bot] bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] CI/CD use go-docker-action-ci-action@v1 (replace inline prelude) by @somaz94 add concurrency guards to recurring workflows by @somaz94 Chore add git config protection to CLAUDE.md by @somaz94 remove duplicate rules from CLAUDE.md (moved to global) by @somaz94 Documentation remove duplicate rules covered by global CLAUDE.md by @somaz94 Refactoring harden path containment, output close, and git stderr by @somaz94 Full Changelog: https://github.com/somaz94/go-changelog-action/compare/v1.0.7...v1.0.8
June 2, 2026
Go Docker CI Action
Version updated for https://github.com/somaz94/go-docker-action-ci-action to version v1.0.2.
This action is used across all versions by 2 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed CI/CD Add concurrency guards to recurring workflows (947ebd6) Documentation Update changelog (aac531a) Miscellaneous Bump alpine (#1) (f0df729) Refactoring Harden action.yml input validation and inline shell (0175af8) Full Changelog: https://github.com/somaz94/go-docker-action-ci-action/compare/v1.0.1...v1.0.2