Version updated for https://github.com/vishkaty/spck-conformance-action to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action adds a behavioral UCP conformance gate to your CI pipeline. It runs the spck-conformance suite against your UCP merchant server, checking for MUST deviations and ensuring compliance. The action supports both server and agent-side modes, allowing you to verify shopping agent functionality. It outputs JUnit reports with spec citations for any deviations found during testing.

Version updated for https://github.com/yanovian/delete-old-actions to version v1.0.12. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action delete-old-actions is designed to remove old GitHub Actions runs from repositories. It solves the problem of keeping repository clean by automatically deleting runs that are older than a specified number of days or keeping a certain number of the most recent runs. The action can be configured to run as part of a schedule and supports dry-run mode for testing purposes.

Version updated for https://github.com/yanovian/open-license-auditor to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The Open License Auditor GitHub Action scans all dependencies in a repository to identify risky open source licenses and posts comments on pull requests. It supports various package managers including npm, Yarn, pnpm, pip, Poetry, and more, and flags problematic licenses as critical or warning. The action automatically detects licenses and provides detailed information about each dependency, helping teams manage their software dependencies effectively.

Version updated for https://github.com/yashchimata/judgegate to version v0.1.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary judgegate is a CI trust gate for LLM judges that measures their reliability against human labels using Cohen’s kappa and bootstrap confidence intervals. It helps teams avoid relying solely on AI judgments by verifying their accuracy and identifying noisy or unreliable judges. The action verifies a judge, asks the label budget question, stops labeling early, and validates any labels file before running.

Version updated for https://github.com/zizmorcore/zizmor-action to version v0.6.0. This action is used across all versions by 6,734 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the execution of zizmor, a security analysis tool, within GitHub Actions workflows. It helps organizations integrate comprehensive security assessments into their CI/CD pipelines to identify and remediate vulnerabilities quickly. The action supports both public and private repositories and provides options for advanced security features, such as collecting and reporting findings via GitHub’s Advanced Security integration.

Version updated for https://github.com/brohon/magento-actions to version v.58. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates various tasks for Magento and PWA-Studio CI/CD, including unit tests, static code analysis, build processes, and zero-downtime deployments. It supports different versions of Magento and uses Docker containers to manage services like MySQL and Elasticsearch. The action is designed to be integrated into a repository’s workflows, allowing users to easily set up and run automated builds and checks on their Magento projects.

Version updated for https://github.com/DailybotHQ/ai-diff-reviewer to version v1.6.2. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the AI-driven code review process for your Git diffs, providing inline comments and severity-based merge gating. It runs on every pull request and supports both CI and local coding-agent skills with shared configuration files for seamless integration.

Version updated for https://github.com/DNSZLSK/muad-dib to version v2.11.170. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary MUAD’DIB is a free supply-chain scanner for npm and PyPI that detects known malicious packages, install-time RCE, credential-then-exfiltration flows, obfuscated payloads, binary droppers, and other suspicious behavioral patterns. It combines parallel scanning, deobfuscation, inter-module analysis, compound scoring, and a sandbox environment to provide comprehensive detection capabilities without telemetry.

Version updated for https://github.com/Does-QA/action to version v1.1.39. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action triggers a test run in DoesQA and waits for it to complete. It automates CI/CD testing by providing input parameters for key data such as API keys, account IDs, and tags, and outputs the final status and report URL of the test run. The action also supports creating Check Runs with automatic or custom labels for better integration with GitHub’s workflow system.

Version updated for https://github.com/ext/npm-pkg-lint to version v5.1.12. This action is used across all versions by 37 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action, npm-pkg-lint, is an opinionated linter designed to validate NPM packages. It checks for syntactic correctness and adheres to strict guidelines, ensuring that the tarball and package.json metadata are technically valid according to specification. The action helps ensure that package metadata is clear, concise, and accurate, which is crucial for maintaining the integrity of NPM packages.