Version updated for https://github.com/ValaFoundation/vamposer to version v0.7.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Changes From v0.7.0 to v0.7.1: [Update] meson version 0.7.1 with support github action (8ec8783) by @JanGalek [Add] example vamposer install to github action (9f72f70) by @JanGalek fixup! [Add] github action (d69d1e0) by @JanGalek fixup! [Add] github action (6ba06c3) by @JanGalek [Update] checkout action version in README example (bf7b552) by @JanGalek [Add] github action (7a4013c) by @JanGalek Full Changelog: https://github.com/ValaFoundation/vamposer/compare/v0.7.0...v0.7.1

Version updated for https://github.com/vinceAmstoutz/symfony-security-auditor to version 1.13.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed chore(deps): bump codecov/codecov-action from 5 to 7 by @dependabot in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/82 chore(deps): bump actions/cache from 5 to 6 by @dependabot in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/83 chore(deps-dev): update ergebnis/phpunit-agent-reporter requirement from ^0.3 to ^1.0 by @dependabot in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/79 ci: drop run-cancelling concurrency by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/84 ci: fix unset secret blocking mutation report by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/85 feat(command): add show-scanned option to audit:run by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/87 feat(infrastructure): source LLM pricing from symfony/models-dev catalog by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/89 ci: tighten PHPStan with stricter opt-in checks by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/92 fix(tests): drop redundant always-false coverage guard by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/94 feat(config): support when env blocks in the config schema by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/93 docs(config): use schema for editor completion by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/95 feat: add standalone executable by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/91 docs(examples): drop prompt_caching from examples by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/96 docs(extending): remaining domain ports by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/97 feat(domain): map vulnerabilities to OWASP Top 10:2025 by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/98 chore(ci): release:bump task and tag-push pin guard by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/101 feat(scan): detect committed secrets in root dotenv files by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/99 feat(pipeline): parse instead of regexes by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/104 feat(command): add junit output format by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/100 feat(scan): support API Platform by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/105 feat(pipeline): skip baselined findings before review by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/103 feat(scan): support Symfony UX Live Components by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/106 refactor(prompt): split prompt builders by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/107 fix(scan): stop –since from dropping changed dotfiles by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/108 fix(scan): match DOTALL pre-scan patterns across lines by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/109 feat(scan): detect file-upload vulnerabilities as a dedicated attacker skill by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/118 refactor(domain): extract ProjectFile type classification by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/121 fix(report): strip xml-illegal from junit output by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/110 feat(report): add GitHub Actions annotations output format by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/122 refactor(agent): extract shared structured-collection wiring for chunk/review analyzers by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/124 refactor(pipeline): make DI port defaults non-nullable by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/125 feat(domain): add CWE alongside OWASP mapping by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/127 fix(llm): match status codes as tokens in transient failure classifier by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/111 fix: retry concurrent tool conversations by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/120 fix(scan): redact unquoted secret values in inline config assignments by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/112 fix(rate-limit): reconcile each concurrent acquire against its own estimate by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/113 fix(cache): invalidate attacker cache when code-slicing configuration changes by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/114 fix(llm): clamp the rate limiter’s Retry-After pause by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/115 fix(scan): flag non-constant-time signature by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/116 fix(bundle): repair stale escalation attacker wiring by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/117 feat(scan): support Twig extensions by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/119 feat(report): mark baselined findings as suppressed in SARIF output by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/123 feat(command): add audit:diff to compare reports by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/126 test: close mutation-coverage gaps by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/128 test: raise slow-test threshold for bundle boot test to match observed duration by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/129 refactor(command): remove dead code by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/130 fix: harden audit pipeline and correct CWE/OWASP by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/131 chore(deps): bump actions/checkout from 4 to 7 by @dependabot in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/132 chore(deps): bump DavidAnson/markdownlint-cli2-action from 23 to 24 by @dependabot in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/133 fix: batch of audit-loop hardening fixes by @vinceAmstoutz in https://github.com/vinceAmstoutz/symfony-security-auditor/pull/134 Full Changelog: https://github.com/vinceAmstoutz/symfony-security-auditor/compare/1.12.0...1.13.0

Version updated for https://github.com/vivek24290/a2a-lint to version v1.1.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed First public release of a2a-lint — conformance tooling for A2A protocol agents. (Supersedes v1.1.0, whose publish pipeline was misconfigured.) Highlights CLI: a2a-lint <agent-url> --live — validates the agent card against the spec and performs live message/send (and, when the card declares streaming, message/stream SSE) round trips. CI-friendly exit codes: 0 conformant / 1 findings / 2 unreachable. GitHub Action: uses: vivek24290/a2a-lint@v1.1.1 — conformance checks on every push. Playground (Docker): inspect, grade and talk to any A2A agent interactively; shareable permalinks; SSE stream viewer; live conformance badge endpoint. a2a-watch monitor (MVP): register deployed agents, scheduled probes with uptime history, webhook alerts on down/recovered. Install pip install a2a-lint or run the playground: docker compose up --build -d → http://localhost:8090

Version updated for https://github.com/Zero-Harm-AI-LLC/promptshield to version v1.0.6. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed PromptShield AI Security v1.0.6 This release adds optional AI-mode support for zero-harm-ai-detectors while preserving the current default heuristic behavior. What’s new added ai-mode input to the GitHub Action added --ai-mode flag to the CLI PromptShield now enables AI mode by constructing AIConfig() for zero-harm-ai-detectors when requested default behavior remains unchanged: if ai-mode is not enabled, PromptShield continues to use heuristic mode improved compatibility so existing detector integrations and tests continue to work in default mode Usage GitHub Action:

Version updated for https://github.com/4itworks/livvie_code_review to version v2. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. What’s Changed v2 Release Retry empty LLM response bodies; classify retries by HTTP status Stop truncating large patches; skip oversized diffs to preserve line mapping Track failed file fetches and exclude from review Reject files exceeding per-file token budget instead of overflowing batches Remove outer pipeline concurrency wrapper to avoid double-gating Track failed batches separately and build rawFindings only from successes Add string-literal-aware JSON repair and stricter finding validation Half-open circuit breaker single-flight probe Template-literal handling in suggestion balance check Cross-file context truncation with marker token reservation Add configurable inputs: cross-file-budget, safety-margin, circuit-breaker-threshold Require node >=24

Version updated for https://github.com/datahogo/datahogo to version v0.1.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed First public release of the Data Hogo GitHub Action. Runs the open-source Data Hogo security scanner on your repository in CI — 300+ checks across JS/TS, Python, Go, Java, PHP, C#, mobile, and Supabase. Everything runs locally in your runner; nothing is uploaded. Findings are uploaded to your repository’s Security tab as SARIF.

Version updated for https://github.com/dj-pearson/MCPFold to version v1.1.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed fix(ci): resolve env-drift, docs link, and formatting failures by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/42 Benchmark: add exact per-model token counts + VS Code extension dev harness by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/43 Add E22 code-review findings epic to prd.json by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/44 fix(secrets): pass win32 keychain target out-of-band to kill PowerShell injection (S22.1) by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/45 feat(cli): terminal color + info/update management commands by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/46 feat(cli): terminal color + info/update management commands by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/47 fix(cli): adopt untouched init scaffold on import; add test --timeout by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/48 docs: add VS Code Marketplace badge to README by @dj-pearson in https://github.com/dj-pearson/MCPFold/pull/49 Version Packages by @github-actions[bot] in https://github.com/dj-pearson/MCPFold/pull/41 Full Changelog: https://github.com/dj-pearson/MCPFold/compare/v1.0.2...v1.1.0

Version updated for https://github.com/dockfixlabs/agentguard to version v0.8.1. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed Add research paper: 6,173 Security Findings in 10 AI Agent Frameworks by @dockfixlabs in https://github.com/dockfixlabs/agentguard/pull/15 Fix broken CLI + add main.py by @dockfixlabs in https://github.com/dockfixlabs/agentguard/pull/16 fix: replace circular benchmark claims with honest language by @dockfixlabs in https://github.com/dockfixlabs/agentguard/pull/17 v0.8.1: Independent Precision Validation (88%) by @dockfixlabs in https://github.com/dockfixlabs/agentguard/pull/18 Full Changelog: https://github.com/dockfixlabs/agentguard/compare/v0.7.0...v0.8.1

Version updated for https://github.com/EvoRiseKsa/EvoOM-Guard-m to version v3.3.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed v3.3.1 — close the v3.3.0 fail-open policy interactions (schema 1.7) by @EvoRiseKsa in https://github.com/EvoRiseKsa/EvoOM-Guard-m/pull/41 Full Changelog: https://github.com/EvoRiseKsa/EvoOM-Guard-m/compare/v3.3.0...v3.3.1

Version updated for https://github.com/fish-shop/install-plugin-manager to version v2.3.112. This action is used across all versions by 4 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s Changed Bump the version-updates group with 7 updates by @dependabot[bot] in https://github.com/fish-shop/install-plugin-manager/pull/382 Full Changelog: https://github.com/fish-shop/install-plugin-manager/compare/v2.3.111...v2.3.112