July 12, 2026
Build Apache Maven Dependency
Version updated for https://github.com/sualeh/build-maven-dependency to version v1.0.9.
This action is used across all versions by 6 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed GitHub Action to Build a Maven Dependency v1.0.9 release at last commit abcce43ccf66f696fd5417516cf9449a29f32411
What’s Changed Bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in https://github.com/sualeh/build-maven-dependency/pull/1 Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/sualeh/build-maven-dependency/pull/2 New Contributors @dependabot[bot] made their first contribution in https://github.com/sualeh/build-maven-dependency/pull/1 Full Changelog: https://github.com/sualeh/build-maven-dependency/compare/v1.0.8...v1.0.9
July 12, 2026
Setup DepVault CLI
Version updated for https://github.com/suxrobGM/depvault to version cli/v1.9.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Stored credentials (~/.depvault/credentials.json) are now encrypted at rest — DPAPI on Windows, an owner-only AES-GCM key file on POSIX — instead of plaintext. You must sign in again after upgrading: plaintext credential files are no longer migrated, and the server-side session cutover requires a fresh login regardless Fix long-lived sessions dropping to the auth-error panel on a second token expiry: token refresh is now attempted once per request (not once per process) and re-reads credentials from disk first, so a rotation performed by a concurrent request or another depvault process is picked up instead of tripping the server’s replay detection. CI-token 401s are returned as-is, since CI tokens aren’t refreshable login now flows straight into the vault unlock prompt, so push/pull work without a second command logout now revokes the refresh session server-side before clearing local credentials whoami shows the auth panel when the session has expired, instead of a generic failure Fix signing in with GitHub from a CLI login link leaving the CLI polling forever — the OAuth round-trip now carries the device code back (server-side fix; no CLI upgrade needed)
July 12, 2026
MIU PR Review
Version updated for https://github.com/vanducng/miu-cr to version v0.85.3.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed miu-cr v0.85.3 AI code review for local changes and GitHub pull requests. Use it as a CLI, CI gate, or GitHub Action with your own LLM key.
Install curl -fsSL https://cr.miu.sh/install.sh | sh -s -- v0.85.3 brew install vanducng/tap/miucr go install github.com/vanducng/miu-cr/cmd/miucr@v0.85.3 GitHub Action:
July 12, 2026
MCP Test Harness
Version updated for https://github.com/vaquarkhan/mcp-test-harness to version v3.0.7.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Product website: integrations widget, features deck, visual gallery, README badge row. Website naming in user copy. All 18 PyPI packages and GHCR Docker at 3.0.7.
July 12, 2026
Vibgrate Scan
Version updated for https://github.com/vibgrate/cli to version v2026.711.2.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Vibgrate CLI 2026.711.2 Released 2026-07-11
This release of the vg command-line scanner introduces enhanced vulnerability detection and performance improvements. The documentation has also been updated for easier navigation to relevant resources.
What changed New vg scan now checks whether the vulnerable code in your dependencies is actually used, tagging findings as reachable, potentially reachable, not reached, or unknown. Improved The CLI’s public documentation now includes direct links to relevant vibgrate.com pages for easier access to full references. Performance Hosted library docs answers are now cached locally for a day, allowing for instant responses to repeat vg lib and AI-context lookups. Benchmarks Two-arm benchmark of this release against 2026.711.1, interleaved on one runner against the pinned corpus (157 metrics compared).
July 12, 2026
VICE Security Audit
Version updated for https://github.com/Webba-Creative-Technologies/vice to version v3.3.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Summary VICE 3.3.0 strengthens remote and local audits with stricter scope controls, safer probes, clearer evidence and more reliable reports.
This release keeps the existing CLI commands, runScan API, scan profiles and GitHub Action inputs compatible.
July 11, 2026
AI Plugin Scanner
Version updated for https://github.com/hashgraph-online/ai-plugin-scanner-action to version v1.2.448.
This action is used across all versions by 18 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Published automatically from https://github.com/hashgraph-online/hol-guard/tree/992e636d4bf312a3b4cdae1fc03a7ffc2eae478f with plugin-scanner 2.0.1049.
Full Changelog: https://github.com/hashgraph-online/ai-plugin-scanner-action/compare/v1.2.447...v1.2.448
July 11, 2026
HOL Codex Plugin Scanner
Version updated for https://github.com/hashgraph-online/hol-codex-plugin-scanner-action to version v1.2.448.
This action is used across all versions by 11 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Full Changelog: https://github.com/hashgraph-online/hol-codex-plugin-scanner-action/compare/v1...v1.2.448
July 11, 2026
Mirror to BitBucket GitHub Action
Version updated for https://github.com/heussd/mirror-to-bitbucket-github-action to version v3.
This action is used across all versions by 96 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Full Changelog: https://github.com/heussd/mirror-to-bitbucket-github-action/compare/v2...v3
July 11, 2026
Supply Chain Guard
Version updated for https://github.com/homeofe/supply-chain-guard to version v5.12.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed v5.12.0 (2026-07-11) Issue #54 hardening: oversized-file transparency + threat-intel indicator contract
Implements both hardening gaps tracked in issue #54 (follow-up to the merged PR #55 extraction/IOC hardening), plus the dependency maintenance merged this cycle (docker/login-action 4.4.0, vitest + @vitest/coverage-v8 4.1.10). This minor also carries PR #55’s archive-extraction and self-scan-suppression fix to npm (it landed after v5.11.1 was published).