July 11, 2026
Premature Contribution Firewall dry-run
Version updated for https://github.com/VrtxOmega/premature-contribution-firewall to version v0.1.3.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed PCF v0.1.3 adds impact-first serious candidate scouting and hardens the authority boundaries that keep automation advisory.
Highlights Added broad, read-only serious candidate scouting with explicit collection-integrity and open-PR-overlap gates. Expanded the adversarial residue corpus from 15 to 29 cases covering Unicode/control-text evasion, overlap ownership, repository-context vacuum, lane-gate omission, repro laundering, malformed MCP frames, and malformed batch inputs. Made repository context, lane persistence, repro evidence, and MCP framing fail closed when evidence is missing or malformed. Published through GitHub OIDC trusted publishing with npm provenance; no reusable npm token was required. Verification Tests: 242/242 Deterministic benchmark: 77/77 Adversarial red test: 29/29 Maintainer demo: PASS, replay stable, 0 regressions MCP smoke: PASS npm package dry run: PASS, 75 files Clean registry install: PASS for pcf and pcf-mcp Installed MCP surface: 25 tools, serious scout present, GitHub writes disabled Main verification: https://github.com/VrtxOmega/premature-contribution-firewall/actions/runs/29156257898
July 11, 2026
Diviqra Guard LLM Prompt Scanner
Version updated for https://github.com/diviqra-builds/guard-action to version v1.0.0.
This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Diviqra Guard — GitHub Action v1.0.0 Scan LLM prompts for injection attacks before deployment.
Usage - name: Guard Prompt Scan uses: diviqra-builds/guard-action@v1 with: api_key: ${{ secrets.GUARD_API_KEY }} scan_path: ./prompts/ fail_on: block What’s new Scans .txt/.json/.yaml/.yml/.md prompt files Detects prompt injection, jailbreaks, PII leakage Hindi/Hinglish/Tamil/Telugu/Kannada support Colored summary table in Actions log Configurable fail threshold (block/warn/never) LangChain, OpenAI, FastAPI integrations included Get free API key: https://guard.diviqra.com/register
July 11, 2026
DoesQA Trigger
Version updated for https://github.com/Does-QA/action to version v1.1.35.
This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Security patch: fixed 1 → 1 vulnerabilities via npm audit fix.
July 11, 2026
trimja action
Version updated for https://github.com/elliotgoodrich/trimja-action to version v1.8.0.
This action is used across all versions by 2 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed Bump undici from 6.26.0 to 6.27.0 by @dependabot[bot] in https://github.com/elliotgoodrich/trimja-action/pull/32 Improve logging by @elliotgoodrich in https://github.com/elliotgoodrich/trimja-action/pull/33 New Contributors @dependabot[bot] made their first contribution in https://github.com/elliotgoodrich/trimja-action/pull/32 Full Changelog: https://github.com/elliotgoodrich/trimja-action/compare/v1...v1.8.0
July 11, 2026
Setup Malbolge
Version updated for https://github.com/fabasoad/setup-malbolge-action to version v0.2.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/fabasoad/setup-malbolge-action/pull/16 fix: issue found by markdownlint by @fabasoad in https://github.com/fabasoad/setup-malbolge-action/pull/17 Update license copyright year to 2026 by @github-actions[bot] in https://github.com/fabasoad/setup-malbolge-action/pull/18 chore(deps): bump gitleaks from 8.30.0 to 8.30.1 by @fabasoad in https://github.com/fabasoad/setup-malbolge-action/pull/19 Full Changelog: https://github.com/fabasoad/setup-malbolge-action/compare/v0.2.0...v0.2.1
July 11, 2026
GitHub Action for Python based Firebase projects
Version updated for https://github.com/gannonk08/firebase-action-python to version v15.23.0.
This action is used across all versions by 1 repositories. Action Type This is a Docker action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Bump firebase-tools to v15.23.0
July 11, 2026
Vizb Action
Version updated for https://github.com/goptics/vizb to version v0.15.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed feat(line): add –smooth flag for 2D line charts by @hfl0506 in https://github.com/goptics/vizb/pull/187 feat(stats): add multi-select descriptive column picker by @hfl0506 in https://github.com/goptics/vizb/pull/191 feat(bar): add –horizontal flag for 2D grouped bar charts by @fahimfaisaal in https://github.com/goptics/vizb/pull/190 feat(bar/line): add –stack for 2d charts by @hfl0506 in https://github.com/goptics/vizb/pull/194 fix: clear grouped 3D z-axis name under option merge by @ahfoysal in https://github.com/goptics/vizb/pull/192 feat(ci): untrack vizb-ui.gen.go and generate embed in CI by @fahimfaisaal in https://github.com/goptics/vizb/pull/197 feat: add –theme color palette support by @ahfoysal in https://github.com/goptics/vizb/pull/195 New Contributors @hfl0506 made their first contribution in https://github.com/goptics/vizb/pull/187 @ahfoysal made their first contribution in https://github.com/goptics/vizb/pull/192 Full Changelog: https://github.com/goptics/vizb/compare/v0.14.1...v0.15.0
July 11, 2026
AI Plugin Scanner
Version updated for https://github.com/hashgraph-online/ai-plugin-scanner-action to version v1.2.437.
This action is used across all versions by 18 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Published automatically from https://github.com/hashgraph-online/hol-guard/tree/3049ba4a2fd13a42906f6745178ece5f65f4beb1 with plugin-scanner 2.0.1038.
Full Changelog: https://github.com/hashgraph-online/ai-plugin-scanner-action/compare/v1.2.436...v1.2.437
July 11, 2026
HOL Codex Plugin Scanner
Version updated for https://github.com/hashgraph-online/hol-codex-plugin-scanner-action to version v1.2.437.
This action is used across all versions by 11 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed Full Changelog: https://github.com/hashgraph-online/hol-codex-plugin-scanner-action/compare/v1...v1.2.437
July 11, 2026
helmfile-action
Version updated for https://github.com/helmfile/helmfile-action to version v2.4.7.
This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed What’s Changed build(deps-dev): bump @types/node from 26.0.0 to 26.0.1 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/727 build(deps-dev): bump prettier from 3.8.4 to 3.9.1 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/728 build(deps-dev): bump eslint-plugin-jest from 29.15.2 to 29.15.3 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/729 build(deps-dev): bump eslint-plugin-jest from 29.15.3 to 29.15.4 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/733 build(deps-dev): bump @vercel/ncc from 0.44.0 to 0.44.1 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/734 build(deps-dev): bump @types/node from 26.0.1 to 26.1.0 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/735 build(deps-dev): bump prettier from 3.9.1 to 3.9.4 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/731 build(deps-dev): bump @typescript-eslint/parser from 8.62.0 to 8.62.1 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/730 build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.62.0 to 8.62.1 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/732 build(deps-dev): bump @typescript-eslint/parser from 8.62.1 to 8.63.0 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/736 build(deps-dev): bump eslint-plugin-github from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/738 build(deps-dev): bump @types/node from 26.1.0 to 26.1.1 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/739 build(deps-dev): bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/740 build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.62.1 to 8.63.0 by @dependabot[bot] in https://github.com/helmfile/helmfile-action/pull/737 Full Changelog: https://github.com/helmfile/helmfile-action/compare/v2.4.6...v2.4.7