Version updated for https://github.com/RunTimeAdmin/mcpshield-action to version v1.2.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Fixes discover_files no longer crashes when an absolute path or glob is passed to --paths (pathlib rejects non-relative glob patterns). Standard CI usage passes repo-relative paths and was unaffected.

Version updated for https://github.com/sentinel-cli/sentinel to version v2.0.6. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Full Changelog: https://github.com/sentinel-cli/sentinel/compare/v2.0.5...v2.0.6

Version updated for https://github.com/slackapi/slack-github-action to version v3.0.4. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 26,704 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. What’s Changed Patch Changes fa03fe4: refactor: send webhooks with the @slack/webhook package

Version updated for https://github.com/snapsynapse/skill-provenance to version v5.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed 5.0.0 - 2026-07-10 Security hardening release for Skill Provenance manifest validation and its GitHub Actions wrapper. Security fixes Prevented bundle-path shell injection by transporting caller-controlled action input through an environment variable instead of interpolating it into Bash source. Made verify mode fail closed on missing, malformed, or duplicate manifest hash fields. Added explicit hash: null as the only intentional hash-verification opt-out. Made update mode repair missing or malformed hashes while preserving explicit null opt-outs. Kept inventory presence checks active for files whose hashes are explicitly opted out. Tests and evals Added executable CI regressions for action input transport and validator hash states. Added adversarial quote, separator, command-substitution, newline, and spaced-path action coverage. Added core evals for fail-closed verification, explicit null semantics, and update repair. Added a supplemental eval for GitHub Action shell safety. Expanded coverage from 46 to 50 scenarios: 33 core and 17 supplemental. Breaking change Manifest entries may no longer omit the hash field. Use a complete lowercase sha256: value or explicit hash: null. This intentional contract tightening requires the 5.0.0 major version.

Version updated for https://github.com/spagu/ssg to version v1.8.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Installation Quick Install (Linux/macOS) curl -sSL https://raw.githubusercontent.com/spagu/ssg/main/install.sh | bash Package Managers Homebrew: brew install spagu/tap/ssg Snap: snap install ssg Debian/Ubuntu: Download .deb file below Fedora/RHEL: Download .rpm file below Checksums See checksums.sha256 for file verification.

Version updated for https://github.com/spotdemo4/nix-init to version v1.57.0. This action is used across all versions by 4 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed feat: Update cachix/install-nix-action action to v31.10.7 (#159) (97318f9a6c3ec7b40483d6b25bf8d308a213eb20) bump: v1.56.0 -> v1.57.0 (a381c8e0765c98cb84fdc4a392eefd6c4db309a5) chore(deps): update github actions to v1.56.0 (#158) (88f6dbaed49ea12307fa5ea2c1b5a81dfa70a932)

Version updated for https://github.com/svrooij/azure-static-web-app-deploy-action to version v1.2.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Azure Static Web Apps Deploy (small) Features: Deploy to Azure Static Web App 📦without a massive docker container 🐋 Support for federated credentials 🔑 and the less secure API token What’s Changed Remove extra colon by @arlobelshee in https://github.com/svrooij/azure-static-web-app-deploy-action/pull/2 Adjust README and update workflow to use azure/login@v3 by @svrooij in https://github.com/svrooij/azure-static-web-app-deploy-action/pull/3 Fix: failed SWA CLI deployment not propagating as action failure by @svrooij with @Copilot in https://github.com/svrooij/azure-static-web-app-deploy-action/pull/5 New Contributors @arlobelshee made their first contribution in https://github.com/svrooij/azure-static-web-app-deploy-action/pull/2 Full Changelog: https://github.com/svrooij/azure-static-web-app-deploy-action/compare/v1.0.0...v1.2.0

Version updated for https://github.com/toshi0607/agentslint to version v0.0.2. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed First public release of agentslint — a CI linter for AI coding agent config files (AGENTS.md, CLAUDE.md, .claude/). Highlights 6 rules: broken file references (AL001), stale commands (AL002), token budget (AL003), skill frontmatter (AL004), settings schema with 125 known keys (AL005), secret patterns (AL006) 4 output formats: pretty, JSON, SARIF (GitHub code scanning), GitHub annotations GitHub Action with PR inline annotations, job summary, and optional SARIF output --help / --version, zero-config npx @toshi0607/agentslint Tested on Ubuntu / macOS / Windows (47 tests) Usage - uses: actions/checkout@v4 - uses: toshi0607/agentslint@v0.0.2 See the README for CLI usage, configuration, and the code scanning setup.

Version updated for https://github.com/yuri-val/ai-codereviewer to version v4. This action is used across all versions by 4 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s new since v3 Default model is now gpt-5.6-luna (was gpt-4o). Any model can still be set via the OPENAI_API_MODEL input. Prompts overhauled for the GPT-5.6 family: strict JSON output contract (response_format: json_object), severity levels (critical/major), line-number-anchored comments with GitHub suggestion blocks. Hardened review pipeline: concurrent per-file reviews, full-file context fetching, retry with exponential backoff on rate limits/5xx, adaptive completion-token budgets for reasoning models, comment batching with 422/403 fallback. OpenAI SDK upgraded to 4.104, Octokit to 21.x, action runtime on node20. Usage - uses: yuri-val/ai-codereviewer@v4 with: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} OPENAI_API_MODEL: "gpt-5.6-luna" exclude: "**/*.lock,dist/**,**/*.json,**/*.md"

Version updated for https://github.com/yuri-val/auto-pr-action to version v1.4.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Changes in this Release: feat: default to gpt-5.6-luna and tune prompt for GPT-5.6 Switch the default model from gpt-5.4-mini to gpt-5.6-luna Rewrite the system prompt per the GPT-5.6 prompting guide: lean instructions, real newlines (previously literal \n sequences), clear output contract (summary + emoji sections, no title/preamble)