From af217c57c0866e47f26d5b3131e32f7478274ddd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 00:26:44 +0000 Subject: [PATCH 1/2] build(deps): bump zizmorcore/zizmor-action from 0.8.0 to 0.8.1 Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.8.0 to 0.8.1. - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/53290badfa369cb0bf7ad16342cb62c2fa47ac7b...45d7276c9ca790aabd705e31ca99c6185c3e76dd) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/validate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 9360f14..cd0d464 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -84,7 +84,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0 + - uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1 with: version: 1.31.1 advanced-security: false From a2032dc861e403e12509fd082f27e2d94c181304 Mon Sep 17 00:00:00 2001 From: Kir Kolyshkin Date: Mon, 9 Nov 2026 14:00:17 -0800 Subject: [PATCH 2/2] ci: use zizmor version from zizmor-action Drop the explicit zizmor version and let zizmor-action use its default ("latest"), which is the newest stable zizmor release known to the given action version. Since the action is pinned by SHA, this is still reproducible, and zizmor gets updated together with dependabot bumps of zizmor-action, without the need to bump it manually. Signed-off-by: Kir Kolyshkin --- .github/workflows/validate.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index cd0d464..2ea4962 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -86,7 +86,6 @@ jobs: persist-credentials: false - uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1 with: - version: 1.31.1 advanced-security: false annotations: true