Bump rojopolis/spellcheck-github-actions from 0.57.0 to 0.58.0

[dependabot]

Bumps rojopolis/spellcheck-github-actions from 0.57.0 to 0.58.0.

Release notes

Sourced from rojopolis/spellcheck-github-actions's releases.

0.58.0

What's Changed

• Security patch for dependency pymdown-extensions by @​jonasbn in rojopolis/spellcheck-github-actions#313
• Bump rojopolis/spellcheck-github-actions from 0.56.0 to 0.57.0 by @​dependabot[bot] in rojopolis/spellcheck-github-actions#315

Full Changelog: rojopolis/spellcheck-github-actions@0.57.0...0.58.0

Changelog

Sourced from rojopolis/spellcheck-github-actions's changelog.

0.58.0, 2026-01-20, security release, update not required

• A minor security issue in the dependency: pymdown-extensions, which is used by the core component PySpelling
  • GHSA-r6h4-mm7h-8pmq
  • Original issue: facelessuser/pymdown-extensions#2716

Commits

• 0bf4b2f Bumped release date
• d2bf0b0 Bump rojopolis/spellcheck-github-actions from 0.56.0 to 0.57.0 (#315)
• 247484a Fixed some spelling, URLs should possibly be treated as code
• 8c73a77 Security patch for dependency pymdown-extensions (#313)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[augmentcode]

🤖 Augment PR Summary

Summary: Updates the spellcheck GitHub Actions workflow to use rojopolis/spellcheck-github-actions 0.58.0.
Why: Pulls in the upstream security patch for a transitive dependency (pymdown-extensions) included in the action.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 1 suggestions posted.

Comment augment review to trigger a new review at any time.

[augmentcode]

Consider pinning rojopolis/spellcheck-github-actions to a commit SHA (instead of a moving version tag) to reduce GitHub Actions supply-chain risk. Since you’re bumping to 0.58.0 anyway, this is a good moment to pin to the release’s corresponding SHA.

_{🤖 Was this useful? React with 👍 or 👎}