Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 29, 2025

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Update Change
zizmor patch 1.14.1 -> 1.14.2

Release Notes

zizmorcore/zizmor (zizmor)

v1.14.2

Compare Source

Bug Fixes 🐛🔗

  • Fixed a bug where the use-trusted-publishing audit would produce-false positive findings for some run: blocks that implicitly performed trusted publishing (#​1191)

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 09:59 PM, Monday through Friday ( * 5-21 * * MON-FRI ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource      | package           | from    | to      |
| --------------- | ----------------- | ------- | ------- |
| github-releases | zizmorcore/zizmor | v1.14.1 | v1.14.2 |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot added the dependencies Pull requests that update a dependency file label Sep 29, 2025
@renovate renovate bot requested a review from martincostello as a code owner September 29, 2025 16:50
Copy link
Contributor

@costellobot costellobot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approving dependency update.

@costellobot costellobot bot merged commit ba39006 into main Sep 29, 2025
10 checks passed
@costellobot costellobot bot deleted the renovate/regex/zizmor-1.x branch September 29, 2025 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant