ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300

Merged
its-miso[bot] merged 1 commit into
mainfrom
renovate/github-codeql-action-digest
Jun 2, 2026
Merged

ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom
renovate/github-codeql-action-digest

Conversation

@its-miso

@its-misoits-misoBot commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@its-miso

its-misoBot commented Jun 2, 2026

Copy link
Copy Markdown
ContributorAuthor

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

@its-miso
its-misoBot merged commit 6fbac56 into mainJun 2, 2026
1 check was pending
@its-miso
its-misoBot deleted the renovate/github-codeql-action-digest branch June 2, 2026 10:21
its-saffron[bot]
its-saffronBot approved these changes Jun 2, 2026
View reviewed changes

@its-saffronits-saffronBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review

Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)

Recommendation: Approve

This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.

Change-by-Change Findings

.github/workflows/image.yaml (line 93)

  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.

Version Trace

Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):

  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag

This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.

Sources

Standards Compliance

  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.

Linked Issue Fit

No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.

Evidence Provider Findings

No evidence providers configured. No findings to evaluate.

Tool Harness Findings

Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).

Unknowns or Needs Verification

  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
Merged
Merged
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
ci(github-action): update action github/codeql-action (7211b7c → 87557b9) - #300
Merged
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Jun 2, 2026
Merged
ci(github-action): update action github/codeql-action (7211b7c → 87557b9)#300
its-miso[bot] merged 1 commit into
mainfrom 
renovate/github-codeql-action-digest
Conversation
@its-miso
@its-misoits-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-action (changelog)actiondigest7211b7c → 87557b9
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot.
@its-miso
its-misoBot
commented
Jun 2, 2026

Copy link


Copy Markdown

ContributorAuthor
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.
@its-miso
its-misoBot
merged commit 6fbac56
into
mainJun 2, 2026

1 check was pending

@its-miso
its-misoBot
deleted the

renovate/github-codeql-action-digest

branch
June 2, 2026 10:21
its-saffron[bot]
its-saffronBot
approved these changes
Jun 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Analysis engine: MiniMax@https://litellm.jory.dev/v1 (anthropic)
Recommendation: Approve
This is a routine, low-risk Renovate Bot digest update for the github/codeql-action/upload-sarif GitHub Action, moving from 7211b7c → 87557b9 within the pinned v4 major version line.
Change-by-Change Findings
.github/workflows/image.yaml (line 93)
  • Before:uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
  • After:uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
  • Purpose: Refreshes the pinned digest for the SARIF uploader used by the "Upload Trivy results" step in the image workflow.
  • Risk: Negligible. The step is conditional (if: github.event_name != 'pull_request' && hashFiles('trivy-results.sarif') != '') and the action's public inputs (sarif_file) are unchanged.
Version Trace
Mapping the SHA pair to release tags (verified from github/codeql-action recent tags):
  • 7211b7c8077ea37d8641b6271f6a365a22a5fbfa → tag v4.36.0 (published 2026-05-22)
  • 87557b9c84dde89fdd9b10e88954ac2f4248e463 → tag v4.36.1 (published 2026-06-02) — also the current v4 floating major tag
This is a patch-level bump (v4.36.0 → v4.36.1) within the v4 major line. No breaking-change classification is warranted; the # v4 comment is preserved so Renovate continues to track the v4 major.
Sources
Standards Compliance
  • AGENTS.md — GitHub Actions CI section:.github/workflows/image.yaml is the documented location for the build/publish pipeline. The Trivy step is explicitly described as "advisory only (continue-on-error: true)" and is the only step that consumes this action. The update does not alter any documented convention.
  • Pin policy: Full-SHA pinning with a # v4 version comment is the recommended best-practice for supply-chain integrity while still letting Renovate detect major-version drift. The PR preserves that pattern.
  • No new permissions, secrets, or inputs are introduced.
Linked Issue Fit
No linked issue. This is a standard Renovate-driven dependency refresh; there is no issue contract to compare against.
Evidence Provider Findings
No evidence providers configured. No findings to evaluate.
Tool Harness Findings
Harness reported "Could not parse planning response as JSON" with 0 planned requests. For a one-line digest bump in a workflow file this is not material; the change is fully described in the diff and is consistent with the prior digest-update PRs in this repository (e.g., #183 updated the same pin from 9e0d7b8 → 7211b7c).
Unknowns or Needs Verification
  • Detailed changelog contents between v4.36.0 and v4.36.1 were not directly fetchable from the supplied HTML snippets, but the major-version annotation and patch-level tag delta make a breaking change extremely unlikely. No action needed.
  • The Renovate PR body does not include release notes inline; reviewers wanting full notes can check the v4.36.1 GitHub release page if desired.

This was referenced Jun 2, 2026
 Merged

 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants