From e320fab83b79781f32529f6334523394505605dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Apr 2026 05:17:41 +0000 Subject: [PATCH 1/5] Bump super-linter/super-linter from 8.5.0 to 8.6.0 Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 8.5.0 to 8.6.0. - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](https://github.com/super-linter/super-linter/compare/61abc07d755095a68f4987d1c2c3d1d64408f1f9...9e863354e3ff62e0727d37183162c4a88873df41) --- updated-dependencies: - dependency-name: super-linter/super-linter dependency-version: 8.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/Linter.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Linter.yml b/.github/workflows/Linter.yml index 398f46c..4387329 100644 --- a/.github/workflows/Linter.yml +++ b/.github/workflows/Linter.yml @@ -25,7 +25,7 @@ jobs: persist-credentials: false - name: Lint code base - uses: super-linter/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0 + uses: super-linter/super-linter@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0 env: GITHUB_TOKEN: ${{ github.token }} VALIDATE_BIOME_FORMAT: false From c743a2023010df0d4af9c6e6f05d30eb9b63e386 Mon Sep 17 00:00:00 2001 From: Marius Storhaug Date: Sat, 16 May 2026 19:17:34 +0200 Subject: [PATCH 2/5] Disable zizmor in linter workflow for super-linter 8.6.0 --- .github/workflows/Linter.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/Linter.yml b/.github/workflows/Linter.yml index 4387329..c249675 100644 --- a/.github/workflows/Linter.yml +++ b/.github/workflows/Linter.yml @@ -29,6 +29,7 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} VALIDATE_BIOME_FORMAT: false + VALIDATE_GITHUB_ACTIONS_ZIZMOR: false VALIDATE_JSCPD: false VALIDATE_JSON_PRETTIER: false VALIDATE_MARKDOWN_PRETTIER: false From 974d499180da3e584d78bb639777663cc6a1b492 Mon Sep 17 00:00:00 2001 From: Marius Storhaug Date: Sat, 16 May 2026 19:20:28 +0200 Subject: [PATCH 3/5] Add targeted zizmor suppression for publish API key test --- .github/workflows/Action-Test.yml | 2 +- .github/workflows/Linter.yml | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/Action-Test.yml b/.github/workflows/Action-Test.yml index fe1582b..dca8e05 100644 --- a/.github/workflows/Action-Test.yml +++ b/.github/workflows/Action-Test.yml @@ -39,5 +39,5 @@ jobs: with: Name: PSModuleTest WorkingDirectory: tests - APIKey: ${{ secrets.APIKEY }} + APIKey: ${{ secrets.APIKEY }} # zizmor: ignore[secrets-outside-env] test workflow passes publish API key to local action input intentionally WhatIf: true diff --git a/.github/workflows/Linter.yml b/.github/workflows/Linter.yml index c249675..4387329 100644 --- a/.github/workflows/Linter.yml +++ b/.github/workflows/Linter.yml @@ -29,7 +29,6 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} VALIDATE_BIOME_FORMAT: false - VALIDATE_GITHUB_ACTIONS_ZIZMOR: false VALIDATE_JSCPD: false VALIDATE_JSON_PRETTIER: false VALIDATE_MARKDOWN_PRETTIER: false From b969bc3d54c0b00cc1ec0c00232dd2e4cfd300ff Mon Sep 17 00:00:00 2001 From: Marius Storhaug Date: Sat, 16 May 2026 19:25:41 +0200 Subject: [PATCH 4/5] Fix formatting of run-name in Linter workflow and remove unnecessary comment in Action-Test workflow --- .github/workflows/Action-Test.yml | 2 +- .github/workflows/Linter.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/Action-Test.yml b/.github/workflows/Action-Test.yml index dca8e05..fe1582b 100644 --- a/.github/workflows/Action-Test.yml +++ b/.github/workflows/Action-Test.yml @@ -39,5 +39,5 @@ jobs: with: Name: PSModuleTest WorkingDirectory: tests - APIKey: ${{ secrets.APIKEY }} # zizmor: ignore[secrets-outside-env] test workflow passes publish API key to local action input intentionally + APIKey: ${{ secrets.APIKEY }} WhatIf: true diff --git a/.github/workflows/Linter.yml b/.github/workflows/Linter.yml index 4387329..959f240 100644 --- a/.github/workflows/Linter.yml +++ b/.github/workflows/Linter.yml @@ -1,6 +1,6 @@ name: Linter -run-name: "Linter - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}" +run-name: 'Linter - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}' on: [pull_request] From cedad9ab2f383d50691421a68e9192ff8de93e2c Mon Sep 17 00:00:00 2001 From: Marius Storhaug Date: Sat, 16 May 2026 19:29:27 +0200 Subject: [PATCH 5/5] Add comment to clarify intentional use of API key in Action-Test workflow --- .github/workflows/Action-Test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Action-Test.yml b/.github/workflows/Action-Test.yml index fe1582b..1434438 100644 --- a/.github/workflows/Action-Test.yml +++ b/.github/workflows/Action-Test.yml @@ -39,5 +39,5 @@ jobs: with: Name: PSModuleTest WorkingDirectory: tests - APIKey: ${{ secrets.APIKEY }} + APIKey: ${{ secrets.APIKEY }} # zizmor: ignore[secrets-outside-env] saved in org secrets as an intentional choice WhatIf: true