Skip to content

Comments

Bump the pre-commit-hooks group with 3 updates#59

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pre_commit/pre-commit-hooks-265a338398
Open

Bump the pre-commit-hooks group with 3 updates#59
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pre_commit/pre-commit-hooks-265a338398

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 19, 2026

Bumps the pre-commit-hooks group with 3 updates: https://github.com/rhysd/actionlint, https://github.com/ansible/ansible-lint and https://github.com/adrienverge/yamllint.

Updates https://github.com/rhysd/actionlint from v1.7.7 to 1.7.11

Release notes

Sourced from https://github.com/rhysd/actionlint's releases.

v1.7.11

  • Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @​heppu)
    env:
      # ERROR: case() requires an odd number of arguments
      ENVIRONMENT: |-
        ${{ case(
          github.ref == 'refs/heads/main', 'production',
          github.ref == 'refs/heads/staging', 'staging'
        ) }}
  • Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @​hugovk and @​muzimuzhi)
  • Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @​takaram)
    $ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
    $ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
    Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
    Loaded 1 attestation from GitHub API
    The following policy criteria will be enforced:
    
    Predicate type must match:................ https://slsa.dev/provenance/v1
    Source Repository Owner URI must match:... https://github.com/rhysd
    Source Repository URI must match:......... https://github.com/rhysd/actionlint
    Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
    OIDC Issuer must match:................... https://token.actions.githubusercontent.com
    
    ✓ Verification succeeded!
    The following 1 attestation matched the policy criteria
    
    Attestation #1
    
    Build repo:..... rhysd/actionlint
    Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
    Signer repo:.... rhysd/actionlint
    Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11
  • Report path filters with ./ as error because they never match anything. (#521)
    on:
      push:
        paths:
          # ERROR: This never matches anything. `foo/bar.txt` is correct.
          - ./foo/bar.txt
  • Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @​michaelgruenewald)
  • Fix stack overflow crash by a recursive anchor in matrix items. (#610)
  • Fix an unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)
  • Reduce the number of memory allocations on resolving anchors.
  • Update the popular actions data set to the latest.
  • Update Go dependencies to the latest.
  • ... (truncated)

    Changelog

    Sourced from https://github.com/rhysd/actionlint's changelog.

    v1.7.11 - 2026-02-14

    • Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @​heppu)
      env:
        # ERROR: case() requires an odd number of arguments
        ENVIRONMENT: |-
          ${{ case(
            github.ref == 'refs/heads/main', 'production',
            github.ref == 'refs/heads/staging', 'staging'
          ) }}
    • Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @​hugovk and @​muzimuzhi)
    • Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @​takaram)
      $ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
      $ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
      Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
      Loaded 1 attestation from GitHub API
      The following policy criteria will be enforced:
      
      Predicate type must match:................ https://slsa.dev/provenance/v1
      Source Repository Owner URI must match:... https://github.com/rhysd
      Source Repository URI must match:......... https://github.com/rhysd/actionlint
      Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
      OIDC Issuer must match:................... https://token.actions.githubusercontent.com
      
      ✓ Verification succeeded!
      The following 1 attestation matched the policy criteria
      
      Attestation #1
      
      Build repo:..... rhysd/actionlint
      Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
      Signer repo:.... rhysd/actionlint
      Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11
  • Report path filters with ./ because they never match anything. (#521)
    on:
      push:
        paths:
          # ERROR: This never matches anything. `foo/bar.txt` is correct.
          - ./foo/bar.txt
  • Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @​michaelgruenewald)
  • Fix stack overflow crash by a recursive anchor in matrix items. (#610)
  • Fix a unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)
  • Reduce the number of memory allocations on resolving anchors.
  • Update the popular actions data set to the latest.
  • ... (truncated)

    Commits
    • 393031a bump up version to v1.7.11
    • 63589e8 add link to the release note of the version in playground heading
    • 58a2626 remove legacy Homebrew formula
    • d22c104 fix test script for download script to check error case failures
    • 50d2134 describe how to download and verify artifact using gh (fix #617)
    • 226bb4a update playground npm deps including jsdom v28
    • 1e85edb disable SC2153 shellcheck rule to avoid unassigned variable false positive (f...
    • 8776d64 Merge pull request #619 from takaram/patch-1
    • e3eb8cb reduce memory allocations on resolving anchors
    • db08cec Fix variable name in release workflow
    • Additional commits viewable in compare view

    Updates https://github.com/ansible/ansible-lint from v25.5.0 to 26.1.1

    Release notes

    Sourced from https://github.com/ansible/ansible-lint's releases.

    v26.1.1

    Features

    Fixes

    Maintenance

    v26.1.0

    Fixes

    Maintenance

    v25.12.2

    Fixes

    Maintenance

    ... (truncated)

    Commits
    • 7f6abc5 fix: resolve auto-fix failures and detection for short module names (… (#4897)
    • 156aef8 chore(deps): update all dependencies (#4900)
    • 08e3173 chore(deps): update dependencies [security] (#4922)
    • 4c56d63 chore(deps): update dependencies [security] (#4921)
    • acec2b2 chore(deps): update dependencies [security] (#4920)
    • 189f75d chore(deps): update dependencies [security] (#4919)
    • 60ac6cc chore(deps): update dependencies [security] (#4918)
    • 7c87bda chore(deps): update dependencies [security] (#4917)
    • 18a45e8 chore(deps): update dependencies [security] (#4916)
    • 3a53327 chore(deps): update dependencies [security] (#4915)
    • Additional commits viewable in compare view

    Updates https://github.com/adrienverge/yamllint from v1.37.1 to 1.38.0

    Changelog

    Sourced from https://github.com/adrienverge/yamllint's changelog.

    1.38.0 (2026-01-13)

    • Add support for Python 3.14, drop support for Python 3.9
    • Require pathspec ≥ 1.0.0
    • Config: Follow gitignore implementation in yaml-files and ignore
    • Config: Use "mapping" instead of "dict" for user-facing errors
    • Rule indentation: Fix error message for check-multi-line-strings
    • Rule quoted-strings: Add quote-type: consistent
    • Docs: Update the name of BSD ports
    • Docs: Enhance wording of recursive directory lint in README
    • Docs: Add Alpine Linux installation instructions in README
    Commits
    • cba56bc yamllint version 1.38.0
    • 9dc506b Require pathspec ≥ 1.0.0 and follow Git's gitignore implementation
    • 73b9c0b Drop support for Python 3.9
    • 22d07ed indentation: Fix error message for check-multi-line-strings
    • cfbfe9b README: Add Alpine Linux installation instructions
    • a3b3bb3 README: Enhance wording of recursive directory lint
    • e3b72f5 quoted-strings: Add missing quote-type: consistent docs
    • e3d54cc quoted-strings: Add quote-type: consistent
    • 0b4ddc8 CI: Update GitHub Actions
    • 866f805 build: Remove license-files from pyproject.toml
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    Bumps the pre-commit-hooks group with 3 updates: [https://github.com/rhysd/actionlint](https://github.com/rhysd/actionlint), [https://github.com/ansible/ansible-lint](https://github.com/ansible/ansible-lint) and [https://github.com/adrienverge/yamllint](https://github.com/adrienverge/yamllint).
    
    
    Updates `https://github.com/rhysd/actionlint` from v1.7.7 to 1.7.11
    - [Release notes](https://github.com/rhysd/actionlint/releases)
    - [Changelog](https://github.com/rhysd/actionlint/blob/main/CHANGELOG.md)
    - [Commits](rhysd/actionlint@v1.7.7...v1.7.11)
    
    Updates `https://github.com/ansible/ansible-lint` from v25.5.0 to 26.1.1
    - [Release notes](https://github.com/ansible/ansible-lint/releases)
    - [Commits](ansible/ansible-lint@v25.5.0...v26.1.1)
    
    Updates `https://github.com/adrienverge/yamllint` from v1.37.1 to 1.38.0
    - [Release notes](https://github.com/adrienverge/yamllint/releases)
    - [Changelog](https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst)
    - [Commits](adrienverge/yamllint@v1.37.1...v1.38.0)
    
    ---
    updated-dependencies:
    - dependency-name: https://github.com/rhysd/actionlint
      dependency-version: 1.7.11
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/ansible/ansible-lint
      dependency-version: 26.1.1
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/adrienverge/yamllint
      dependency-version: 1.38.0
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot @github
    Copy link
    Contributor Author

    dependabot bot commented on behalf of github Feb 19, 2026

    Labels

    The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

    Please fix the above issues or remove invalid values from dependabot.yml.

    @dependabot dependabot bot requested a review from leinardi as a code owner February 19, 2026 20:03
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    None yet

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    0 participants