Skip to content

Appletini (4.0beta16)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@lewisgoddard lewisgoddard released this 19 Sep 09:15
· 2 commits to main since this release
4.0beta16
1eadd66

Workflow linting moves into its own always-installed workflow, and Dependabot now sees the composite actions.

  • New .github/workflows/actions.yml runs actionlint and zizmor, installed unconditionally like security.yml. Previously these ran inside yaml.yml, which was gated on a file count that prunes .github — so a repo whose only YAML was its workflows got no workflow linting at all. That was 7 of 8 eustasy repos.
  • yaml.yml now runs yamllint alone, and no longer triggers on paths yamllint is excluded from.
  • Fixed: Dependabot was watching none of the 23 composite actions, where every hash-pinned third-party action lives since 4.0beta13. qltysh/qlty-action and shivammathur/setup-php had not been updatable since that release.
  • The test harness now asserts both that every deployed .github YAML is excluded from yamllint, and that every action directory is listed for Dependabot.
Assets 2
Loading