20261024.0

What's Changed

• Update oxlint to v1.88.0 by @renovate[bot] in #823
• Update dependency @effect/tsgo to v0.53.0 by @renovate[bot] in #824
• Update Node.js to v24.22.0 by @renovate[bot] in #825
• Update Node.js to v26.12.0 by @renovate[bot] in #826
• Update dependency @effect/tsgo to v0.53.1 by @renovate[bot] in #827
• Update dependency @timmo001/oxlint-rules to v0.6.3 by @renovate[bot] in #828
• Update github/codeql-action action to v4.39.0 by @renovate[bot] in #829
• Update dependency @effect/tsgo to v0.53.2 by @renovate[bot] in #830
• Update dependency vitest to v5.0.5 by @renovate[bot] in #831
• Update dependency @effect/tsgo to v0.53.3 by @renovate[bot] in #832
• Update jdx/mise-action action to v5.2.0 by @renovate[bot] in #833
• Update dependency @effect/tsgo to v0.53.4 by @renovate[bot] in #834
• Update dependency @timmo001/effect-gh to v0.7.0 by @renovate[bot] in #815
• Update Effect to v4.0.4 by @renovate[bot] in #817
• Update Effect to v4.0.5 by @renovate[bot] in #835
• Lock file maintenance by @renovate[bot] in #836
• Update dependency @effect/tsgo to v0.54.0 by @renovate[bot] in #837
• Update dependency @effect/tsgo to v0.54.1 by @renovate[bot] in #838
• Update jdx/mise-action action to v5.2.1 by @renovate[bot] in #839
• Update dependency @effect/tsgo to v0.55.0 by @renovate[bot] in #840
• Update oxlint to v1.89.0 by @renovate[bot] in #841
• Update Node.js to v24.22.1 by @renovate[bot] in #842
• Update dependency @effect/tsgo to v0.56.0 by @renovate[bot] in #843
• Update dependency npm to v12.2.1 by @renovate[bot] in #844
• Update Node.js to v26.12.1 by @renovate[bot] in #845
• Update dependency python to v3.15.1 by @renovate[bot] in #846
• Update jdx/mise-action action to v5.2.2 by @renovate[bot] in #847
• Update github/codeql-action action to v4.39.1 by @renovate[bot] in #849
• Update actions/setup-python action to v7.1.0 by @renovate[bot] in #850
• Update Effect to v4.0.6 by @renovate[bot] in #848
• Update dependency bun to v1.4.4 by @renovate[bot] in #851
• Update dependency @types/bun to v1.4.4 by @renovate[bot] in #852
• Update dependency oxlint-tsgolint to v7.0.2005 by @renovate[bot] in #853
• Update docker/login-action action to v4.7.0 by @renovate[bot] in #855
• Update dependency @effect/tsgo to v0.56.1 by @renovate[bot] in #854

Full Changelog: 20261013.1...20261024.0

20261013.1

What's Changed

Workflows

• New home-assistant-app-dispatch.yml sends a published stable release's repository and tag to a shared Home Assistant app repository as a repository_dispatch (event-type, default app-release), so that repository can copy the app folder from the tag. Call it after the image is pushed, with the shared repository as repository and a token secret with Contents write on it. The job is named Dispatch.
• home-assistant-app-changelog.yml keeps a single trailing newline when the release notes end with one.
• Python 3.15.0 in build-python-linux.yml, build-python-pypi-release.yml, lint-agent-skills.yml, lint-general.yml, lint-pylint.yml and test-pytest.yml.
• nfpm 2.48.0 in build-node-linux.yml and release-bun-cli-linux.yml.

Dependencies

• @effect/tsgo 0.52.0.

Full Changelog: 20261013.0...20261013.1

20261013.0

What's Changed

Workflows

• New build-container-image.yml builds a Dockerfile for amd64 and arm64 on native runners, pushes each by digest to GHCR and tags one multi-arch manifest with version, its major.minor and latest (turn that off with latest: false). Inputs cover the context, Dockerfile, build target and build arguments. home-assistant: true adds the io.hass.* labels the Supervisor reads from a prebuilt app image, and push: false only checks both architectures build, for pull requests. The caller job needs contents: read and packages: write. Jobs are named Image (amd64), Image (arm64) and Manifest.
• New home-assistant-app-changelog.yml copies a published stable release's notes to the app's changelog-path on the default branch, where the Supervisor shows them in the update dialog. Pass a token secret that can push there when a ruleset blocks GITHUB_TOKEN. A failure only warns, so it never fails the release. The job is named Changelog.
• jdx/mise-action 5.1.2 in build-bun-cli.yml, tooling-drift.yml, validate-actions.yml and sync-action-bundles.yml.

Dependencies

• vitest 5.0.4 and @types/bun 1.4.3.

Full Changelog: 20261012.0...20261013.0

20261012.0

What's Changed

Workflows

• New tooling-drift.yml runs the pinned @timmo001/tooling-drift tool on the default branch, compares the tool releases recorded in tooling.yml with the latest and opens one pull request per tool that moved. Pass a token secret so those pull requests trigger CI; without it the tool dispatches the repository's CI on each branch. The job is named Tooling drift.

Actions

• Bundles rebuilt against Effect 4.0.3. Inputs and behaviour are unchanged.

Dependencies

• effect, @effect/platform-node and @effect/vitest 4.0.3, Bun 1.4.3, Prettier 3.9.10 and oxlint-tsgolint 7.0.2004.

Full Changelog: 20261010.0...20261012.0

20261010.0

What's Changed

Actions

• The JavaScript actions now run every GitHub CLI call through typed @timmo001/effect-gh operations (releases, workflow dispatch, API requests), with schema-checked inputs and outputs. Inputs and behaviour are unchanged; failed gh calls now include their stderr in the action log.

CI

• validate-actions refreshes the apt index before installing test dependencies, so a stale runner image no longer fails with a 404.

Dependencies

• @timmo001/effect-gh 0.5.3 and @timmo001/oxlint-rules 0.6.2.

Full Changelog: 20261009.1...20261010.0

20261009.1

What's Changed

npm and JSR publishing

• publish-jsr-package now publishes with --allow-dirty when version-from-release-tag is true. Writing the tag into package.json and jsr.json left them modified, so jsr publish refused to run. Other callers are unaffected.

Full Changelog: 20261009.0...20261009.1

20261009.0

What's Changed

npm and JSR publishing

• publish-npm-package and publish-jsr-package take a new opt-in version-from-release-tag input. When it's true, the release tag is written into package.json and jsr.json before validation, for packages that commit a placeholder version. Existing callers are unaffected.

Full Changelog: 20261008.3...20261009.0

20261008.3

What's Changed

Arch package publishing

• build-arch-package now sends the package name in the publish-package dispatch to timmo001/arch-repo, so its publish runs are titled with the package they deploy. No change to inputs.

Full Changelog: 20261008.2...20261008.3

20261008.2

What's Changed

Internal

No change for callers. The workflows and action bundles are the same as in 20261008.1.

• mise run bump-consumers bumps the timmo001/workflows pins in every consuming repository to a release. It's a dry run unless you pass --push, and runs repositories in parallel.
• A workflows-bump-consumers skill covers using it.
• The bundle script is now written in Effect and builds actions in parallel. It shares its output format with the bump script.

Full Changelog: 20261008.1...20261008.2

20261008.1

What's Changed

Removed workflows

These reusable workflows had no callers and are gone:

• build-container-linux.yml
• build-msbuild-windows.yml
• build-python-windows.yml
• codeql-csharp.yml
• lint-black.yml

Pin to an earlier release if you still need one.

Dependency updates

• Node.js 26.11.1 in the workflows that set up Node
• Pinned GitHub Actions updated across the build, publish and test workflows
• Action bundles rebuilt on Effect 4.0.2

Internal

This repository's own tooling now runs through mise. mise.toml pins Bun and Node and owns the task graph, and the validate and bundle sync workflows use it. No change for callers.

Full Changelog: 20261008.0...20261008.1