Repository navigation

chore(ci): bump jactionlint to 2.3.0 and address its new rules - #7287

Merged

kanadgupta merged 22 commits into

kanad-claude/mise-bun-actions-optimize-a0c03bfrom

kanad-claude/jactionlint-v2

Oct 23, 2026

Merged

chore(ci): bump jactionlint to 2.3.0 and address its new rules#7287
kanadgupta merged 22 commits into
kanad-claude/mise-bun-actions-optimize-a0c03bfrom
kanad-claude/jactionlint-v2

Commits on Oct 23, 2026
- chore(ci): bump jactionlint to 2.3.0
  
  kanadgupta
  and
  claude
  authored
  01d2d63
- chore(ci): migrate the jactionlint config to the 2.x rules key
  
  kanadgupta
  and
  claude
  authored
  eb74f6c
- chore(ci): keep jactionlint out of the vendored submodules
  
  kanadgupta
  and
  claude
  authored
  b7eff25
- chore(ci): turn off the jactionlint missing-timeout rule
  
  kanadgupta
  and
  claude
  authored
  84f7717
- chore(ci): turn off the jactionlint concurrency-limits rule
  
  kanadgupta
  and
  claude
  authored
  e8cb0c6
- ci: grant write scopes per job instead of per workflow
  
  kanadgupta
  and
  claude
  authored
  958d297
- ci: request only the scopes each release-notes App token uses
  
  kanadgupta
  and
  claude
  authored
  c408fbd
- ci: create GitHub releases with gh instead of action-gh-release
  
  kanadgupta
  and
  claude
  authored
  c992304
- ci: stop contribution-gate checkouts persisting the token
  
  kanadgupta
  and
  claude
  authored
  8f19bf3
- ci: drop job outputs no other job reads
  
  kanadgupta
  and
  claude
  authored
  5eb9c91
- ci: fail pipelines on the first broken command
  
  kanadgupta
  and
  claude
  authored
  3e249aa
- ci: pass the Claude model through a step output
  
  kanadgupta
  and
  claude
  authored
  7e9a683
- ci: accept the sender check in bot-pr-auto-merge
  
  kanadgupta
  and
  claude
  authored
  1e8378e
- ci: accept the pinned Claude Code CLI installs
  
  kanadgupta
  and
  claude
  authored
  a81eba4
- ci: accept the privileged triggers the automation workflows need
  
  kanadgupta
  and
  claude
  authored
  136ab16
- ci: accept running the published installer in its own test
  
  kanadgupta
  and
  claude
  authored
  3ece4e1
- ci: accept the run-scoped build cache in the publish job
  
  kanadgupta
  and
  claude
  authored
  5178f1c
- ci: accept the tag-pinned smoke-test container image
  
  kanadgupta
  and
  claude
  authored
  66c23aa
- ci: say plainly why each jactionlint finding is accepted
  
  kanadgupta
  and
  claude
  authored
  78ad0f0
- ci: read issues with the release-notes proposal token
  
  kanadgupta
  and
  claude
  authored
  b8087a5
- ci: drop the resolver's head_ref output with the job output
  
  kanadgupta
  and
  claude
  authored
  37bca2c
- ci: keep the workflows scope off the release-notes apply token
  
  kanadgupta
  and
  claude
  authored
  f4d989f

Commits

Commits on Oct 23, 2026