[renovate]

This PR contains the following updates:

Package	Type	Update	Change
kjanat/actionlint	repository	patch	v1.17.0 → v1.17.1

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

kjanat/actionlint

v1.17.1

Compare Source

actionlint 1.17.1 updates the Go toolchain and container packages to address the vulnerabilities reported in #​356. It also fixes validation of actions at the repository root. This is a small maintenance release for v1; configuration and check defaults are unchanged.

Upgrade to patched binaries and images

The release binaries, Docker images, and Nix package now build with Go 1.27.3, including its standard-library security fixes. Docker images also update their installed Alpine packages.

The release workflow now checks Go packages with govulncheck and scans the Docker smoke-test images with OSV Scanner before publication. Thanks @​konard for reporting the vulnerable packages in the 1.17.0 image. Related: #​356.

Call an action at the repository root

A step using uses: $/ now resolves to the repository's root action instead of producing an invalid-format error. For a repository with an action.yml or action.yaml at its root:

steps:
  - uses: $/
    with:
      message: hello

actionlint reads that action's metadata and validates its inputs and outputs. Unknown input names and references to undeclared outputs still produce diagnostics. Thanks @​mattdowdell for reporting the problem and identifying its cause in #​199. Fixed in #​200.

Upgrade

npm install --save-dev @kjanat/actionlint@1.17.1

For a one-off run:

npx @kjanat/actionlint@1.17.1 -version

For Docker:

docker pull ghcr.io/kjanat/actionlint:1.17.1

For the GitHub Action:

- uses: kjanat/actionlint@v1.17.1

Release archives, SHA-256 checksums, and SBOMs are attached below. See the installation guide for other installation methods.

Full changelog

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.