build(deps): bump dorny/paths-filter from 3 to 4 by dependabot[bot] · Pull Request #314 · Dankoy/jforwarder

dependabot · 2026-04-01T22:40:45Z

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.0

What's Changed

feat: update action runtime to node24 by @saschabratton in dorny/paths-filter#294

New Contributors

@saschabratton made their first contribution in dorny/paths-filter#294

Full Changelog: dorny/paths-filter@v3.0.3...v4.0.0

v3.0.3

What's Changed

Add missing predicate-quantifier by @wardpeet in dorny/paths-filter#279

New Contributors

@wardpeet made their first contribution in dorny/paths-filter#279

Full Changelog: dorny/paths-filter@v3...v3.0.3

v3.0.2

What's Changed

feat: add config parameter for predicate quantifier by @petermetz in dorny/paths-filter#224

New Contributors

@petermetz made their first contribution in dorny/paths-filter#224

Full Changelog: dorny/paths-filter@v3...v3.0.2

v3.0.1

What's Changed

Compare base and ref when token is empty by @frouioui in dorny/paths-filter#133

New Contributors

@frouioui made their first contribution in dorny/paths-filter#133

Full Changelog: dorny/paths-filter@v3...v3.0.1

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.2

Work around git dubious ownership errors in container jobs

Use rev-parse instead of branch --show-current for older git compat

Fix warning message

v4.0.1

Support merge queue

v4.0.0

Update action runtime to node24

v3.0.3

Add missing predicate-quantifier

v3.0.2

Add config parameter for predicate quantifier

v3.0.1

Compare base and ref when token is empty

v3.0.0

Update to Node.js 20

Update all dependencies

v2.11.1

Update @actions/core to v1.10.0 - Fixes warning about deprecated set-output

Document need for pull-requests: read permission

Updating to actions/checkout@v3

v2.11.0

Set list-files input parameter as not required

Update Node.js

Fix incorrect handling of Unicode characters in exec()

Use Octokit pagination

Updates real world links

v2.10.2

Fix getLocalRef() returns wrong ref

v2.10.1

Improve robustness of change detection

v2.10.0

Add ref input parameter

Fix change detection in PR when pullRequest.changed_files is incorrect

v2.9.3

Fix change detection when base is a tag

... (truncated)

Commits

7b450ff docs: update changelog for v4.0.2 (#318)
9280377 fix: work around git dubious ownership errors in container jobs (#317)
f3ceefd fix: use rev-parse instead of branch --show-current for older git compat (#303)
61f87a1 chore: fix GitHub spelling in logs (#278)
b82ff81 fix warning message (#282)
fbd0ab8 feat: add merge_group event support
efb1da7 feat: add dist/ freshness check to PR workflow
d8f7b06 Merge pull request #302 from dorny/issue-299
addbc14 Update README for v4
9d7afb8 Update CHANGELOG for v4.0.0
Additional commits viewable in compare view

Dankoy · 2026-05-05T13:16:53Z

@dependabot rebase

github-actions · 2026-05-05T13:19:17Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Fail ❌
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

GITHUB_ACTIONS_ZIZMOR

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:50:40
   �[1m�[94m|�[0m
�[1m�[94m50�[0m �[1m�[94m|�[0m       run: echo "individual=${{ toJson(steps.filter.outputs.changes) }}" >> $GITHUB_OUTPUT
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m               �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:73:22
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m73�[0m �[1m�[94m|�[0m         if [ -n "${{ steps.individual.outputs.individual }}" ]; then
   �[1m�[94m|�[0m                      �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:74:27
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m73�[0m �[1m�[94m|�[0m         if [ -n "${{ steps.individual.outputs.individual }}" ]; then
�[1m�[94m74�[0m �[1m�[94m|�[0m           echo 'final=${{ steps.individual.outputs.individual }}' >> $GITHUB_OUTPUT;
   �[1m�[94m|�[0m                           �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:75:24
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m...�[0m
�[1m�[94m75�[0m �[1m�[94m|�[0m         elif [ -n "${{ steps.all.outputs.all }}" ]; then
   �[1m�[94m|�[0m                        �[1m�[94m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:76:27
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m...�[0m
�[1m�[94m76�[0m �[1m�[94m|�[0m           echo 'final=${{ steps.all.outputs.all }}' >> $GITHUB_OUTPUT;
   �[1m�[94m|�[0m                           �[1m�[94m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:82:22
   �[1m�[94m|�[0m
�[1m�[94m82�[0m �[1m�[94m|�[0m       run: echo "${{ steps.final.outputs.final }}"
   �[1m�[94m|�[0m       �[1m�[94m---�[0m            �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m       �[1m�[94m|�[0m
   �[1m�[94m|�[0m       �[1m�[94mthis run block�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[91merror[unpinned-uses]�[0m�[1m: unpinned action reference�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:24:13
   �[1m�[94m|�[0m
�[1m�[94m24�[0m �[1m�[94m|�[0m     - uses: dorny/paths-filter@v4
   �[1m�[94m|�[0m             �[1m�[91m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91maction is not pinned to a hash (required by blanket policy)�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#unpinned-uses�[39m

�[32m10�[39m findings (�[1m�[93m3�[39m suppressed, �[92m6�[39m fixable�[0m): �[35m6�[39m informational, �[36m0�[39m low, �[33m0�[39m medium, �[31m1�[39m high🌈 zizmor v1.23.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/check-changes.yml

Dankoy · 2026-07-14T06:32:21Z

@dependabot rebase

github-actions · 2026-07-14T06:34:28Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Fail ❌
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

GITHUB_ACTIONS_ZIZMOR

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:50:40
   �[1m�[94m|�[0m
�[1m�[94m50�[0m �[1m�[94m|�[0m       run: echo "individual=${{ toJson(steps.filter.outputs.changes) }}" >> $GITHUB_OUTPUT
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m               �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:73:22
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m73�[0m �[1m�[94m|�[0m         if [ -n "${{ steps.individual.outputs.individual }}" ]; then
   �[1m�[94m|�[0m                      �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:74:27
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m73�[0m �[1m�[94m|�[0m         if [ -n "${{ steps.individual.outputs.individual }}" ]; then
�[1m�[94m74�[0m �[1m�[94m|�[0m           echo 'final=${{ steps.individual.outputs.individual }}' >> $GITHUB_OUTPUT;
   �[1m�[94m|�[0m                           �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:75:24
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m...�[0m
�[1m�[94m75�[0m �[1m�[94m|�[0m         elif [ -n "${{ steps.all.outputs.all }}" ]; then
   �[1m�[94m|�[0m                        �[1m�[94m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:76:27
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m...�[0m
�[1m�[94m76�[0m �[1m�[94m|�[0m           echo 'final=${{ steps.all.outputs.all }}' >> $GITHUB_OUTPUT;
   �[1m�[94m|�[0m                           �[1m�[94m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:82:22
   �[1m�[94m|�[0m
�[1m�[94m82�[0m �[1m�[94m|�[0m       run: echo "${{ steps.final.outputs.final }}"
   �[1m�[94m|�[0m       �[1m�[94m---�[0m            �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m       �[1m�[94m|�[0m
   �[1m�[94m|�[0m       �[1m�[94mthis run block�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[91merror[unpinned-uses]�[0m�[1m: unpinned action reference�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:24:13
   �[1m�[94m|�[0m
�[1m�[94m24�[0m �[1m�[94m|�[0m     - uses: dorny/paths-filter@v4
   �[1m�[94m|�[0m             �[1m�[91m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91maction is not pinned to a hash (required by blanket policy)�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#unpinned-uses�[39m

�[32m10�[39m findings (�[1m�[93m3�[39m suppressed, �[92m6�[39m fixable�[0m): �[35m6�[39m informational, �[36m0�[39m low, �[33m0�[39m medium, �[31m1�[39m high🌈 zizmor v1.23.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/check-changes.yml

Dankoy · 2026-07-14T06:40:01Z

@dependabot rebase

github-actions · 2026-07-14T06:42:06Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Fail ❌
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

GITHUB_ACTIONS_ZIZMOR

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:50:40
   �[1m�[94m|�[0m
�[1m�[94m50�[0m �[1m�[94m|�[0m       run: echo "individual=${{ toJson(steps.filter.outputs.changes) }}" >> $GITHUB_OUTPUT
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m               �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:73:22
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m73�[0m �[1m�[94m|�[0m         if [ -n "${{ steps.individual.outputs.individual }}" ]; then
   �[1m�[94m|�[0m                      �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:74:27
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m73�[0m �[1m�[94m|�[0m         if [ -n "${{ steps.individual.outputs.individual }}" ]; then
�[1m�[94m74�[0m �[1m�[94m|�[0m           echo 'final=${{ steps.individual.outputs.individual }}' >> $GITHUB_OUTPUT;
   �[1m�[94m|�[0m                           �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:75:24
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m...�[0m
�[1m�[94m75�[0m �[1m�[94m|�[0m         elif [ -n "${{ steps.all.outputs.all }}" ]; then
   �[1m�[94m|�[0m                        �[1m�[94m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:76:27
   �[1m�[94m|�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m       run: |
   �[1m�[94m|�[0m       �[1m�[94m---�[0m �[1m�[94mthis run block�[0m
�[1m�[94m...�[0m
�[1m�[94m76�[0m �[1m�[94m|�[0m           echo 'final=${{ steps.all.outputs.all }}' >> $GITHUB_OUTPUT;
   �[1m�[94m|�[0m                           �[1m�[94m^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[1m�[94minfo[template-injection]�[0m�[1m: code injection via template expansion�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/check-changes.yml:82:22
   �[1m�[94m|�[0m
�[1m�[94m82�[0m �[1m�[94m|�[0m       run: echo "${{ steps.final.outputs.final }}"
   �[1m�[94m|�[0m       �[1m�[94m---�[0m            �[1m�[94m^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[94mmay expand into attacker-controllable code�[0m
   �[1m�[94m|�[0m       �[1m�[94m|�[0m
   �[1m�[94m|�[0m       �[1m�[94mthis run block�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#template-injection�[39m

�[32m10�[39m findings (�[1m�[93m1�[39m ignored, �[93m3�[39m suppressed, �[92m5�[39m fixable�[0m): �[35m6�[39m informational, �[36m0�[39m low, �[33m0�[39m medium, �[31m0�[39m high🌈 zizmor v1.23.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/check-changes.yml

Dankoy · 2026-07-14T06:51:32Z

@dependabot rebase

Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 3 to 4. - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@v3...v4) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T06:53:42Z

Super-linter summary

Language	Validation result
BIOME_LINT	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

Dankoy

ok

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 1, 2026

dependabot Bot force-pushed the dependabot/github_actions/dorny/paths-filter-4 branch from 73202e8 to c2a0cda Compare May 5, 2026 13:17

dependabot Bot force-pushed the dependabot/github_actions/dorny/paths-filter-4 branch from c2a0cda to fc8d0ef Compare July 14, 2026 06:32

dependabot Bot force-pushed the dependabot/github_actions/dorny/paths-filter-4 branch from fc8d0ef to 8852c9f Compare July 14, 2026 06:40

Dankoy self-assigned this Jul 14, 2026

Dankoy added this to @Dankoy's jforwarder Jul 14, 2026

Dankoy moved this to In Progress in @Dankoy's jforwarder Jul 14, 2026

Dankoy self-requested a review July 14, 2026 06:51

dependabot Bot force-pushed the dependabot/github_actions/dorny/paths-filter-4 branch from 8852c9f to 20ec3b9 Compare July 14, 2026 06:52

Dankoy approved these changes Jul 15, 2026

View reviewed changes

Dankoy merged commit a77194f into main Jul 15, 2026
13 checks passed

github-project-automation Bot moved this from In Progress to Done in @Dankoy's jforwarder Jul 15, 2026

Dankoy deleted the dependabot/github_actions/dorny/paths-filter-4 branch July 15, 2026 07:59

Navigation Menu

build(deps): bump dorny/paths-filter from 3 to 4 - #314

build(deps): bump dorny/paths-filter from 3 to 4#314
Dankoy merged 1 commit into
mainfrom
dependabot/github_actions/dorny/paths-filter-4

dependabot Bot commented on behalf of github Apr 1, 2026 •

edited

Loading

Uh oh!

Dankoy commented May 5, 2026

Uh oh!

github-actions Bot commented May 5, 2026

Uh oh!

Dankoy commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Dankoy commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Dankoy commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Dankoy left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.0.0

What's Changed

New Contributors

v3.0.3

What's Changed

New Contributors

v3.0.2

What's Changed

New Contributors

v3.0.1

What's Changed

New Contributors

Changelog

v4.0.2

v4.0.1

v4.0.0

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

v2.10.1

v2.10.0

v2.9.3

Uh oh!

Dankoy commented May 5, 2026

Uh oh!

github-actions Bot commented May 5, 2026

Super-linter summary

Uh oh!

Dankoy commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

Dankoy commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

Dankoy commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

Dankoy left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 1, 2026 •

edited

Loading