JorisJonkers-dev · ExtraToast · Aug 29, 2026 · Aug 29, 2026
diff --git a/.github/workflows/deploy-artifact.yml b/.github/workflows/deploy-artifact.yml
@@ -92,7 +92,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/deploy-bundle.yml b/.github/workflows/deploy-bundle.yml
@@ -63,7 +63,7 @@ name: 'Deploy Bundle'
       - 'uses': 'actions/checkout@v7'
         'with':
           'repository': 'JorisJonkers-dev/github-workflows'
-          'ref': 'v0.16.1' # x-release-please-version
+          'ref': 'v0.17.0' # x-release-please-version
           'path': '.github-workflows'
           'persist-credentials': false
 

diff --git a/.github/workflows/deploy-config-render-drift.yml b/.github/workflows/deploy-config-render-drift.yml
@@ -58,7 +58,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/deploy-sources-render.yml b/.github/workflows/deploy-sources-render.yml
@@ -83,7 +83,7 @@ name: 'Deploy Sources Render'
       - 'uses': 'actions/checkout@v7'
         'with':
           'repository': 'JorisJonkers-dev/github-workflows'
-          'ref': 'v0.16.1' # x-release-please-version
+          'ref': 'v0.17.0' # x-release-please-version
           'path': '.github-workflows'
           'persist-credentials': false
 

diff --git a/.github/workflows/deploy-validate.yml b/.github/workflows/deploy-validate.yml
@@ -64,7 +64,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/flux-render-validate.yml b/.github/workflows/flux-render-validate.yml
@@ -58,7 +58,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/gitops-ci.yml b/.github/workflows/gitops-ci.yml
@@ -65,7 +65,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/jvm-ci.yml b/.github/workflows/jvm-ci.yml
@@ -62,7 +62,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 
@@ -86,7 +86,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/leak-scan.yml b/.github/workflows/leak-scan.yml
@@ -65,7 +65,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/migration-guard.yml b/.github/workflows/migration-guard.yml
@@ -57,7 +57,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml
@@ -94,7 +94,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/platform-config-validate.yml b/.github/workflows/platform-config-validate.yml
@@ -67,7 +67,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.github/workflows/publish-api-clients.yml b/.github/workflows/publish-api-clients.yml
@@ -66,7 +66,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: v0.16.1 # x-release-please-version
+          ref: v0.17.0 # x-release-please-version
           path: .github-workflows
           persist-credentials: false
 

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.16.1"
+  ".": "0.17.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,22 @@
 * enforce zero-warning reusable CI gates for Node, Nix, Python, and JVM workflows
 * fail Gradle warnings and deprecations while making JVM lint static-only by default
 
+## [0.17.0](https://github.com/JorisJonkers-dev/github-workflows/compare/v0.16.1...v0.17.0) (2026-08-29)
+
+
+### Features
+
+* **add-to-project:** add a manual recovery hatch ([#111](https://github.com/JorisJonkers-dev/github-workflows/issues/111)) ([744261c](https://github.com/JorisJonkers-dev/github-workflows/commit/744261c3b34b2d089a0a65fff080b398add3af76))
+* **add-to-project:** add an org-wide backfill scope ([#124](https://github.com/JorisJonkers-dev/github-workflows/issues/124)) ([592d6df](https://github.com/JorisJonkers-dev/github-workflows/commit/592d6df404471d7fdb2587b071edac4271793937)), closes [#122](https://github.com/JorisJonkers-dev/github-workflows/issues/122)
+* **hygiene:** add an advisory org-wide repository hygiene sweep ([#125](https://github.com/JorisJonkers-dev/github-workflows/issues/125)) ([345d473](https://github.com/JorisJonkers-dev/github-workflows/commit/345d473dad8dcd606c44022b3d56c108d358da6d)), closes [#123](https://github.com/JorisJonkers-dev/github-workflows/issues/123)
+
+
+### Bug Fixes
+
+* **leak-scan:** exclude the action's own checkout from the deny-list scan ([#109](https://github.com/JorisJonkers-dev/github-workflows/issues/109)) ([5dfb39d](https://github.com/JorisJonkers-dev/github-workflows/commit/5dfb39d326130059e86b2808e948e62e37b8ff7b))
+* **leak-scan:** repair four rules that could never fire ([#127](https://github.com/JorisJonkers-dev/github-workflows/issues/127)) ([300e8af](https://github.com/JorisJonkers-dev/github-workflows/commit/300e8af5256ff419adea3a4b309c91e848a631c3))
+* **renovate:** drop the deprecated match keys that break config validation ([#112](https://github.com/JorisJonkers-dev/github-workflows/issues/112)) ([d9027a8](https://github.com/JorisJonkers-dev/github-workflows/commit/d9027a8b8dbf4a387617772616e4c4185355982c))
+
 ## [0.16.1](https://github.com/JorisJonkers-dev/github-workflows/compare/v0.16.0...v0.16.1) (2026-08-20)