Repository navigation
Update rojopolis/spellcheck-github-actions action to v0.69.0 - #80
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Memory usage change @ 68a4c51
Click for full report table
Click for full report CSV |
renovate
Bot
force-pushed
the
renovate/rojopolis-spellcheck-github-actions-0.x
branch
from
October 24, 2026 16:27
68a4c51 to
5a660ee
Compare
|
Memory usage change @ 5a660ee
Click for full report table
Click for full report CSV |
renovate
Bot
force-pushed
the
renovate/rojopolis-spellcheck-github-actions-0.x
branch
from
November 3, 2026 11:56
5a660ee to
974d28e
Compare
|
Memory usage change @ 974d28e
Click for full report table
Click for full report CSV |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.64.0→0.69.0Release Notes
rojopolis/spellcheck-github-actions
v0.69.0Compare Source
Docker image updated to Python 3.14.9-slim-trixie via PR #417 from Dependabot. Python 3.14.9 is an expedited security release that upgrades the bundled
pipto26.2.2(includingcertifi2026.10.19) in response to the eMudhra / emSign CA certificate incident, see the Python 3.14.9 release notes. Users of the prebuilt action are not affected in ordinary spellchecking; users who rebuild the image from theDockerfileor runpipinside it are recommended to update.Bumped
docker/login-actionfrom4.6.0to4.7.0in the Docker build workflow via PR #416 from Dependabot.v0.68.0Compare Source
Refreshed transitive Python dependency pins via PR #410:
beautifulsoup44.12.3to4.15.0,Markdown3.8.1to3.11.2,lxml6.1.1to6.1.3,bracex3.0.1to3.2,wcmatch11.0to11.2,PyYAML6.0.2to6.0.3,six1.16.0to1.17.0, andwebencodings0.5.1to0.6.1. Also pulls in a new transitive dependency,typing-extensions4.16.0, now required by the newerbeautifulsoup4. None of these are pinned inrequirements.in, so this is the same refresh Dependabot would otherwise have produced piecemeal under itslockfile-onlystrategy.Bumped
pymdown-extensionsfrom11.0.1to12.3via PR #411. This is a major version bump with a documentedBREAKinpymdown-extensions12.0:BetterEm,Tilde,Caret, andMarkwere rewritten with different nesting/escaping semantics. This repository's own pipeline configuration (spellcheck.yaml,examples/markdown.yml) only enablespymdownx.superfences, which is unaffected by that break and only gained new features across this range (aresethook in12.1,title_modein12.2/12.3).pyspellingitself does not depend onpymdown-extensions.v0.67.0Compare Source
Docker image updated to Python 3.14.8-slim-trixie via PR #406 from Dependabot.
Bumped the core component PySpelling from
2.12.1to2.13via PR #407. This release of PySpelling adds support for Python 3.15, drops support for Python 3.9 and 3.10, and introduces a newcss_nostrictoption for the XML/HTML filter to allow more relaxed CSS rules givensoupsieve's new stricter defaults. This repository's ownpyspelling.filters.htmlconfiguration (type selectors only) is unaffected, so the new option was not adopted. Pulls insoupsievebumped from2.9.2to3.0.4transitively. See the release notes for PySpelling 2.13.v0.66.0Compare Source
v0.65.0Compare Source
Bumped
lxmlfrom5.4.0to6.1.1to address CVE-2026-41066 (XXE viaiterparse()/ETCompatXMLParserdefaultingresolve_entities=True) and libxslt vulnerabilities CVE-2025-7424 and CVE-2025-11731, via PR #388 from Dependabot.Bumped
pymdown-extensionsfrom10.21.3to11.0.1to address CVE-2026-67422 (ReDoS in the caret, tilde, betterem, and magiclink inline processors) and CVE-2026-61632 (path traversal in theb64extension).Bumped
soupsievefrom2.6to2.9.2to address CVE-2026-49476 (memory exhaustion via large comma-separated selector lists) and CVE-2026-49477 (ReDoS via the selector parser).Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.