actionlint v1.7.9

v1.7.9
Added 7
  • Support for ubuntu-slim runner label
  • Check input deprecation in action by checking deprecationMessage property and report using a deprecated input as error if it is not marked as required
  • Support for image_version workflow trigger
  • Support for jobs.<job_id>.snapshot syntax for custom image generation runners
  • Report constant conditions at if: like if: true as error
  • Check unexpected keys in inputs in action metadata
  • Add actionlint.AllContexts map constant in Go API containing information about all context availability
Changed 4
  • Improve messages in syntax errors on parsing steps with more accurate available keys suggestion and better detection of unexpected keys
  • Improve error messages showing suggestions on detecting invalid permissions
  • Update popular actions data set to the latest with several major versions of actions and new actions including anthropics/claude-code-action, openai/codex-action, and google-github-actions/run-gemini-cli
  • Make installing the formula version of actionlint package from tap of this repository with Homebrew a hard error
Fixed 5
  • Fix some invalid permissions are not reported as error in id-token and models scopes
  • Fix args and entrypoint inputs are not recognized at uses: when it is not a Docker action
  • Set correct column in source position of YAML parse error
  • Fix credentials cannot be configured with ${{ }}
  • Fix the order of errors can be non-deterministic when multiple errors are caused at the same source positions

From actionlint

  • Add support for ubuntu-slim runner label. (#585, thanks @cestorer)
  • Check input deprecation in action by checking deprecationMessage property. Using a deprecated input is reported as error if it is not marked as required. See the document for more details. (#580) 
    - uses: reviewdog/action-actionlint@v1
  with:
    # ERROR: Using a deprecated input
    fail_on_error: true
  • Add support for the Custom images feature.
  • Report constant conditions at if: like if: true as error. Only very simple expressions like true or false are detected for now. See the document for more details.
  • Check unexpected keys in inputs in action metadata. 
    inputs:
  some_input:
    # Error: `type` is not supported for inputs in action metadata
    type: boolean
  • Fix some invalid permissions are not reported as error in id-token and models scopes. (#582, thanks @holtkampjs)
  • Fix args and entrypoint inputs are not recognized at uses: when it's not a Docker action. (#550)
  • Set correct column in source position of YAML parse error.
  • Fix credentials cannot be configured with ${{ }}. (#590)
  • Improve messages in syntax errors on parsing steps (run: and uses:). Available keys suggestion is now more accurate and unexpected keys are detected more accurately.
  • Fix the order of errors can be non-deterministic when multiple errors are caused at the same source positions.
  • Improve error messages showing suggestions on detecting invalid permissions.
  • Add instruction for installing actionlint with mise package manager. (#589, thanks @jylenhof)
  • Fix outdated URLs in the document.
  • Add new actionlint.AllContexts map constant in Go API that contains the information about all context availability.
  • Update popular actions data set to the latest with several major versions of actions and the following new actions.
    • anthropics/claude-code-action
    • openai/codex-action
    • google-github-actions/run-gemini-cli
  • Add make cov task to easily generate a code coverage report.
  • Make installing the formula version of actionlint pacakge from tap of this repository with Homebrew a hard error. Install the cask version instead following the instruction in the error message.
View original

Upgraded? How did it go?

Discussion