Repository navigation
build(deps): bump typos, editorconfig-checker, markdownlint-cli2, check-jsonschema defaults #628
Description
Four tool defaults in the composite actions at v0.29.1 (0d3e6a6f3851cf678f82fa9a8a17f10faa909ac9) trail their latest upstream releases:
| Tool | Action | v0.29.1 default | Latest upstream |
|---|---|---|---|
| typos | .github/actions/typos |
1.50.1 | 1.50.3 |
| editorconfig-checker | .github/actions/editorconfig |
3.11.2 | 4.0.2 (major) |
| markdownlint-cli2 | .github/actions/markdown |
0.23.2 | 0.23.3 |
| check-jsonschema | .github/actions/check-jsonschema |
0.38.0 | 0.38.2 |
gitleaks 8.30.1, lychee 0.24.2, actionlint 1.7.12 and shellcheck 0.11.0 are already current.
Consumers such as melodic-software/.github pin their local tool installs (.cursor/install.sh) to these defaults so local checks match CI, so the bump has to land here rather than downstream. editorconfig-checker 4.x is a major version; check its release notes for config or CLI changes before bumping.
Found during the hygiene sweep in melodic-software/.github#153.
🤖 Generated with Claude Code
Activity
build(deps): bump typos and check-jsonschema defaults (#631)
build(editorconfig)!: upgrade editorconfig-checker to 4.0.2 (#632)
kyle-sexton commentedon Sep 28, 2026
Status: typos and check-jsonschema landed in #631, and editorconfig-checker 4.0.2 in #632 (released in v0.30.0). The markdownlint-cli2 bump to 0.23.3 is still open. Per the pin rule in
.github/actions/markdown/action.yml, it followsstandards: that repo's Dependabot (npm, weekly, 7-day cooldown,.github/dependabot.yml:33-47) had not opened the 0.23.3 PR as of 2026-09-28, and standardspackage.jsonis still at 0.23.2. Once it merges there, bump the action default and the$schemaURL in.markdownlint-cli2.jsonctogether, then close this issue.chore(cursor): resync install.sh tool pins with ci-workflows v0.27.1 (#…