chore(deps): all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
crate-ci/typos	action	minor	v1.24.4 -> v1.27.3
mvdan/sh		minor	3.9.0 -> 3.10.0
rhysd/actionlint		patch	1.7.1 -> 1.7.4

---

Release Notes

crate-ci/typos (crate-ci/typos)

v1.27.3

Compare Source

[1.27.3] - 2024-11-08

Fixes

• Don't correct alloced
• Don't correct registor, a more domain specific variant of register

v1.27.2

Compare Source

[1.27.2] - 2024-11-06

Fixes

• Correct fand

v1.27.1

Compare Source

[1.27.1] - 2024-11-06

Fixes

• Correct alingment as alignment, rather than alinement

v1.27.0

Compare Source

[1.27.0] - 2024-11-01

Features

• Updated the dictionary with the October 2024 changes

v1.26.8

Compare Source

[1.26.8] - 2024-10-24

v1.26.7

Compare Source

v1.26.6

Compare Source

v1.26.5

Compare Source

v1.26.4

Compare Source

v1.26.3

Compare Source

[1.26.3] - 2024-10-24

Fixes

• Accept additionals

v1.26.2

Compare Source

[1.26.2] - 2024-10-24

Fixes

• Accept tesselate variants

v1.26.1

Compare Source

[1.26.1] - 2024-10-23

Fixes

• Respect --force-exclude for binary files

v1.26.0

Compare Source

[1.26.0] - 2024-10-07

Compatibility

• (pre-commit) Requires 3.2+

Fixes

• (pre-commit) Resolve deprecations in 4.0 about deprecated stage names

v1.25.0

Compare Source

[1.25.0] - 2024-10-01

Fixes

• Updated the dictionary with the September 2024 changes

v1.24.6

Compare Source

[1.24.6] - 2024-09-16

Fixes

• Respect negation (!) in extend-exclude

v1.24.5

Compare Source

[1.24.5] - 2024-09-04

Features

• (action) Support windows

mvdan/sh (mvdan/sh)

v3.10.0

Compare Source

• cmd/shfmt
  • Report the correct language variant in parser error messages - #​1102
  • Move --filename out of the parser options category - #​1079
• syntax
  • Parse all CRLF line endings as LF, including inside heredocs - #​1088
  • Count skipped backslashes inside backticks in position column numbers - #​1098
  • Count skipped null bytes in position column numbers for consistency
• interp
  • Fix a regression in v3.9.0 which broke redirecting files to stdin - #​1099
  • Fix a regression in v3.9.0 where HandlerContext.Stdin was never nil
  • Add an Interactive option to be used by interactive shells - #​1100
  • Support closing stdin, stdout, and stderr via redirections like <&-

Consider becoming a sponsor if you benefit from the work that went into this release!

rhysd/actionlint (rhysd/actionlint)

v1.7.4

Compare Source

• Disallow the usage of popular actions that run on node16 runner. The node16 runner will reach the end of life on November 12.
  • In case of the error, please update your actions to the latest version so that they run on the latest node20 runner.
  • If you're using self-hosted runner and you cannot upgrade your runner to node20 soon, please consider to ignore the error by the paths configuration described below.
• Provide the configuration for ignoring errors by regular expressions in actionlint.yml (or actionlint.yaml). Please see the document for more details. (#​217, #​342)
  • The paths is a mapping from the file path glob pattern to the corresponding configuration. The ignore configuration is a list of regular expressions to match error messages (similar to the -ignore command line option).

    paths:

This pattern matches any YAML file under the '.github/workflows/' directory.

  .github/workflows/**/*.yaml:
    ignore:

Ignore the specific error from shellcheck

      - 'shellcheck reported issue in this script: SC2086:.+'

This pattern only matches '.github/workflows/release.yaml' file.

  .github/workflows/self-hosted.yaml:
    ignore:

Ignore errors from the old runner check. This may be useful for (outdated) self-hosted runner environment.

      - 'the runner of ".+" action is too old to run on GitHub Actions'
```

• This configuration was not implemented initially because I wanted to keep the configuration as minimal as possible. However, due to several requests for it, the configuration has now been added.
• Untrusted inputs check is safely skipped inside specific function calls. (#​459, thanks @​IlyaGulya)
  • For example, the following step contains the untrusted input github.head_ref, but it is safe because it's passed to the contains() argument.

    - run: echo "is_release_branch=${{ contains(github.head_ref, 'release') }}" >> "$GITHUB_OUTPUT"

  • For more details, please read the rule document.
• Recognize gcr.io and gcr.dev as the correct container registry hosts. (#​463, thanks @​takaidohigasi)
  • Note that it is recommended explicitly specifying the scheme like docker://gcr.io/....
• Remove macos-x.0 runner labels which are no longer available. (#​452)
• Disable shellcheck SC2043 rule because it can cause false positives on checking run:. (#​355)
  • The rule document was updated as well. (#​466, thanks @​risu729)
• Fix the error message was not deterministic when detecting cycles in needs dependencies.
• Fix the check for format() function was not applied when the function name contains upper case like Format(). Note that function names in ${{ }} placeholders are case-insensitive.
• Update the popular actions data set to the latest.
  • This includes the new ref and commit outputs of actions/checkout.
• Add actions/cache/save and actions/cache/restore to the popular actions data set.
• Links in the README.md now point to the document of the latest version tag instead of HEAD of main branch.
• Add Linter.LintStdin method dedicated to linting STDIN instead of handling STDIN in Command.
• (Dev) Add new check-checks script to maintain the 'Checks' document. It automatically updates the outputs and playground links for example inputs in the document. It also checks the document is up-to-date on CI. Please read the document for more details.

Documentation

[Changes][v1.7.4]

v1.7.3

Compare Source

• Remove macos-11 runner labels because macOS 11 runner was dropped on 6/28/2024. (#​451, thanks @​muzimuzhi)
• Support macos-15, macos-15-large, and macos-15-xlarge runner labels. The macOS 15 runner is not globally available yet, but they are available in beta. (#​453, thanks @​muzimuzhi)
• Release artifact includes checksums for the released binaries. The file name is actionlint_{version}_checksums.txt. (#​449)
  • For example, the checksums for v1.7.3 can be found here.
• Fix download-path output is missing in actions/download-artifact@v3 action. (#​442)
  • Note that the latest version actions/download-artifact@v4 was not affected by this issue.
• Support Go 1.23.

Documentation

[Changes][v1.7.3]

v1.7.2

Compare Source

• Fix child processes to run in parallel.
• Update the popular actions data set to the latest. (#​442, #​445, #​446, #​447, thanks @​maikelvdh)
• Add support for checking branch filters on merge_group event. (#​448, thanks @​muzimuzhi)
• The playground now supports both light and dark modes and automatically applies the system's theme.
• Fix releasing a failure on making a new winget package. (#​438, thanks @​vedantmgoyal9)

[Changes][v1.7.2]

---

• If you want to rebase/retry this PR, check this box