From ab0cd1a3e0bd6806e7149fc4a6810ede7ed3ab19 Mon Sep 17 00:00:00 2001 From: LCV-Ideas-Software Date: Sun, 18 Oct 2026 05:59:47 -0300 Subject: [PATCH] chore(actions): update Zizmor Action to v0.7.1 --- .github/workflows/zizmor.yml | 4 +++- CHANGELOG.md | 2 +- workflow-templates/zizmor.yml | 4 +++- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 130acec..5bab360 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -33,4 +33,6 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@f9597c869b2e67095f9b527070297a13a6efe928 # v0.7.0 + uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1 + with: + version: 1.31.1 diff --git a/CHANGELOG.md b/CHANGELOG.md index ad0b144..87b8c54 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -23,7 +23,7 @@ presentation rule this organization applies to text meant for people - Reconcile the current inventory to 1 public, 2 internal and 18 private repositories; identify private product repositories and preserve identical public site content in both governance repositories. Update current Android product and license descriptions to the verified 12 October 2026 releases, distinguishing production from internal testing and preserving third-party rights and prior grants. Identify the four private, empty iOS repositories as future work without claiming implemented applications or licenses (LCV-358). -- Update the official CodeQL SARIF upload Action to v4.39.0 and Zizmor Action to v0.7.0 in local and starter workflows, using their complete stable release commit SHAs (LCV-407). +- Update the official CodeQL SARIF upload Action to v4.39.0 (LCV-407) and Zizmor Action to v0.7.1 (LCV-411) in local and starter workflows, using their complete stable release commit SHAs. - Publish privacy policy 1.6 (`site/privacy/index.html`, in force from 11/10/2026): the Maestro is now published on Google Play, so its row in the section 2 table points to section 6 of the policy, like the Calculadora's, instead of saying it is under review there; and version 1.5 stays available unchanged at its permanent address, `site/privacy/1.5/` (LCV-351). - Publish privacy policy 1.5 (`site/privacy/index.html`, in force from 08/10/2026): the Calculadora's Google Play target audience is now adults only (18 and over), with Google Play's minor access restriction, as the Maestro's already was; the Yahoo privacy policy link now opens the policy itself instead of Yahoo's general legal page; and version 1.4 stays available unchanged at its permanent address, `site/privacy/1.4/` (LCV-340). diff --git a/workflow-templates/zizmor.yml b/workflow-templates/zizmor.yml index 9eff79f..c1af131 100644 --- a/workflow-templates/zizmor.yml +++ b/workflow-templates/zizmor.yml @@ -43,4 +43,6 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@f9597c869b2e67095f9b527070297a13a6efe928 # v0.7.0 + uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1 + with: + version: 1.31.1