chore(deps): update linters by renovate-sh-app[bot] · Pull Request #375 · grafana/flint

renovate-sh-app · 2026-06-29T01:28:37Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change	Pending
actionlint	patch	`1.7.10` → `1.7.12`
aqua:jonwiggins/xmloxide	patch	`0.4.2` → `0.4.3`
aqua:owenlamont/ryl	minor	`0.8.0` → `0.21.0`
biome	minor	`2.4.12` → `2.5.1`
editorconfig-checker	minor	`v3.6.1` → `3.7.0`	`3.8.0`
golangci-lint	patch	`2.12.1` → `2.12.2`
npm:renovate (source)	minor	`43.150.0` → `43.245.0`	`43.249.5` (+10)
ruff	patch	`0.15.12` → `0.15.20`
rumdl	minor	`0.1.78` → `0.2.24`	`v0.2.27` (+2)
typos	minor	`1.46.0` → `1.47.2`	`1.48.0`
zizmor	minor	`1.25.2` → `1.26.1`

Release Notes

rhysd/actionlint (actionlint)

`v1.7.12`

Compare Source

Support the timezone configuration in on.schedule with checks for IANA timezone string. See the documentation for more details. Note that actionlint starts to embed the timezone database in the executables from this version so the binary sizes slightly increase. (#641, thanks @martincostello)
```
on:
  schedule:
    # ERROR: The timezone is not a valid IANA timezone string
    - cron: '*/5 * * * *'
      timezone: 'Asia/Somewhere'
```
Support the jobs.<job_name>.environment.deployment configuration. (#639, thanks @springmeyer)
Support the macos-26-intel runner label. (#629, thanks @hugovk)
Fix the table of webhook activity types are outdated by rebuilding the script to scrape the table from scratch.
Support Go 1.26 and drop the support for Go 1.24. Now supported versions are 1.25 and 1.26.
Tests are run on arm64 Windows in CI.
Update the popular actions data set to the latest.

[Changes][v1.7.12]

`v1.7.11`

Compare Source

Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @heppu)

env:
  # ERROR: case() requires an odd number of arguments
  ENVIRONMENT: |-
    ${{ case(
      github.ref == 'refs/heads/main', 'production',
      github.ref == 'refs/heads/staging', 'staging'
    ) }}

Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @hugovk and @muzimuzhi)

Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @takaram)

$ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
$ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
Loaded 1 attestation from GitHub API

The following policy criteria will be enforced:
- Predicate type must match:................ https://slsa.dev/provenance/v1
- Source Repository Owner URI must match:... https://github.com/rhysd
- Source Repository URI must match:......... https://github.com/rhysd/actionlint
- Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
- OIDC Issuer must match:................... https://token.actions.githubusercontent.com

✓ Verification succeeded!

The following 1 attestation matched the policy criteria

- Attestation #&#8203;1
  - Build repo:..... rhysd/actionlint
  - Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
  - Signer repo:.... rhysd/actionlint
  - Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11

Report path filters with ./ as error because they never match anything. (#521)

on:
  push:
    paths:
      # ERROR: This never matches anything. `foo/bar.txt` is correct.
      - ./foo/bar.txt

Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @michaelgruenewald)
Fix stack overflow crash by a recursive anchor in matrix items. (#610)
Fix an unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)
Reduce the number of memory allocations on resolving anchors.
Update the popular actions data set to the latest.
Update Go dependencies to the latest.
Remove legacy Homebrew formula in rhysd/actionlint repository in favor of the cask package. Note that this change does not affect Homebrew's official formula.
Add a link to the release page of the version in the playground.

[Changes][v1.7.11]

jonwiggins/xmloxide (aqua:jonwiggins/xmloxide)

`v0.4.3`

Compare Source

Fixed

Exclusive C14N: emit xmlns="" default-namespace undeclaration when an
element with no default namespace is canonicalized inside scope of an
inherited default namespace (#16, thanks @williamareynolds). Previously the
undeclaration was only emitted in inclusive C14N. Per Canonical XML 1.0 §2.3
(inherited by Exclusive C14N §3), the empty default namespace must be made
explicit so the canonical form correctly reflects the element's namespace
context.

CI / Maintenance

Bump actions/checkout 4.3.1 → 6.0.2 across all workflows (#14)
Bump actions/download-artifact v4 → v8.0.1 in release workflow (#13)
Bump actions/upload-artifact v4 → v7.0.1 in release workflow (#15)
Bump softprops/action-gh-release v2 → v3.0.0 in release workflow (#12)
Bump taiki-e/install-action 2.75.19 → 2.75.26 in release workflow (#17)
Remove bench.yml workflow — the regression check required a gh-pages
branch that was never created, so it had been failing on every PR. Run
benchmarks locally with cargo bench.

owenlamont/ryl (aqua:owenlamont/ryl)

`v0.21.0`

Compare Source

What's Changed

ci: run the lychee link check via the lychee-pre-commit mirror hook by @owenlamont in #367
docs: add winget-defender-fp dev skill for winget Defender FP triage by @owenlamont in #368
feat: add ryl check lint subcommand (#369) by @owenlamont in #370

Full Changelog: owenlamont/ryl@v0.20.0...v0.21.0

`v0.20.0`

Compare Source

What's Changed

Bump the "dependencies" group with 1 update across multiple ecosystems by @dependabot[bot] in #341
ci: auto-bump the pinned wingetcreate version (#339) by @owenlamont in #343
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #344
ci: use client-id instead of deprecated app-id for app-token (#345) by @owenlamont in #346
docs: generalize the codex-review skill and scope the release benchmark refresh by @owenlamont in #348
docs: add guide for using ryl with YAML formatters (#186) by @owenlamont in #347
fix: bump granit to 0.0.6 and close a %TAG-split tags-rule evasion (#352) by @owenlamont in #356
test: validate docs config examples against ryl's loader (#349) by @owenlamont in #357
ci: add lychee documentation link checker (#350) by @owenlamont in #359
refactor: pare comments to the sharpened standard and gate the comment-to-code ratio (#354) by @owenlamont in #360
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #362
feat: respect the %YAML version directive across rules (#351) by @owenlamont in #363
chore: refresh benchmark image and dev skills for v0.20.0 by @owenlamont in #364

Full Changelog: owenlamont/ryl@v0.19.1...v0.20.0

`v0.19.1`

Compare Source

What's Changed

Re-enable winget publishing and bump to 0.19.1 by @owenlamont in #338

Full Changelog: owenlamont/ryl@v0.19.0...v0.19.1

`v0.19.0`

Compare Source

What's Changed

feat(config): discover repo-local .config/ ryl config (#218) by @owenlamont in #331
feat(config): restrict YAMLLINT_CONFIG_FILE to yamllint YAML configs by @owenlamont in #333
v0.19.0: config-precedence diagram, benchmark refresh, version bump by @owenlamont in #335

Full Changelog: owenlamont/ryl@v0.18.1...v0.19.0

`v0.18.1`

Compare Source

What's Changed

fix(lsp): emit one diagnostics channel per client (#323) by @owenlamont in #324
ci: publish SHA256SUMS with each release (#322) by @owenlamont in #325
v0.18.1: bump version, run CI coverage once (#326), combine dependency updates by @owenlamont in #327
Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in #328

Full Changelog: owenlamont/ryl@v0.18.0...v0.18.1

`v0.18.0`

Compare Source

What's Changed

Publish ryl to winget via wingetcreate on release by @owenlamont in #312
Add conda-forge install instructions to docs by @owenlamont in #313
Add ryl server language server (LSP) by @owenlamont in #316
Add LSP nice-to-have features (#317) by @owenlamont in #318
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #314
codex-review-watch: detect Codex's auto-started first review (#319) by @owenlamont in #320
v0.18.0: language server release; temporarily disable winget by @owenlamont in #321

Full Changelog: owenlamont/ryl@v0.17.0...v0.18.0

`v0.17.0`

Compare Source

What's Changed

Add shell completions (--generate-completions) by @owenlamont in #300
Add JUnit XML and GitLab code-quality output formats (#285) by @owenlamont in #301
Multi-target output: repeatable --format/--output-file + TOML [output] (closes #285) by @owenlamont in #303
User-global config: ryl-native path + --migrate-user-config (#304) by @owenlamont in #307
Document the explicit+local config model and reject unrecognised top-level TOML keys by @owenlamont in #308
Extract AGENTS.md procedures into dev skills + dogfood ryl 0.16.0 (#306) by @owenlamont in #309
Make ryl agent-friendly for downstream consumers: skill + docs page + llms.txt (#305) by @owenlamont in #310
v0.17.0: version bump, DRY cleanup, and retrospective-driven dev-process improvements by @owenlamont in #311

Full Changelog: owenlamont/ryl@v0.16.0...v0.17.0

`v0.16.0`

Compare Source

What's Changed

Treat a bare \r as a YAML 1.2 line break everywhere by @owenlamont in #287
Add per-line-ignores config mechanism (#258) by @owenlamont in #288
Add comments-indentation: allow-any-open-indent option (#259) by @owenlamont in #289
Add hyphens: dash-on-own-line option (#260) by @owenlamont in #293
Add cargo audit prek hook + CI install step by @owenlamont in #295
build(deps): bump the actions-dependencies group with 3 updates by @dependabot[bot] in #292
Bump to 0.16.0 and consolidate YAML line-break handling by @owenlamont in #296

Full Changelog: owenlamont/ryl@v0.15.0...v0.16.0

`v0.15.0`

Compare Source

What's Changed

Add --diff flag previewing safe fixes as a unified diff (closes #269) by @owenlamont in #282
Add block-scalar-chomping rule by @owenlamont in #286

Full Changelog: owenlamont/ryl@v0.14.0...v0.15.0

`v0.14.0`

Compare Source

What's Changed

ci: request workflows permission for the SchemaStore-sync app token by @owenlamont in #265
docs: correct stale empty preset references for TOML by @owenlamont in #266
Add canonical and merge-collision detection to key-duplicates (closes #252) by @owenlamont in #267
Add unicode-line-breaks rule; gate --fix on parseable YAML (closes #253) by @owenlamont in #270
Use granit tag metadata in tags rule (closes #271) by @owenlamont in #272
Fix colons false positive on alias mapping keys (closes #254) by @owenlamont in #273
Add anchors ambiguous-name option; rewrite detection on granit tokens (closes #255) by @owenlamont in #275
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #274
Add merge-keys rule flagging << merge keys (closes #256) by @owenlamont in #276
Recognise verbatim core-schema tags via shared core_schema_suffix helper by @owenlamont in #278
Pre-0.14.0 cleanup: lint dispatch macro, shared test harness, rule docs (#277) by @owenlamont in #279
Bump version to 0.14.0 by @owenlamont in #280

Full Changelog: owenlamont/ryl@v0.13.0...v0.14.0

`v0.13.0`

Compare Source

What's Changed

docs: fix incorrect yaml-files key in TOML config examples by @hituzi-no-sippo in #263
build(deps): bump taiki-e/install-action from 2.79.5 to 2.79.14 in the actions-dependencies group by @dependabot[bot] in #264
Add opt-in tags rule for unsafe and non-portable YAML tags (closes #251) by @owenlamont in #262

New Contributors

@hituzi-no-sippo made their first contribution in #263

Full Changelog: owenlamont/ryl@v0.12.0...v0.13.0

`v0.12.0`

Compare Source

What's Changed

Sync markdown pre-commit docs with ryl-pre-commit's ryl-markdown hook by @owenlamont in #244
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #245
Harden against malicious YAML payloads (closes #246) by @owenlamont in #249
Require explicit rule enablement; drop auto-applied default preset (closes #248) by @owenlamont in #250

Full Changelog: owenlamont/ryl@v0.11.0...v0.12.0

`v0.11.0`

Compare Source

⚠️ Breaking changes (0.10.2 → 0.11.0)

This release is not purely additive. Before upgrading:

TOML yaml-files is rejected — use [files].yaml instead. A
ryl.toml / .ryl.toml / [tool.ryl] that sets yaml-files = [...] now
fails with exit 2 (yaml-files is not valid in TOML; use [files] with yaml = [...]).
YAML (.yamllint) configs are unaffected, and ryl --migrate-configs
converts it for you.
A file matching no source kind is now an error (exit 2), not a silent skip.
This applies both to files passed explicitly (e.g. ryl README.md,
ryl $(git diff --name-only)) and to ryl - --stdin-filename <non-YAML-path>.
Plain ryl - and the types: [yaml] pre-commit hook are unaffected.
Multibyte column fix — commas / colons / braces / brackets now
report character-based columns. No diagnostics are added or removed, but the
reported col can shift on lines containing multibyte characters.
Inline disable directives are now strictly yamllint-conformant. Malformed
# yamllint disable… comments (extra spaces after #, a missing rule:
prefix, or trailing tokens) are treated as plain comments and no longer
suppress diagnostics, matching yamllint exactly.

New, opt-in and non-breaking: YAML-in-Markdown linting ([files].markdown or
the --markdown flag) and a preferred # ryl … spelling for inline directives
(# yamllint … still works as a compatibility alias).

What's Changed

Lint YAML embedded in Markdown; add [files] source-kind config (closes #222) by @owenlamont in #237
Property tests for rule checkers + char-column fix (closes #239) by @owenlamont in #240
Markdown embedding follow-ups: --fix write-back + stdin + --markdown (closes #236) by @owenlamont in #241
Support inline rule-disable directives globally (closes #242) by @owenlamont in #243

Full Changelog: owenlamont/ryl@v0.10.2...v0.11.0

`v0.10.2`

Compare Source

What's Changed

build(deps): bump taiki-e/install-action from 2.78.1 to 2.79.5 in the actions-dependencies group by @dependabot[bot] in #233
Fix char-index vs byte-offset bugs across rules (closes #232) + release 0.10.2 by @owenlamont in #234
Update Rust toolchain from 1.95.0 to 1.96.0 (closes #231) by @owenlamont in #235

Full Changelog: owenlamont/ryl@v0.10.1...v0.10.2

`v0.10.1`

Compare Source

What's Changed

Phase 1: migrate event-stream parser from saphyr-parser to granit-parser by @owenlamont in #227
Phase 2: vendor saphyr DOM and drop saphyr dependency by @owenlamont in #228
Update Rust toolchain from 1.93.1 to 1.95.0 (closes #229) by @owenlamont in #230

Full Changelog: owenlamont/ryl@v0.10.0...v0.10.1

`v0.10.0`

Compare Source

What's Changed

build(deps): bump the actions-dependencies group with 2 updates by @dependabot[bot] in #219
test: add property-style tests for safe --fix invariants by @owenlamont in #220
Implement partial safe --fix for trailing-spaces, document-start, document-end, empty-lines (closes #221) by @owenlamont in #223
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #224
Add stdin input support via - positional (closes #209) by @owenlamont in #225

Full Changelog: owenlamont/ryl@v0.9.2...v0.10.0

`v0.9.2`

Compare Source

What's Changed

build(deps): bump taiki-e/install-action from 2.75.22 to 2.75.28 in the actions-dependencies group by @dependabot[bot] in #210
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #211
build(deps): bump taiki-e/install-action from 2.75.28 to 2.77.2 in the actions-dependencies group by @dependabot[bot] in #212
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #213
205 create a proper documentation page for ryl by @owenlamont in #215
fix(package): allowlist publish contents and drop dev-only bin by @owenlamont in #216
docs: refresh benchmark image and unpin from a tag by @owenlamont in #217

Full Changelog: owenlamont/ryl@v0.9.1...v0.9.2

`v0.9.1`

Compare Source

What's Changed

Fix quoted-string autofix edge cases by @owenlamont in #207

Full Changelog: owenlamont/ryl@v0.9.0...v0.9.1

`v0.9.0`

Compare Source

What's Changed

Add --fix support for quoted-strings rule by @owenlamont in #202
chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #203

Full Changelog: owenlamont/ryl@v0.8.0...v0.9.0

biomejs/biome (biome)

`v2.5.1`: Biome CLI v2.5.1

Compare Source

2.5.1

Patch Changes

#10722 f8a303d Thanks @denbezrukov! - Fixed CSS formatter output for comments between import media queries.

-@&#8203;import url("print.css") print,
-/* comment */
-screen;
+@&#8203;import url("print.css") print, /* comment */ screen;

#10738 9fdc560 Thanks @JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.
```
-    "path": "src\account\setup-passkey.tsx",
+    "path": "src\\account\\setup-passkey.tsx",
```
#10626 5f837df Thanks @tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.
#10535 c245f9d Thanks @Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.
#10668 a0f197e Thanks @Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.
#10667 d8c3e87 Thanks @Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.
#10696 ef2373f Thanks @ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.
#10705 4ccb410 Thanks @ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.
#10669 aa0a6eb Thanks @Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.
#10689 844b1be Thanks @ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.
#10695 043fbb5 Thanks @ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.
#10712 5941df2 Thanks @Conaclos! - Improved the diagnostic and the documentation of useFlatMap.
#10615 23814f1 Thanks @qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.
#10688 ec69489 Thanks @ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.
#10701 6c2e0d7 Thanks @ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.
#10681 888515b Thanks @Conaclos! - Fixed useExportType that reported useless details in some diagnostics.
#10220 3694a13 Thanks @theBGuy! - Fixed useAnchorContent false positive for <a> elements used as render prop values (e.g. render={<a href="..." />}), a pattern where the receiving component renders its children inside the anchor element.
#10702 98823fb Thanks @ematipico! - Fixed #10612. The Biome parser now correctly parses processing instructions. The following SVG doesn't throw errors anymore:
```
<?xml version="1.0" encoding="UTF-8" ?>

<svg></svg>
```

What's Changed

ci: use tombi from installed from toolchain by @ematipico in #10613
docs: fix duplicate "being" in symlink test comments by @dfedoryshchev in #10611
refactor(core): add biome_languages crate by @ematipico in #10590
fix(migrate): avoid trailing comma when a renamed rule is last in its group by @tom-groves in #10626
chore(deps): update rust:1.96.0-bullseye docker digest to e12c121 by @renovate[bot] in #10641
chore(deps): update dependency @types/node to v24.13.2 by @renovate[bot] in #10642
chore(deps): update github-actions by @renovate[bot] in #10643
chore(deps): update rust crate regex to 1.12.4 by @renovate[bot] in #10644
fix(deps): update dependency prettier to v3.8.4 by @renovate[bot] in #10646
chore(deps): update pnpm to v11.6.0 by @renovate[bot] in #10647
chore(deps): update rust crate insta to 1.48.0 by @renovate[bot] in #10648
chore(deps): update rust crate smallvec to 1.15.2 by @renovate[bot] in #10645
fix(js_analyze): useErrorCause shorthand property by @Netail in #10667
fix(js_analyze): trim useInlineScriptId trivia by @Netail in #10669
chore: dead and old links by @Netail in #10668
docs(useValidAnchor): enhance lint rule explainer by @Th3S4mur41 in #10679
chore(biome_configuration): add allowTrailingCommas to json-schema to make VSCode happy by @qwertycxz in #10615
chore: fixes an internal CVE by @ematipico in #10690
chore(deps): update dependency vite to v7.3.5 [security] by @renovate[bot] in #10691
fix(lsp): shutdown the daemon on disconnect by @ematipico in #10688
fix(lsp): disable go-to definition by default by @ematipico in #10689
refactor(module_graph): preserve same-name function overloads as a set by @IxxyDev in #10585
fix(a11y/useAnchorContent): don't flag elements used as render props by @theBGuy in #10220
docs: fix rustdoc for noImplicitCoercions by @Bertie690 in #10614
fix: level is now mandatory by @ematipico in #10695
fix(html): register {@html} expression as a template reference in Svelte by @Mokto in #10535
fix(lsp): improved configuration loading by @ematipico in #10696
fix: update member creation by @ematipico in #10700
docs(js-api): correct "If" to "It" in BiomeCommon method JSDoc by @dfedoryshchev in #10706
chore(xtask): scaffold global-types codegen and resolver builder by @minseong0324 in #10249
refactor(useExportType): dedup code by @Conaclos in #10681
refactor(useFlatMap): improve docs and diagnostics by @Conaclos in #10712
chore: refactor html a11y test cases by @Netail in #10713
refactor(migrate): remove dead code by @Conaclos in #10717
chore(deps): update github-actions by @renovate[bot] in #10723
fix(lsp): handle navigation result errors by @ematipico in #10701
feat(css_formatter): format import media comments inline by @denbezrukov in #10722
refactor: expose more utilities by @ematipico in #10728
perf(core): save Settings via Arc by @ematipico in #10720
fix(parser): html processing instructions by @ematipico in [#&#8203

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 4am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

| datasource | package | from | to | | --------------- | ----------------------------------------- | -------- | -------- | | github-releases | rhysd/actionlint | 1.7.10 | 1.7.12 | | github-tags | jonwiggins/xmloxide | 0.4.2 | 0.4.3 | | github-tags | owenlamont/ryl | 0.8.0 | 0.21.0 | | github-tags | biomejs/biome | 2.4.12 | 2.5.1 | | github-releases | editorconfig-checker/editorconfig-checker | 3.6.1 | 3.7.0 | | github-tags | golangci/golangci-lint | 2.12.1 | 2.12.2 | | npm | renovate | 43.150.0 | 43.245.0 | | github-releases | astral-sh/ruff | 0.15.12 | 0.15.20 | | github-releases | rvben/rumdl | v0.1.78 | v0.2.24 | | github-releases | crate-ci/typos | 1.46.0 | 1.47.2 | | github-tags | zizmorcore/zizmor | 1.25.2 | 1.26.1 | Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

renovate-sh-app · 2026-07-01T13:30:20Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

## 🤖 New release * `flint`: 0.22.6 -> 0.22.7 <details><summary><i><b>Changelog</b></i></summary><p> <blockquote> ## [0.22.7](v0.22.6...v0.22.7) - 2026-07-07 ### Added - *(renovate-deps)* detect new files matching customManagers patterns locally ([#379](#379)) ### Fixed - *(renovate-deps)* keep deps with skipReason=invalid-version ([#385](#385)) ### Other - *(deps)* update taiki-e/install-action action to v2.82.8 ([#384](#384)) - *(deps)* update linters ([#382](#382)) - *(deps)* update dependency mise to v2026.7.0 ([#383](#383)) - *(deps)* update taiki-e/install-action action to v2.82.7 ([#381](#381)) - *(deps)* update dependency rust to v1.96.1 ([#380](#380)) - *(deps)* update taiki-e/install-action action to v2.82.6 ([#378](#378)) - *(deps)* update linters ([#375](#375)) - *(deps)* update taiki-e/install-action action to v2.82.4 ([#373](#373)) - *(deps)* lock file maintenance ([#377](#377)) - *(deps)* update mise to v2026.6.14 ([#376](#376)) - *(deps)* update taiki-e/install-action action to v2.82.3 ([#372](#372)) - *(deps)* update actions/attest-build-provenance digest to 0f67c3f ([#371](#371)) - *(deps)* update node.js to v24.18.0 ([#370](#370)) </blockquote> </p></details> --- This PR was generated with [release-plz](https://github.com/release-plz/release-plz/). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

renovate-sh-app Bot added update-minor update-patch labels Jun 29, 2026

renovate-sh-app Bot requested a review from a team as a code owner June 29, 2026 01:28

renovate-sh-app Bot added update-minor update-patch labels Jun 29, 2026

renovate-sh-app Bot enabled auto-merge (squash) June 29, 2026 01:28

martincostello previously approved these changes Jun 29, 2026

View reviewed changes

renovate-sh-app Bot dismissed martincostello’s stale review via 689d698 June 29, 2026 13:46

renovate-sh-app Bot force-pushed the grafanarenovatebot/linters branch from 1da1909 to 689d698 Compare June 29, 2026 13:46

martincostello previously approved these changes Jun 29, 2026

View reviewed changes

renovate-sh-app Bot dismissed martincostello’s stale review via 78bc5e9 June 29, 2026 19:34

renovate-sh-app Bot force-pushed the grafanarenovatebot/linters branch 4 times, most recently from dfb1081 to 375b6d0 Compare June 30, 2026 13:29

renovate-sh-app Bot force-pushed the grafanarenovatebot/linters branch from 375b6d0 to b820398 Compare June 30, 2026 16:28

fix

41c52d6

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

zeitlinger previously approved these changes Jul 1, 2026

View reviewed changes

zeitlinger added 2 commits July 1, 2026 16:47

strip v prefix in version numbers

0fd850e

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

test: preserve snapshot formatting on regen

37a3f72

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

zeitlinger dismissed their stale review via 37a3f72 July 1, 2026 14:56

fix

3e436a7

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

martincostello approved these changes Jul 1, 2026

View reviewed changes

renovate-sh-app Bot merged commit 0a6cb8a into main Jul 1, 2026
14 checks passed

renovate-sh-app Bot deleted the grafanarenovatebot/linters branch July 1, 2026 15:16

github-actions Bot mentioned this pull request Jul 1, 2026

chore: release v0.22.7 #369

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update linters#375

chore(deps): update linters#375
renovate-sh-app[bot] merged 5 commits into
mainfrom
grafanarenovatebot/linters

renovate-sh-app Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

renovate-sh-app Bot commented Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate-sh-app Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixed

CI / Maintenance

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

⚠️ Breaking changes (0.10.2 → 0.11.0)

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

v2.5.1: Biome CLI v2.5.1

2.5.1

Patch Changes

What's Changed

Configuration

Need help?

Uh oh!

renovate-sh-app Bot commented Jul 1, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate-sh-app Bot commented Jun 29, 2026 •

edited

Loading

`v2.5.1`: Biome CLI v2.5.1