chore(mise): Update tool zizmor (1.27.0 → 1.28.0) by sticky-gecko[bot] · Pull Request #312 · home-operations/kromgo

sticky-gecko · 2026-07-21T22:13:57Z

This PR contains the following updates:

Package	Update	Change
zizmor	minor	`1.27.0` → `1.28.0`

Release Notes

zizmorcore/zizmor (zizmor)

`v1.28.0`

Compare Source

Security 🔒🔗

v1.27.0 contained a logging defect that would print any configured GitHub credentials as part of zizmor's cleartext logging. No versions other than v1.27.0 were affected. See GHSA-f42p-wjw5-97qh for full information.

Many thanks to @shaanmajid for finding and reporting this vulnerability.

Enhancements 🌱🔗

The JSON (v1) output format now includes metadata for each finding's fixes, if the finding has fixes (#2186)
The dependabot-cooldown audit is now aware of GitHub's new three-day default cooldown (#2193)
sbt is now recognized as a package-ecosystem in dependabot.yml (#2211)

Bug Fixes 🐛🔗

Fixed a bug where the template-injection audit would incorrectly flag steps..outcome and steps..conclusion as injection risks in the default persona (#2199)
Fixed a bug where the github-env audit would incorrectly flag some printf calls as exploitable (#2201)
Fixed a bug where zizmor would produce a misleading and confusing error message when asked to audit an ambiguous remote input (#2205)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

greptile-apps · 2026-07-21T22:17:47Z

Greptile Summary

This PR updates the pinned zizmor tool version used by mise. The main changes are:

Bumps zizmor from 1.27.0 to 1.28.0 in .mise/config.toml.
Refreshes the matching zizmor entry in .mise/mise.lock.
Keeps the lock entry configured for GitHub attestations across supported platforms.

Confidence Score: 5/5

Safe to merge with minimal risk.

The change is limited to mise tool metadata and does not alter runtime code or workflow logic.

No files require special attention.

T-Rex Logs

What T-Rex did

T-Rex attempted a mise-based zizmor audit for zizmor 1.28.0 and was blocked because mise was not found.
T-Rex attempted a direct zizmor audit; it was blocked because zizmor was not found.
T-Rex attempted a GitHub release lookup for v1.28.0; the lookup was blocked by HTTP 404.
A fallback sanity command was run, and it passed, including npm install, asset generation, and go test ./....

_{Ran code and verified through T-Rex}

Important Files Changed

Filename	Overview
.mise/config.toml	Updates the pinned `zizmor` tool version from `1.27.0` to `1.28.0`; no issues found.
.mise/mise.lock	Refreshes the `zizmor` lock entry for `1.28.0` using GitHub attestations; no issues found.

_{Reviews (1): Last reviewed commit: "chore(mise): Update tool zizmor (1.27.0 ..." | Re-trigger Greptile}

… 0.15.2) (#1212) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/kromgo](https://github.com/home-operations/kromgo) | patch | `0.15.1` → `0.15.2` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/107) for more information. --- ### Release Notes <details> <summary>home-operations/kromgo (ghcr.io/home-operations/kromgo)</summary> ### [`v0.15.2`](https://github.com/home-operations/kromgo/blob/HEAD/CHANGELOG.md#0152-2026-07-24) [Compare Source](home-operations/kromgo@0.15.1...0.15.2) ##### Features - **deps:** update dependency simple-icons (16.26.0 → 16.27.0) ([#308](home-operations/kromgo#308)) ([92fe7cb](home-operations/kromgo@92fe7cb)) - **deps:** update module github.com/prometheus/client\_golang (v1.23.2 → v1.24.0) ([#309](home-operations/kromgo#309)) ([3632476](home-operations/kromgo@3632476)) ##### Bug Fixes - **deps:** update dependency marked (18.0.6 → 18.0.7) ([#311](home-operations/kromgo#311)) ([0ff381b](home-operations/kromgo@0ff381b)) - **deps:** update module github.com/prometheus/client\_golang (v1.24.0 → v1.24.1) ([#316](home-operations/kromgo#316)) ([5630b18](home-operations/kromgo@5630b18)) - **deps:** update module github.com/prometheus/common (v0.70.0 → v0.70.1) ([#314](home-operations/kromgo#314)) ([ae06e27](home-operations/kromgo@ae06e27)) - **helm:** stamp Chart.yaml version on release ([#319](home-operations/kromgo#319)) ([98a4140](home-operations/kromgo@98a4140)) ##### Styles - indent markdown at 2 to match embedded yaml ([#310](home-operations/kromgo#310)) ([d669ff5](home-operations/kromgo@d669ff5)) ##### Miscellaneous Chores - **deps:** lock file maintenance ([#315](home-operations/kromgo#315)) ([0d69b9c](home-operations/kromgo@0d69b9c)) - **github-release:** Update release helm-unittest/helm-unittest (v1.1.1 → v1.1.2) ([#318](home-operations/kromgo#318)) ([7130e66](home-operations/kromgo@7130e66)) - **mise:** Update tool cosign (3.1.1 → 3.1.2) ([#306](home-operations/kromgo#306)) ([581806f](home-operations/kromgo@581806f)) - **mise:** Update tool oxfmt (0.59.0 → 0.60.0) ([#313](home-operations/kromgo#313)) ([f59ee43](home-operations/kromgo@f59ee43)) - **mise:** Update tool zizmor (1.27.0 → 1.28.0) ([#312](home-operations/kromgo#312)) ([4fe43a3](home-operations/kromgo@4fe43a3)) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Toronto) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.dcunha.io/Exikle/Artemis-Cluster/pulls/1212

….15.1 ➔ 0.15.2) (#421) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/kromgo](https://github.com/home-operations/kromgo) | patch | `0.15.1` → `0.15.2` | --- ### Release Notes <details> <summary>home-operations/kromgo (ghcr.io/home-operations/charts/kromgo)</summary> ### [`v0.15.2`](https://github.com/home-operations/kromgo/blob/HEAD/CHANGELOG.md#0152-2026-07-24) [Compare Source](home-operations/kromgo@0.15.1...0.15.2) ##### Features - **deps:** update dependency simple-icons (16.26.0 → 16.27.0) ([#308](home-operations/kromgo#308)) ([92fe7cb](home-operations/kromgo@92fe7cb)) - **deps:** update module github.com/prometheus/client\_golang (v1.23.2 → v1.24.0) ([#309](home-operations/kromgo#309)) ([3632476](home-operations/kromgo@3632476)) ##### Bug Fixes - **deps:** update dependency marked (18.0.6 → 18.0.7) ([#311](home-operations/kromgo#311)) ([0ff381b](home-operations/kromgo@0ff381b)) - **deps:** update module github.com/prometheus/client\_golang (v1.24.0 → v1.24.1) ([#316](home-operations/kromgo#316)) ([5630b18](home-operations/kromgo@5630b18)) - **deps:** update module github.com/prometheus/common (v0.70.0 → v0.70.1) ([#314](home-operations/kromgo#314)) ([ae06e27](home-operations/kromgo@ae06e27)) - **helm:** stamp Chart.yaml version on release ([#319](home-operations/kromgo#319)) ([98a4140](home-operations/kromgo@98a4140)) ##### Styles - indent markdown at 2 to match embedded yaml ([#310](home-operations/kromgo#310)) ([d669ff5](home-operations/kromgo@d669ff5)) ##### Miscellaneous Chores - **deps:** lock file maintenance ([#315](home-operations/kromgo#315)) ([0d69b9c](home-operations/kromgo@0d69b9c)) - **github-release:** Update release helm-unittest/helm-unittest (v1.1.1 → v1.1.2) ([#318](home-operations/kromgo#318)) ([7130e66](home-operations/kromgo@7130e66)) - **mise:** Update tool cosign (3.1.1 → 3.1.2) ([#306](home-operations/kromgo#306)) ([581806f](home-operations/kromgo@581806f)) - **mise:** Update tool oxfmt (0.59.0 → 0.60.0) ([#313](home-operations/kromgo#313)) ([f59ee43](home-operations/kromgo@f59ee43)) - **mise:** Update tool zizmor (1.27.0 → 1.28.0) ([#312](home-operations/kromgo#312)) ([4fe43a3](home-operations/kromgo@4fe43a3)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Warsaw) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.ajgon.casa/deedee/mark13/pulls/421

….15.1 ➔ 0.15.2) (#162) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/kromgo](https://github.com/home-operations/kromgo) | patch | `0.15.1` → `0.15.2` | --- ### Release Notes <details> <summary>home-operations/kromgo (ghcr.io/home-operations/charts/kromgo)</summary> ### [`v0.15.2`](https://github.com/home-operations/kromgo/blob/HEAD/CHANGELOG.md#0152-2026-07-24) [Compare Source](home-operations/kromgo@0.15.1...0.15.2) ##### Features - **deps:** update dependency simple-icons (16.26.0 → 16.27.0) ([#308](home-operations/kromgo#308)) ([92fe7cb](home-operations/kromgo@92fe7cb)) - **deps:** update module github.com/prometheus/client\_golang (v1.23.2 → v1.24.0) ([#309](home-operations/kromgo#309)) ([3632476](home-operations/kromgo@3632476)) ##### Bug Fixes - **deps:** update dependency marked (18.0.6 → 18.0.7) ([#311](home-operations/kromgo#311)) ([0ff381b](home-operations/kromgo@0ff381b)) - **deps:** update module github.com/prometheus/client\_golang (v1.24.0 → v1.24.1) ([#316](home-operations/kromgo#316)) ([5630b18](home-operations/kromgo@5630b18)) - **deps:** update module github.com/prometheus/common (v0.70.0 → v0.70.1) ([#314](home-operations/kromgo#314)) ([ae06e27](home-operations/kromgo@ae06e27)) - **helm:** stamp Chart.yaml version on release ([#319](home-operations/kromgo#319)) ([98a4140](home-operations/kromgo@98a4140)) ##### Styles - indent markdown at 2 to match embedded yaml ([#310](home-operations/kromgo#310)) ([d669ff5](home-operations/kromgo@d669ff5)) ##### Miscellaneous Chores - **deps:** lock file maintenance ([#315](home-operations/kromgo#315)) ([0d69b9c](home-operations/kromgo@0d69b9c)) - **github-release:** Update release helm-unittest/helm-unittest (v1.1.1 → v1.1.2) ([#318](home-operations/kromgo#318)) ([7130e66](home-operations/kromgo@7130e66)) - **mise:** Update tool cosign (3.1.1 → 3.1.2) ([#306](home-operations/kromgo#306)) ([581806f](home-operations/kromgo@581806f)) - **mise:** Update tool oxfmt (0.59.0 → 0.60.0) ([#313](home-operations/kromgo#313)) ([f59ee43](home-operations/kromgo@f59ee43)) - **mise:** Update tool zizmor (1.27.0 → 1.28.0) ([#312](home-operations/kromgo#312)) ([4fe43a3](home-operations/kromgo@4fe43a3)) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.greyrock.io/greyrock-labs/home-ops/pulls/162

….15.1 ➔ 0.15.2) (#421) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/kromgo](https://github.com/home-operations/kromgo) | patch | `0.15.1` → `0.15.2` | --- ### Release Notes <details> <summary>home-operations/kromgo (ghcr.io/home-operations/charts/kromgo)</summary> ### [`v0.15.2`](https://github.com/home-operations/kromgo/blob/HEAD/CHANGELOG.md#0152-2026-07-24) [Compare Source](home-operations/kromgo@0.15.1...0.15.2) ##### Features - **deps:** update dependency simple-icons (16.26.0 → 16.27.0) ([#308](home-operations/kromgo#308)) ([92fe7cb](home-operations/kromgo@92fe7cb)) - **deps:** update module github.com/prometheus/client\_golang (v1.23.2 → v1.24.0) ([#309](home-operations/kromgo#309)) ([3632476](home-operations/kromgo@3632476)) ##### Bug Fixes - **deps:** update dependency marked (18.0.6 → 18.0.7) ([#311](home-operations/kromgo#311)) ([0ff381b](home-operations/kromgo@0ff381b)) - **deps:** update module github.com/prometheus/client\_golang (v1.24.0 → v1.24.1) ([#316](home-operations/kromgo#316)) ([5630b18](home-operations/kromgo@5630b18)) - **deps:** update module github.com/prometheus/common (v0.70.0 → v0.70.1) ([#314](home-operations/kromgo#314)) ([ae06e27](home-operations/kromgo@ae06e27)) - **helm:** stamp Chart.yaml version on release ([#319](home-operations/kromgo#319)) ([98a4140](home-operations/kromgo@98a4140)) ##### Styles - indent markdown at 2 to match embedded yaml ([#310](home-operations/kromgo#310)) ([d669ff5](home-operations/kromgo@d669ff5)) ##### Miscellaneous Chores - **deps:** lock file maintenance ([#315](home-operations/kromgo#315)) ([0d69b9c](home-operations/kromgo@0d69b9c)) - **github-release:** Update release helm-unittest/helm-unittest (v1.1.1 → v1.1.2) ([#318](home-operations/kromgo#318)) ([7130e66](home-operations/kromgo@7130e66)) - **mise:** Update tool cosign (3.1.1 → 3.1.2) ([#306](home-operations/kromgo#306)) ([581806f](home-operations/kromgo@581806f)) - **mise:** Update tool oxfmt (0.59.0 → 0.60.0) ([#313](home-operations/kromgo#313)) ([f59ee43](home-operations/kromgo@f59ee43)) - **mise:** Update tool zizmor (1.27.0 → 1.28.0) ([#312](home-operations/kromgo#312)) ([4fe43a3](home-operations/kromgo@4fe43a3)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Warsaw) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.ajgon.casa/deedee/mark13/pulls/421

….15.1 ➔ 0.15.2) (#1717) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/kromgo](https://github.com/home-operations/kromgo) | patch | `0.15.1` → `0.15.2` | --- ### Release Notes <details> <summary>home-operations/kromgo (ghcr.io/home-operations/charts/kromgo)</summary> ### [`v0.15.2`](https://github.com/home-operations/kromgo/blob/HEAD/CHANGELOG.md#0152-2026-07-24) [Compare Source](home-operations/kromgo@0.15.1...0.15.2) ##### Features - **deps:** update dependency simple-icons (16.26.0 → 16.27.0) ([#308](home-operations/kromgo#308)) ([92fe7cb](home-operations/kromgo@92fe7cb)) - **deps:** update module github.com/prometheus/client\_golang (v1.23.2 → v1.24.0) ([#309](home-operations/kromgo#309)) ([3632476](home-operations/kromgo@3632476)) ##### Bug Fixes - **deps:** update dependency marked (18.0.6 → 18.0.7) ([#311](home-operations/kromgo#311)) ([0ff381b](home-operations/kromgo@0ff381b)) - **deps:** update module github.com/prometheus/client\_golang (v1.24.0 → v1.24.1) ([#316](home-operations/kromgo#316)) ([5630b18](home-operations/kromgo@5630b18)) - **deps:** update module github.com/prometheus/common (v0.70.0 → v0.70.1) ([#314](home-operations/kromgo#314)) ([ae06e27](home-operations/kromgo@ae06e27)) - **helm:** stamp Chart.yaml version on release ([#319](home-operations/kromgo#319)) ([98a4140](home-operations/kromgo@98a4140)) ##### Styles - indent markdown at 2 to match embedded yaml ([#310](home-operations/kromgo#310)) ([d669ff5](home-operations/kromgo@d669ff5)) ##### Miscellaneous Chores - **deps:** lock file maintenance ([#315](home-operations/kromgo#315)) ([0d69b9c](home-operations/kromgo@0d69b9c)) - **github-release:** Update release helm-unittest/helm-unittest (v1.1.1 → v1.1.2) ([#318](home-operations/kromgo#318)) ([7130e66](home-operations/kromgo@7130e66)) - **mise:** Update tool cosign (3.1.1 → 3.1.2) ([#306](home-operations/kromgo#306)) ([581806f](home-operations/kromgo@581806f)) - **mise:** Update tool oxfmt (0.59.0 → 0.60.0) ([#313](home-operations/kromgo#313)) ([f59ee43](home-operations/kromgo@f59ee43)) - **mise:** Update tool zizmor (1.27.0 → 1.28.0) ([#312](home-operations/kromgo#312)) ([4fe43a3](home-operations/kromgo@4fe43a3)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1717

chore(mise): Update tool zizmor (1.27.0 → 1.28.0)

9bac937

sticky-gecko Bot added the type/minor Issue relates to a minor version bump label Jul 21, 2026

onedr0p merged commit 4fe43a3 into main Jul 21, 2026
1 of 7 checks passed

onedr0p deleted the renovate/zizmor-1.x branch July 21, 2026 23:21

sticky-gecko Bot mentioned this pull request Jul 21, 2026

chore(main): release 0.15.2 #307

Merged

Navigation Menu

Repository navigation

chore(mise): Update tool zizmor (1.27.0 → 1.28.0) - #312

chore(mise): Update tool zizmor (1.27.0 → 1.28.0)#312
onedr0p merged 1 commit into
mainfrom
renovate/zizmor-1.x

sticky-gecko Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Jul 21, 2026

Confidence Score: 5/5

T-Rex Logs

Important Files Changed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

sticky-gecko Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.28.0

Security 🔒🔗

Enhancements 🌱🔗

Bug Fixes 🐛🔗

Configuration

Uh oh!

greptile-apps Bot commented Jul 21, 2026

Greptile Summary

Confidence Score: 5/5

T-Rex Logs

Important Files Changed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

sticky-gecko Bot commented Jul 21, 2026 •

edited

Loading

`v1.28.0`