Skip to content

Update all dependencies #19

Update all dependencies

Update all dependencies #19

Triggered via pull request August 20, 2026 23:59
@renovaterenovate[bot]
synchronize #21
Status Failure
Total duration 46s
Artifacts 2

github_actions_scan.yml Required

on: pull_request_target
check-changes
9s
check-changes
zizmor-config
9s
zizmor-config
zizmor-scan
9s
zizmor-scan
zizmor-output
9s
zizmor-output
zizmor-upload
5s
zizmor-upload
Fit to window
Zoom out
Zoom in

Annotations

20 errors and 11 warnings
zizmor/unpinned-uses: .github/workflows/feed-view-build.yml#L25
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/feed-view-build.yml#L18
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/feed-view-build.yml#L15
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/feed-compose-build.yml#L25
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/feed-compose-build.yml#L18
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/feed-compose-build.yml#L15
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/adaptive-jetstream-build.yml#L67
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/adaptive-jetstream-build.yml#L24
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor/unpinned-uses: .github/workflows/adaptive-jetstream-build.yml#L21
unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor-output
Found 30 findings for mandatory checks that must always succeed.
unpinned-uses: .github/workflows/list-detail-activity-embedding-build.yml#L15
list-detail-activity-embedding-build.yml:15: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/feed-view-build.yml#L25
feed-view-build.yml:25: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/feed-view-build.yml#L18
feed-view-build.yml:18: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/feed-view-build.yml#L15
feed-view-build.yml:15: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/feed-compose-build.yml#L25
feed-compose-build.yml:25: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/feed-compose-build.yml#L18
feed-compose-build.yml:18: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/feed-compose-build.yml#L15
feed-compose-build.yml:15: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/adaptive-jetstream-build.yml#L67
adaptive-jetstream-build.yml:67: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/adaptive-jetstream-build.yml#L24
adaptive-jetstream-build.yml:24: unpinned action reference: action is not pinned to a hash (required by blanket policy)
unpinned-uses: .github/workflows/adaptive-jetstream-build.yml#L21
adaptive-jetstream-build.yml:21: unpinned action reference: action is not pinned to a hash (required by blanket policy)
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
excessive-permissions: .github/workflows/supporting-pane-views-build.yml#L12
supporting-pane-views-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/supporting-pane-fragments-build.yml#L12
supporting-pane-fragments-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/supporting-pane-compose-build.yml#L12
supporting-pane-compose-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/navigation-suite-scaffold-build.yml#L11
navigation-suite-scaffold-build.yml:11: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/list-detail-sliding-pane-build.yml#L12
list-detail-sliding-pane-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/list-detail-compose-build.yml#L12
list-detail-compose-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/list-detail-activity-embedding-build.yml#L12
list-detail-activity-embedding-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/feed-view-build.yml#L12
feed-view-build.yml:12: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/feed-compose-build.yml#L12
feed-compose-build.yml:12: overly broad permissions: default permissions used due to no permissions: block

Artifacts

Produced during runtime
Name Size Digest
zizmor Expired
6.52 KB
sha256:a740cb25e946c1f537dbc70aadc9114bf0451ecd2b4d98a47653a762e6e4cda0
zizmor-config Expired
342 Bytes
sha256:049782931f99072e035676d89cbac720b6e6ae8af8e266f113039f11771c4c98