From 82d6a86818969655a30d1caecfc8f59dc7991fd7 Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Wed, 29 Jul 2026 20:41:34 +0200 Subject: [PATCH 1/2] **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to . Signed-off-by: PythonWoods --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2a19800..fdd9076 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,9 @@ All notable changes to zenzic-action are documented in this file. The project ad ## [Unreleased] +### Fixed +- **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to `0.26.5`. + ## [2.10.3] - 2026-07-28 ### Fixed From a40c2eb1fc55d59aa03081e5b9d64e7244d89073 Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Wed, 29 Jul 2026 20:41:45 +0200 Subject: [PATCH 2/2] release: bump version to 2.10.4 (core 0.26.5) Signed-off-by: PythonWoods --- .bumpversion.toml | 4 ++-- CHANGELOG.md | 2 ++ README.md | 4 ++-- RELEASE.md | 18 +++++++++--------- SECURITY.md | 4 ++-- action.yml | 2 +- package.json | 2 +- pyproject.toml | 2 +- 8 files changed, 20 insertions(+), 18 deletions(-) diff --git a/.bumpversion.toml b/.bumpversion.toml index d8af4dc..0749ca0 100644 --- a/.bumpversion.toml +++ b/.bumpversion.toml @@ -2,7 +2,7 @@ # SPDX-License-Identifier: Apache-2.0 [tool.bumpversion] -current_version = "2.10.3" +current_version = "2.10.4" parse = "(?P\\d+)\\.(?P\\d+)\\.(?P\\d+)" serialize = ["{major}.{minor}.{patch}"] @@ -47,4 +47,4 @@ replace = '''| `{new_version}` (current) | ✅ All security fixes | # bump-my-version does NOT manage these files; they are listed here for discoverability. # --------------------------------------------------------------------------- [tool.bumpversion.custom_variables.core_version] -current = "0.26.3" +current = "0.26.5" diff --git a/CHANGELOG.md b/CHANGELOG.md index fdd9076..78a93e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,8 @@ All notable changes to zenzic-action are documented in this file. The project ad ## [Unreleased] +## [2.10.4] - 2026-07-29 + ### Fixed - **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to `0.26.5`. diff --git a/README.md b/README.md index 49465ea..2b251e4 100644 --- a/README.md +++ b/README.md @@ -59,7 +59,7 @@ The minimal configuration — zero Python setup, SARIF to Code Scanning in one s - name: Run Zenzic Documentation Quality Gate uses: PythonWoods/zenzic-action@v2 with: - version: "0.26.3" + version: "0.26.5" format: sarif upload-sarif: "true" permissions: @@ -207,7 +207,7 @@ jobs: | Input | Default | Description | |:---|:---|:---| -| `version` | `0.26.3` | Zenzic Core version to execute. Pin to a specific release (e.g. `0.25.0`) for reproducible CI. | +| `version` | `0.26.5` | Zenzic Core version to execute. Pin to a specific release (e.g. `0.25.0`) for reproducible CI. | | `format` | `"text"` | Output format: `text`, `json`, or `sarif` | | `upload-sarif` | `"false"` | Automatically upload SARIF output to GitHub Code Scanning | diff --git a/RELEASE.md b/RELEASE.md index 50adc00..c275342 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -6,17 +6,17 @@ | Field | Value | | :------ | :--------- | -| Version | v2.10.3 | -| Date | 2026-07-28 | +| Version | v2.10.4 | +| Date | 2026-07-29 | | Status | Stable | ## Release Checklist Before tagging, every item must be green: -- [ ] `action.yml` — `default:` pin updated to the latest Zenzic core version (`0.26.3`) -- [ ] `package.json` version bumped to `2.10.3` -- [ ] `pyproject.toml` — synchronized with core pin (`zenzic==0.26.3`) +- [ ] `action.yml` — `default:` pin updated to the latest Zenzic core version (`0.26.5`) +- [ ] `package.json` version bumped to `2.10.4` +- [ ] `pyproject.toml` — synchronized with core pin (`zenzic==0.26.5`) - [ ] `just versions` — returns `✅ Ecosystem alignment verified.` - [ ] `just verify` — exits 0 - [ ] `zenzic check .` — zero findings (DQS 100/100) @@ -43,15 +43,15 @@ git checkout main git pull origin main # 7. Create the release tag and push -git tag -s -m "Release v2.10.3" v2.10.3 -git push origin v2.10.3 +git tag -s -m "Release v2.10.4" v2.10.4 +git push origin v2.10.4 # 8. Move the floating v2 tag to the new release: -git tag -s -fa v2 v2.10.3^{} -m "release: v2.10.3" +git tag -s -fa v2 v2.10.4^{} -m "release: v2.10.4" git push origin v2 --force # Verification (Atomic Parity Check): -git rev-parse v2^{} v2.10.3^{} +git rev-parse v2^{} v2.10.4^{} # SUCCESS: Both hashes must be identical. ``` diff --git a/SECURITY.md b/SECURITY.md index 73db4a9..eaf27d4 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -75,8 +75,8 @@ by the wrapper script — it is consumed exclusively by `github/codeql-action/up | Version | Support status | |---------|----------------| -| `2.10.3` (current) | ✅ All security fixes | -| `< 2.10.3` | ❌ End of life — no support | +| `2.10.4` (current) | ✅ All security fixes | +| `< 2.10.4` | ❌ End of life — no support | --- diff --git a/action.yml b/action.yml index 7a1b898..3e1da54 100644 --- a/action.yml +++ b/action.yml @@ -16,7 +16,7 @@ inputs: version: description: "Zenzic version to use. Defaults to latest stable." required: false - default: "0.26.3" # x-zenzic-core-pin + default: "0.26.5" # x-zenzic-core-pin format: description: "Output format: 'text', 'json', or 'sarif'." required: false diff --git a/package.json b/package.json index f437efe..185efa6 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "zenzic-action", - "version": "2.10.3", + "version": "2.10.4", "private": true, "description": "Official GitHub Action for Zenzic — Documentation Quality Gate", "license": "Apache-2.0", diff --git a/pyproject.toml b/pyproject.toml index a6bf01f..2624a39 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -10,7 +10,7 @@ license = {text = "Apache-2.0"} authors = [{name = "PythonWoods", email = "dev@pythonwoods.dev"}] dynamic = ["version"] dependencies = [ - "zenzic==0.26.3", + "zenzic==0.26.5", ] [project.urls]