| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pinact-bash-completion | Distribution: openSUSE Tumbleweed |
| Version: 4.1.0 | Vendor: openSUSE |
| Release: 1.3 | Build date: Tue Jun 9 06:46:30 2026 |
| Group: System/Shells | Build host: reproducible |
| Size: 2965 | Source RPM: pinact-4.1.0-1.3.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/suzuki-shunsuke/pinact | |
| Summary: Bash Completion for pinact | |
Bash command line completion support for pinact.
MIT
* Tue Jun 09 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 4.1.0:
* Features
- #1578 Update ghtkn-go-sdk to v0.3.0 for backend and disable
device flow support
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.523.0 (#1594)
- chore(deps): update dependency anchore/syft to v1.45.1
(#1593)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.522.0 (#1592)
- chore(deps): update dependency crate-ci/typos to v1.47.2
(#1587)
- chore(deps): update suzuki-shunsuke/go-release-workflow
action to v8.1.0 (#1588)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.521.0 (#1586)
- chore(deps): update dependency crate-ci/typos to v1.47.1
(#1585)
- chore(deps): update actions/checkout action to v6.0.3 (#1583)
- chore(deps): update dependency anchore/syft to v1.45.0
(#1584)
- chore(deps): update go module directive to v1.26.4 (#1582)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.520.2 (#1580)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.520.1 (#1577)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.520.0 (#1576)
- chore(deps): update dependency crate-ci/typos to v1.47.0
(#1575)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.519.0 (#1574)
- chore(deps): update suzuki-shunsuke/actionlint-action action
to v0.1.4 (#1573)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.518.0 (#1572)
- chore(deps): update dependency goreleaser/goreleaser to
v2.16.0 (#1571)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.517.0 (#1570)
- chore(deps): update dependency aquaproj/aqua to v2.59.1
(#1569)
- chore(deps): update dependency crate-ci/typos to v1.46.3
(#1568)
- chore(deps): update dependency suzuki-shunsuke/pinact to v4
(#1565)
* Fri May 29 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 4.0.0:
* Breaking Changes
- #1540 Removed the -review option
Output SARIF and pass it to reviewdog. This has been
announced previously.
pinact run -format sarif |
reviewdog -f sarif -name pinact -reporter github-pr-review
* #1540 Always output diff
Even if you specify -diff=false, it is ignored.
* #1540 -diff and -check are now aliases for -fix=false
This simplifies the logic, making it easier to understand and
less prone to bugs.
* #1540 -verify is now an alias for --verify-comment
- verify was unclear about what was being verified, so it has
been renamed for clarity.
However, -verify is kept as-is to maintain backward
compatibility.
* #1458 #1558 Version comments are now required @ManuelLerchnerQC
For SHAs without a version comment, pinact automatically adds a
version comment (validation error if -fix=false).
$ pinact run test.yaml
test.yaml:1
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
Specifying a version comment makes it easier to see which
version is being used, and makes it easier for tools like
Renovate and Dependabot to update.
It also has security implications.
For GitHub Actions versions, you can also specify the SHA of a
commit in a fork.
This means it could point to a malicious commit in a fork.
If you specify only the SHA without a version comment, you
cannot tell whether it is the SHA of a commit in a fork.
By requiring version comments, you can verify that the version
comment matches the SHA using the --verify-comment option.
Even if a fake version comment is added to a fork's SHA, it can
be detected by --verify-comment.
An attacker could also create a tag pointing to a fork's SHA,
but creating a tag requires write permission, which raises the
bar for attacks, so this can be said to improve security.
Of course, this is only meaningful if you verify with
- -verify-comment, so it is recommended to run pinact with
- -verify-comment in CI.
* Features
- -no-api: support for offline validation
If you just want to check whether something is pinned, you
don't really need to use the GitHub API, but previously the
GitHub API was called.
With the -no-api option, you can validate without calling the
GitHub API.
However, since API calls are currently essential for fixing
code (this may change in the future if caching is supported),
you need to specify either -fix=false or -format sarif.
Implicitly treating it as -fix=false could cause behavior to
change and become a breaking change when caching is
supported, so it must currently be specified explicitly.
- You can now check whether the version being used satisfies
min age, not just newer versions
For example, you can run it in CI against modified lines to
check whether any dangerous versions that do not satisfy min
age are being used.
This is not checked by default, but is checked when you run
pinact run --verify-min-age or pinact run -min-age <min age>.
- More flexible min age support via rules
min age can now be configured in the configuration file.
Additionally, by using rules, you can apply settings such as
min age to specific actions.
min_age:
value: 7 # default setting
rules:
[#] Allow latest for suzuki-shunsuke's actions
- ignore: true
conditions:
- expr: |
ActionRepoOwner == "suzuki-shunsuke" && ActionVersion == "latest"
[#] Set min age to 0 for actions/checkout
- min_age: 0
conditions:
- expr: |
ActionRepoFullName == "actions/checkout"
For rules, conditions are evaluated per rule, and the
settings are applied if matched.
You can write multiple conditions, and the settings are
applied if any one of the conditions matches.
expr follows https://expr-lang.org/docs/language-definition.
Please read the documentation for details.
The settings of rules listed later in rules take precedence.
- Support for a global configuration file
Warning
If you have set the PINACT_MIN_AGE environment variable in
~/.bashrc, ~/.zshrc, etc., it is recommended to remove it
and use a global configuration file instead.
PINACT_MIN_AGE takes precedence over the configuration
file, so it overrides the project's settings.
On the other hand, global settings are merged with lower
priority than the project's settings.
If you want to enforce the setting, PINACT_MIN_AGE is
suitable, but for default settings, a global configuration
file is more appropriate.
Note also that environment variables do not allow flexible
settings like rules.
A global configuration file is now supported.
The file path is searched in the following order of priority:
- $PINACT_GLOBAL_CONFIG
- ${XDG_CONFIG_HOME}/pinact/pinact.yaml
- ${HOME}/.config/pinact/pinact.yaml
rules are prepended before the rules in the project
configuration file.
So project settings take precedence over global settings.
- Automatic correction of version comments via -verify-comment
If the SHA and the version comment do not match, the version
comment is automatically corrected to match the SHA.
Previously, it would just return an error, but now it is
automatically corrected.
- -diff-file: limit pinact's targets to only the changed lines
If you specify a file in Unified Diff Format via -diff-file,
you can limit pinact's targets to only the changed lines.
By passing the PR's diff file in PR CI, you can reduce
unnecessary API calls and prevent corrections or errors from
code unrelated to the PR's changes.
This makes it easier to introduce pinact via Required
Workflow across an entire GitHub Organization of a large
development organization.
To improve the overall health of a development organization,
it is desirable to introduce pinact via Required Workflow.
However, if you suddenly introduce pinact as a Required
Workflow in an Organization that has a lot of originally
unpinned code, errors and corrections unrelated to the PR's
changes will occur everywhere, causing confusion.
When errors occur in places unrelated to the PR's changes,
the PR author thinks "what is this error?", "wait, do I have
to fix this? It's unrelated to this PR so I want to split the
PR, but creating a PR is a hassle."
It is also possible that the same error occurs in multiple
PRs, and each one independently performs redundant fixing
work.
Inquiries about errors come in from various teams, generating
unnecessary costs.
If you try to fix everything before introducing the Required
Workflow, it takes time to introduce, and during that time
the bad situation continues where new unpinned code keeps
increasing.
On the other hand, if you can fix and validate only the lines
changed in a PR, the PR author can more easily accept making
the fix, and there is no need to split the PR.
However, this alone does not pin existing code, so in
parallel with this, you still need to run pinact against each
repository and create PRs.
How do you generate the file specified by -diff-file? You can
easily generate it using the action
https://github.com/suzuki-shunsuke/pr-unified-diff-action.
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- uses: suzuki-shunsuke/pr-unified-diff-action@c932c1df5f577028d8ca05d2d3c0c059072d8821 # v0.0.1
id: diff
- uses: suzuki-shunsuke/pinact-action@896d595f299e71d65b9d28349d6956abe144390a # v3.0.0
with:
diff_file: ${{ steps.diff.outputs.diff_path }}
* Changelog
- fix(deps): update module github.com/google/go-github/v87 to
v88 (#1564)
- fix(run): filter --diff-file targets by workflow patterns
(#1562)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.516.0 (#1559)
- feat!: error when SHA-pinned action has no version comment
(#1558)
- fix(run): use --diff-file as the file source when no
args/config (#1557)
- feat(verify): auto-correct version comments to match actual
SHA (#1435)
- fix(run): normalize --diff-file paths to forward slashes for
Windows (#1552)
- feat: add version comment to pinned actions missing
annotation (#1458)
- fix: honor rules[].min_age in update-target cooldown filter
(#1556)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.515.0 (#1555)
- docs: fix a broken link (#1554)
- fix(deps): update module github.com/google/go-github/v86 to
v87 (#1550)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.514.0 (#1549)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.513.1 (#1548)
- feat(run): add --diff-file to process only PR-changed lines
(#1547)
- chore(deps): update dependency aquaproj/aqua-renovate-config
to v2.12.1 (#1546)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.513.0 (#1545)
- feat(config): merge global and project configs field-by-field
(#1543)
- chore(deps): update suzuki-shunsuke/go-autofix-action action
to v0.1.12 (#1544)
- feat(config): PINACT_GLOBAL_CONFIG env var overrides the
global config path (#1542)
- v4 spec implementation (#1540)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.512.1 (#1541)
- chore(deps): update dependency aquaproj/aqua to v2.59.0
(#1539)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.10.1 (#1537)
* Sat May 16 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.10.1:
* Bug Fixes
- #1535 pin uses lines with multiple spaces after the YAML list
dash
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.512.0 (#1533)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.10.0 (#1532)
* Wed May 13 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.10.0:
* Features
- #1530 Support pinning branches to latest stable tags by the
- -branch-to-tag option
The default behabiour isn't changed.
By default, pinact doesn't pin branches such as main or
master.
If you want to pin specific branches, you can use the
- -branch-to-tag option.
e.g.
pinact run --branch-to-tag '^main$' --branch-to-tag '^release/.*$'
* Dependencies
- fix(deps): update module github.com/urfave/cli/v3 to v3.9.0
(#1528)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.511.1 (#1527)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.511.0 (#1526)
- chore(deps): update dependency crate-ci/typos to v1.46.1
(#1525)
- fix(deps): update module github.com/google/go-github/v85 to
v86 (#1524)
- chore(deps): update go module directive to v1.26.3 (#1523)
- chore(deps): update dependency golangci/golangci-lint to
v2.12.2 (#1522)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.510.0 (#1521)
- chore(deps): update dependency aquaproj/aqua to v2.58.1
(#1520)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.509.0 (#1519)
- chore(deps): update dependency mvdan/gofumpt to v0.10.0
(#1518)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.508.0 (#1517)
- chore(deps): update dependency goreleaser/goreleaser to
v2.15.4 (#1516)
- chore(deps): update dependency aquaproj/aqua to v2.58.0
(#1515)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.507.0 (#1514)
- chore(deps): update dependency golangci/golangci-lint to
v2.12.1 (#1513)
- chore(deps): update dependency golangci/golangci-lint to
v2.12.0 (#1510)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.506.0 (#1512)
- chore(deps): update dependency anchore/syft to v1.44.0
(#1511)
- chore(deps): update dependency crate-ci/typos to v1.46.0
(#1509)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.505.0 (#1506)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.504.0 (#1505)
- chore(deps): update suzuki-shunsuke/go-release-workflow
action to v8 (#1504)
- chore(deps): update dependency suzuki-shunsuke/ghalint to
v1.5.6 (#1502)
- chore(deps): update suzuki-shunsuke/go-test-full-workflow
action to v5.0.2 (#1503)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.503.0 (#1501)
- chore(deps): update dependency crate-ci/typos to v1.45.2
(#1500)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.502.0 (#1499)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.501.0 (#1498)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.9.2 (#1497)
* Thu Apr 30 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.9.2:
* Fixes
- #1493 Preserve original line endings when updating workflows
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.500.0 (#1495)
- chore(deps): update dependency anchore/syft to v1.43.0
(#1489)
- chore(deps): update dependency aquaproj/aqua to v2.57.2
(#1487)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.499.0 (#1486)
- fix(deps): update module github.com/google/go-github/v84 to
v85 (#1484)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.498.0 (#1485)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.497.0 (#1482)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.496.0 (#1481)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.495.0 (#1480)
- chore(deps): update dependency crate-ci/typos to v1.45.1
(#1476)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.494.1 (#1475)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.493.0 (#1473)
- chore(deps): update dependency anchore/syft to v1.42.4
(#1471)
- chore(deps): update dependency sigstore/cosign to v3.0.6
(#1470)
- chore(deps): update dependency go to v1.26.2 (#1469)
- build(deps): bump github.com/buger/jsonparser from 1.1.1 to
1.1.2 (#1468)
- chore(deps): update dependency crate-ci/typos to v1.45.0
(#1467)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.492.0 (#1466)
- chore(deps): update dependency rhysd/actionlint to v1.7.12
(#1465)
- fix(deps): update module github.com/hashicorp/go-version to
v1.9.0 (#1464)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.491.0 (#1461)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.490.0 (#1459)
- chore(deps): update dependency aquaproj/aqua-renovate-config
to v2.12.0 (#1460)
- fix(deps): update module github.com/google/go-github/v83 to
v84 (#1415)
- chore(deps): update suzuki-shunsuke/renovate-config to v4
(#1439)
- chore(deps): update actions/setup-go action to v6.4.0 (#1456)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.489.0 (#1455)
- fix(deps): update module github.com/urfave/cli/v3 to v3.8.0
(#1453)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.488.0 (#1452)
- chore(deps): update dependency suzuki-shunsuke/nllint to
v1.1.0 (#1451)
- chore(deps): update dependency golangci/golangci-lint to
v2.11.4 (#1450)
- fix(deps): update module github.com/fatih/color to v1.19.0
(#1446)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.487.0 (#1445)
- chore(deps): update dependency anchore/syft to v1.42.3
(#1444)
- chore(deps): update dependency aquaproj/aqua to v2.57.1
(#1443)
- chore(deps): update suzuki-shunsuke/actionlint-action action
to v0.1.2 (#1442)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.486.0 (#1440)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.485.0 (#1438)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.484.0 (#1437)
- chore(deps): update dependency golangci/golangci-lint to
v2.11.3 (#1436)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.483.0 (#1433)
- chore(deps): update dependency anchore/syft to v1.42.2
(#1432)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.482.0 (#1431)
- fix(deps): update module
github.com/suzuki-shunsuke/urfave-cli-v3-util to v0.2.3
(#1429)
- chore(deps): update dependency aquaproj/aqua to v2.57.0
(#1430)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.481.0 (#1426)
- chore(deps): update dependency golangci/golangci-lint to
v2.11.2 (#1425)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.480.0 (#1424)
- chore(deps): update dependency golangci/golangci-lint to
v2.11.1 (#1423)
- fix(deps): update module golang.org/x/oauth2 to v0.36.0
(#1422)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.479.0 (#1421)
- chore(deps): update dependency go to v1.26.1 (#1420)
- chore(deps): update aquaproj/aqua-renovate-config to v2.11.0
(#1419)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.478.0 (#1418)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.477.0 (#1417)
- fix(deps): update module github.com/urfave/cli/v3 to v3.7.0
(#1416)
- chore(deps): update dependency crate-ci/typos to v1.44.0
(#1414)
- chore(deps): update dependency goreleaser/goreleaser to
v2.14.1 (#1412)
- chore(deps): update actions/setup-go action to v6.3.0 (#1413)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.476.0 (#1410)
- chore(deps): update dependency goreleaser/goreleaser to
v2.14.0 (#1409)
- chore(deps): update dependency aquaproj/aqua to v2.56.7
(#1408)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.475.0 (#1407)
- chore(deps): update dependency sigstore/cosign to v3.0.5
(#1406)
- chore(deps): update dependency anchore/syft to v1.42.1
(#1405)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.474.0 (#1404)
- fix(deps): update module
github.com/suzuki-shunsuke/urfave-cli-v3-util to v0.2.2
(#1399)
- chore(deps): update dependency golangci/golangci-lint to
v2.10.1 (#1402)
- chore(deps): update dependency go to v1.26.0 (#1388)
- chore(deps): update dependency golangci/golangci-lint to
v2.9.0 (#1392)
- fix(deps): update module github.com/google/go-github/v82 to
v83 (#1398)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.473.0 (#1400)
- chore(deps): update dependency crate-ci/typos to v1.43.5
(#1397)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.472.1 (#1396)
- chore(deps): update dependency rhysd/actionlint to v1.7.11
(#1395)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.472.0 (#1394)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.471.0 (#1393)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.470.0 (#1391)
- chore(deps): update dependency anchore/syft to v1.42.0
(#1389)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.469.0 (#1387)
- chore(deps): update dependency crate-ci/typos to v1.43.4
(#1386)
- chore(deps): update dependency crate-ci/typos to v1.43.3
(#1384)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.468.0 (#1385)
- chore(deps): update dependency crate-ci/typos to v1.43.2
(#1383)
- fix(deps): update module golang.org/x/oauth2 to v0.35.0
(#1382)
- chore(deps): update dependency go to v1.25.7 (#1381)
- chore(deps): update dependency crate-ci/typos to v1.43.1
(#1379)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.467.0 (#1380)
- chore(deps): update dependency anchore/syft to v1.41.2
(#1378)
- chore(deps): update dependency crate-ci/typos to v1.43.0
(#1377)
- fix(deps): update module github.com/lmittmann/tint to v1.1.3
(#1376)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.466.1 (#1375)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.466.0 (#1374)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.9.0 (#1373)
* Tue Feb 03 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.9.0:
* Features
- #1365 Make version separator configurable via configuration
file @ReenigneArcher
- #1372 Make version separator configurable via command line
option and environment variable
* Bug Fixes
- #1359 Fix a bug that -log-color doesn't work
* Others
- docs: fix readme for ignore_actions[].ref by @nasa9084 in
[#1323]
- docs: fix readme for correct GHES_API_URL by @maruloop in
[#1324]
- docs(INSTALL): add mise alternate installation documentation
by @jylenhof in #1331
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.465.0 (#1371)
- fix(deps): update module github.com/google/go-github/v81 to
v82 (#1368)
- chore(deps): update dependency aquaproj/aqua to v2.56.6
(#1370)
- chore(deps): update dependency anchore/syft to v1.41.1
(#1369)
- chore(deps): update dependency crate-ci/typos to v1.42.3
(#1367)
- chore(deps): update dependency anchore/syft to v1.41.0
(#1366)
- chore(deps): update dependency crate-ci/typos to v1.42.2
(#1364)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.464.0 (#1362)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.463.0 (#1361)
- fix(deps): update module github.com/suzuki-shunsuke/slog-util
to v0.3.1 (#1359)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.462.0 (#1360)
- chore(deps): update dependency suzuki-shunsuke/ghalint to
v1.5.5 (#1358)
- chore(deps): update dependency crate-ci/typos to v1.42.1
(#1357)
- chore(deps): update actions/checkout action to v6.0.2 (#1356)
- chore(deps): update aquaproj/aqua-renovate-config to v2.10.0
(#1355)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.461.0 (#1354)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.460.1 (#1353)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.459.0 (#1352)
- fix(deps): update module github.com/urfave/cli/v3 to v3.6.2
(#1351)
- chore(deps): update dependency aquaproj/aqua to v2.56.5
(#1350)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.458.0 (#1349)
- chore(deps): update dependency anchore/syft to v1.40.1
(#1348)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.457.0 (#1347)
- chore(deps): update dependency aquaproj/aqua to v2.56.4
(#1346)
- chore(deps): update dependency go to v1.25.6 (#1345)
- fix(deps): update module
github.com/suzuki-shunsuke/slog-error to v0.2.2 (#1344)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.456.0 (#1343)
- chore(deps): update actions/setup-go action to v6.2.0 (#1341)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.455.0 (#1340)
- chore(deps): update dependency aquaproj/aqua to v2.56.3
(#1339)
- chore(deps): update dependency goreleaser/goreleaser to
v2.13.3 (#1338)
- chore(deps): update dependency sigstore/cosign to v3.0.4
(#1337)
- chore(deps): update dependency anchore/syft to v1.40.0
(#1336)
- fix(deps): update module github.com/goccy/go-yaml to v1.19.2
(#1335)
- chore(deps): update dependency golangci/golangci-lint to
v2.8.0 (#1334)
- chore(deps): update dependency crate-ci/typos to v1.42.0
(#1332)
- fix(deps): update module github.com/google/go-github/v80 to
v81 (#1329)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.454.0 (#1330)
- chore(deps): update dependency aquaproj/aqua to v2.56.2
(#1328)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.453.0 (#1327)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.452.0 (#1325)
- chore(deps): update dependency crate-ci/typos to v1.41.0
(#1322)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.451.1 (#1321)
- chore(deps): update dependency rhysd/actionlint to v1.7.10
(#1320)
- chore(deps): update dependency crate-ci/typos to v1.40.1
(#1319)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.451.0 (#1318)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.8.0 (#1317)
* Tue Jan 13 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.8.0:
* Features
- #1315 Support ghtkn integration
You can create a GitHub App User Access Token by ghtkn
integration.
About ghtkn, please see the document of ghtkn.
https://github.com/suzuki-shunsuke/ghtkn
You need to set up ghtkn first.
export PINACT_GHTKN=true
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.450.0 (#1316)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.7.4 (#1314)
* Tue Jan 13 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.7.4:
* Bug Fixes
- Ignore tags associated with releases #1313
- Update to version 3.7.3:
* #1309 Fix some bugs
- -verify is ignored if -u is used
- versions aren't pinned and verified if version comments are
semver
Details see
https://github.com/suzuki-shunsuke/pinact/releases/tag/v3.7.3
- Update to version 3.7.2:
* Fixes
- sarif: Add fixes field for reviewdog suggestion support
* Dependencies
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.7.3 (#1310)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.449.0 (#1311)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.448.1 (#1307)
- chore(deps): update dependency goreleaser/goreleaser to
v2.13.2 (#1306)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.7.2 (#1305)
- Update to version 3.7.1:
There is no change between v3.7.0 and v3.7.1.
There was an issue during the release of v3.7.0, so we released
v3.7.1.
- Update to version 3.7.0:
* Features
- #1294 SARIF Output Support
- #1297 Support evironment variables PINACT_GITHUB_TOKEN and
PINACT_GHES_TOKEN
* SARIF Output Support
[#1294]
pinact can output the result in the SARIF format.
pinact run --format sarif
This format is useful to integration tools like reviewdog and
GitHub SARIF Code Scanning.
Reviewdog:
pinact run --diff --format sarif |
reviewdog -f sarif -name pinact -reporter github-pr-review
* GitHub SARIF Code Scanning:
- run: pinact run --diff --format sarif > sarif.json || true
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
with:
sarif_file: sarif.json
category: pinact
* Support evironment variables PINACT_GITHUB_TOKEN and
PINACT_GHES_TOKEN
[#1297] You can use different access tokens for pinact and
other tools.
* Dependencies
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.7.1 (#1302)
- chore(deps): update dependency aquaproj/aqua to v2.56.1
(#1296)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.448.0 (#1292)
- chore(deps): update dependency anchore/syft to v1.39.0
(#1291)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.447.1 (#1290)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.447.0 (#1289)
- chore(deps): update dependency aquaproj/aqua to v2.56.0
(#1288)
- fix(deps): update module github.com/goccy/go-yaml to v1.19.1
(#1287)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.6.0 (#1285)
* Tue Dec 16 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.6.0:
* Features
- #1275 Support GitHub Enterprise
- #1282 #1284 Support PINACT_MIN_AGE environment variable for
- min-age option
* Bug Fixes
- #1283 Fix a bug that pinact token set can't be cancelled by
ctrl-c
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.446.0 (#1281)
- chore(deps): update dependency anchore/syft to v1.38.2
(#1276)
- chore(deps): update dependency sigstore/cosign to v3.0.3
(#1277)
- chore(deps): update dependency goreleaser/goreleaser to
v2.13.1 (#1272)
- chore(deps): update dependency golangci/golangci-lint to
v2.7.2 (#1270)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.445.0 (#1269)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.5.0 (#1268)
* Thu Dec 11 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.5.0:
* Features
- #1266 #1267 Add --min-age (-m) option
Skip recently released versions when updating actions with -u
flag.
pinact run -u --min-age 7
[#] or using short alias
pinact run -u -m 7
This helps avoid updating to potentially unstable versions
that haven't had time to prove their stability.
- For GitHub Releases, the PublishedAt date is checked
- For tags, the commit's Committer.Date is checked
* Refactoring
- #1259 Use Destination pattern for urfave/cli flags
* Dependencies
- chore(deps): update dependency aquaproj/aqua to v2.55.3
(#1264)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.444.2 (#1263)
- fix(deps): update module golang.org/x/oauth2 to v0.34.0
(#1262)
- fix(deps): update module github.com/google/go-github/v79 to
v80 (#1261)
- fix(deps): update module
github.com/suzuki-shunsuke/urfave-cli-v3-util to v0.1.2
(#1260)
- chore(deps): update dependency suzuki-shunsuke/nllint to v1
(#1258)
- chore(deps): update dependency crate-ci/typos to v1.40.0
(#1257)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.4.6 (#1256)
* Mon Dec 08 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.4.6:
* #1250 #1251 Replace logrus with slog
* #1109 #1254 Refactoring
* chore(deps): update dependency crate-ci/typos to v1.37.0
(#1161)
* chore(deps): update dependency suzuki-shunsuke/ghalint to
v1.5.4 (#1253)
* chore(deps): update dependency aquaproj/aqua-registry to
v4.444.0 (#1249)
* chore(deps): update dependency go to v1.25.5 (#1248)
* chore(deps): update actions/checkout action to v6.0.1 (#1247)
* chore(deps): update dependency aquaproj/aqua-registry to
v4.443.0 (#1246)
* chore(deps): update dependency goreleaser/goreleaser to v2.13.0
(#1245)
* chore(deps): update dependency aquaproj/aqua-registry to
v4.442.1 (#1244)
* chore(deps): update suzuki-shunsuke/go-autofix-action action to
v0.1.11 (#1243)
* fix(deps): update module github.com/goccy/go-yaml to v1.19.0
(#1242)
* fix(deps): update module github.com/hashicorp/go-version to
v1.8.0 (#1241)
* chore(deps): update dependency aquaproj/aqua-registry to
v4.442.0 (#1240)
* chore(deps): update dependency suzuki-shunsuke/pinact to v3.4.5
(#1238)
* chore(deps): update dependency aquaproj/aqua-registry to
v4.441.0 (#1239)
* Thu Nov 27 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.4.5:
* Bug Fixes
- fix: ignore draft releases (#1237)
* Dependencies
- chore(deps): update actions/checkout action to v6 (#1232)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.440.0 (#1235)
- chore(deps): update dependency rhysd/actionlint to v1.7.9
(#1234)
- chore(deps): update dependency aquaproj/aqua to v2.55.2
(#1233)
- chore(deps): update actions/setup-go action to v6.1.0 (#1230)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.439.0 (#1229)
- chore(deps): update dependency anchore/syft to v1.38.0
(#1228)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.438.0 (#1227)
- fix(deps): update module github.com/google/go-github/v78 to
v79 (#1222)
- fix(deps): update module github.com/urfave/cli/v3 to v3.6.1
(#1225)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.437.0 (#1224)
- chore(deps): update actions/checkout action to v5.0.1 (#1223)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.4.4 (#1221)
* Mon Nov 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.4.4:
* Bug Fixes
- Skip prerelease tags when current version is stable
@fredericlepied
* Dependencies
- chore(deps): update dependency aquaproj/aqua-registry to
v4.436.0 (#1215)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.4.3 (#1214)
* Mon Nov 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.4.3:
* Bug Fixes
- #1201 Skip prereleases when current version is stable
@mceachen
- #1213 Fixed bugs of #1201
* Dependencies
- chore(deps): update actions/setup-go action to v6 (#1123)
- chore(deps): update aquaproj/aqua-installer action to v4.0.3
(#1113)
- chore(deps): update aquaproj/aqua-installer action to v4.0.4
(#1198)
- chore(deps): update aquaproj/aqua-renovate-config to v2.9.0
(#1136)
- chore(deps): update dependency anchore/syft to v1.32.0
(#1110)
- chore(deps): update dependency anchore/syft to v1.33.0
(#1143)
- chore(deps): update dependency anchore/syft to v1.34.1
(#1182)
- chore(deps): update dependency anchore/syft to v1.34.2
(#1183)
- chore(deps): update dependency anchore/syft to v1.36.0
(#1192)
- chore(deps): update dependency anchore/syft to v1.37.0
(#1202)
- chore(deps): update dependency aquaproj/aqua to v2.53.10
(#1114)
- chore(deps): update dependency aquaproj/aqua to v2.53.11
(#1126)
- chore(deps): update dependency aquaproj/aqua to v2.54.0
(#1134)
- chore(deps): update dependency aquaproj/aqua to v2.54.1
(#1137)
- chore(deps): update dependency aquaproj/aqua to v2.55.0
(#1148)
- chore(deps): update dependency aquaproj/aqua to v2.55.1
(#1190)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.404.0 (#1106)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.405.0 (#1107)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.406.0 (#1108)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.407.0 (#1111)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.408.0 (#1116)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.409.0 (#1127)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.409.1 (#1128)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.410.0 (#1129)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.411.0 (#1131)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.411.1 (#1135)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.412.0 (#1142)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.413.0 (#1146)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.414.0 (#1149)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.415.0 (#1150)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.416.0 (#1153)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.417.0 (#1154)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.418.0 (#1157)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.419.0 (#1160)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.420.0 (#1163)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.421.0 (#1165)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.422.0 (#1167)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.423.0 (#1168)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.424.0 (#1169)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.425.0 (#1171)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.426.0 (#1173)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.427.0 (#1176)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.428.0 (#1181)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.429.0 (#1184)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.430.0 (#1187)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.430.1 (#1193)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.431.0 (#1195)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.432.0 (#1196)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.433.0 (#1199)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.434.0 (#1207)
- chore(deps): update dependency aquaproj/aqua-registry to
v4.435.0 (#1209)
- chore(deps): update dependency crate-ci/typos to v1.35.5
(#1105)
- chore(deps): update dependency crate-ci/typos to v1.35.6
(#1112)
- chore(deps): update dependency crate-ci/typos to v1.36.1
(#1117)
- chore(deps): update dependency crate-ci/typos to v1.36.2
(#1125)
- chore(deps): update dependency crate-ci/typos to v1.36.3
(#1159)
- chore(deps): update dependency go to v1.25.1 (#1141)
- chore(deps): update dependency go to v1.25.2 (#1172)
- chore(deps): update dependency go to v1.25.3 (#1179)
- chore(deps): update dependency go to v1.25.4 (#1204)
- chore(deps): update dependency golangci/golangci-lint to
v2.5.0 (#1152)
- chore(deps): update dependency google/go-licenses to v2
(#1122)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.0 (#1118)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.1 (#1145)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.2 (#1147)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.3 (#1158)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.4 (#1162)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.5 (#1164)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.6 (#1188)
- chore(deps): update dependency goreleaser/goreleaser to
v2.12.7 (#1194)
- chore(deps): update dependency mvdan/gofumpt to v0.9.0
(#1119)
- chore(deps): update dependency mvdan/gofumpt to v0.9.1
(#1130)
- chore(deps): update dependency mvdan/gofumpt to v0.9.2
(#1186)
- chore(deps): update dependency reviewdog/reviewdog to v0.21.0
(#1120)
- chore(deps): update dependency rhysd/actionlint to v1.7.8
(#1177)
- chore(deps): update dependency sigstore/cosign to v2.6.0
(#1139)
- chore(deps): update dependency sigstore/cosign to v2.6.1
(#1166)
- chore(deps): update dependency sigstore/cosign to v3 (#1175)
- chore(deps): update dependency sigstore/cosign to v3.0.2
(#1178)
- chore(deps): update dependency suzuki-shunsuke/pinact to
v3.4.2 (#1104)
- chore(deps): update suzuki-shunsuke/go-release-workflow
action to v6.0.2 (#1115)
- chore(deps): update suzuki-shunsuke/go-release-workflow
action to v7 (#1189)
- chore(deps): update suzuki-shunsuke/go-test-full-workflow
action to v4.0.1 (#1156)
- chore(deps): update suzuki-shunsuke/go-test-full-workflow
action to v5 (#1174)
- chore(deps): update suzuki-shunsuke/go-test-full-workflow
action to v5.0.1 (#1191)
- chore(deps): update suzuki-shunsuke/renovate-config to v3.3.0
(#1121)
- chore(deps): update suzuki-shunsuke/renovate-config to v3.3.1
(#1144)
- fix(deps): update module github.com/google/go-github/v74 to
v75 (#1155)
- fix(deps): update module github.com/google/go-github/v75 to
v76 (#1180)
- fix(deps): update module github.com/google/go-github/v76 to
v78 (#1206)
- fix(deps): update module github.com/spf13/afero to v1.15.0
(#1132)
- fix(deps): update module github.com/urfave/cli/v3 to v3.5.0
(#1185)
- fix(deps): update module github.com/urfave/cli/v3 to v3.6.0
(#1208)
- fix(deps): update module golang.org/x/oauth2 to v0.31.0
(#1124)
- fix(deps): update module golang.org/x/oauth2 to v0.32.0
(#1170)
- fix(deps): update module golang.org/x/oauth2 to v0.33.0
(#1205)
* Fri Nov 07 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 3.4.2:
* fix(casks): restrict quarantine removal to macOS only (#1103)
* test: add comprehensive unit tests for version comparison
functions (#1102)
* feat: add Claude Code auto-formatting hooks (#1101)
* docs: add comprehensive AI assistant guidelines with shared
documentation (#1100)
* docs: add CLAUDE.md with project guidelines for AI assistants
(#1099)
* docs: add comprehensive documentation comments to all packages
(#1098)
* chore(deps): update dependency anchore/syft to v1.31.0 (#1097)
* ci: use go-test-full-workflow (#1094)
* chore: use aqua lsp (#1093)
* chore(deps): update dependency aquaproj/aqua-registry to
v4.403.0 (#1092)
* Fri Nov 07 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- new package pinact: CLI to edit GitHub Workflow and Composite
action files and pin versions of Actions and Reusable Workflows.
pinact can also update their versions and verify version
annotations
/usr/share/bash-completion/completions/pinact
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 03:14:27 2026