From 9d173e1568232420e1354ab438881ca9e54cac20 Mon Sep 17 00:00:00 2001 From: jonasbn Date: Fri, 19 Jun 2026 17:01:40 +0200 Subject: [PATCH 1/3] Release 0.62.0 Co-Authored-By: Claude Sonnet 4.6 --- CHANGELOG.md | 12 ++++++++++++ README.md | 16 ++++++++-------- action.yml | 2 +- 3 files changed, 21 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5a6c0a22..64bfe987 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,17 @@ # Change Log for spellcheck-github-actions +## 0.62.0, 2026-06-19, security release, update recommended + +- Bumped `lxml` from 5.3.0 to 5.4.0 to address known CVEs via PR [#357](https://github.com/rojopolis/spellcheck-github-actions/pull/357). + +- Bumped `pymdown-extensions` to patched version 10.21.3 via PR [#358](https://github.com/rojopolis/spellcheck-github-actions/pull/358). + +- Bumped `Markdown` from 3.7 to 3.8.1 to patched version via PR [#359](https://github.com/rojopolis/spellcheck-github-actions/pull/359). + +- Cleaned up GitHub Actions workflows using `zizmor` and removed ratchet annotations via PR [#355](https://github.com/rojopolis/spellcheck-github-actions/pull/355) and PR [#356](https://github.com/rojopolis/spellcheck-github-actions/pull/356). + +- Clarified examples in README. + ## 0.61.0, 2026-06-14, minor feature release, update not required - Docker based image updated for Python 3.14.5 slim trixie via PR [#344](https://github.com/rojopolis/spellcheck-github-actions/pull/344) from Dependabot. diff --git a/README.md b/README.md index babf5b1e..aefc697a 100644 --- a/README.md +++ b/README.md @@ -118,7 +118,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 ``` This configuration file must be created in a the `.github/workflows/` directory. @@ -230,7 +230,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 with: source_files: README.md CHANGELOG.md notes/Notes.md task_name: Markdown @@ -265,7 +265,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 with: source_files: README.md CHANGELOG.md notes/Notes.md task_name: Markdown @@ -374,7 +374,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 with: config_path: config/.spellcheck.yml # put path to configuration file here source_files: source/scanning.md source/triggers.md @@ -505,7 +505,7 @@ The action can be specified to use `hunspell` instead of `aspell` by setting the ```yaml - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 with: task_name: Markdown spell_checker: hunspell @@ -620,7 +620,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 with: config_path: .github/spellcheck.yml skip_dict_compile: true # <--- set to true to skip custom dictionary compilation @@ -660,7 +660,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 with: config_path: .github/spellcheck.yml # <--- put path to configuration file here ``` @@ -909,7 +909,7 @@ jobs: persist-credentials: false - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.61.0 + uses: rojopolis/spellcheck-github-actions@0.62.0 ``` This step adds an action, which checkout out the repository for inspection by linters and other actions like this one. diff --git a/action.yml b/action.yml index 5364c5eb..4b91aecb 100644 --- a/action.yml +++ b/action.yml @@ -33,4 +33,4 @@ branding: icon: type runs: using: docker - image: 'docker://jonasbn/github-action-spellcheck:0.61.0' + image: 'docker://jonasbn/github-action-spellcheck:0.62.0' From 56f3bd37e25101289b0c1d47f93af5a34bb83038 Mon Sep 17 00:00:00 2001 From: jonasbn Date: Fri, 19 Jun 2026 17:08:24 +0200 Subject: [PATCH 2/3] Updated local dictionary --- wordlist.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/wordlist.txt b/wordlist.txt index 9c912d88..373c871d 100644 --- a/wordlist.txt +++ b/wordlist.txt @@ -3,6 +3,7 @@ Arithmatex BetterEm Brømsø CVE +CVEs CWE Cavalcanti Customizable From 7c0a079f8e6f5e39dcae19c0d1953fcf6d7a34aa Mon Sep 17 00:00:00 2001 From: jonasbn Date: Fri, 19 Jun 2026 17:12:44 +0200 Subject: [PATCH 3/3] Fix YAML indentation in README with: blocks Co-Authored-By: Claude Sonnet 4.6 --- README.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index aefc697a..3d695fdb 100644 --- a/README.md +++ b/README.md @@ -376,9 +376,9 @@ jobs: - name: Spellcheck uses: rojopolis/spellcheck-github-actions@0.62.0 with: - config_path: config/.spellcheck.yml # put path to configuration file here - source_files: source/scanning.md source/triggers.md - task_name: Markdown + config_path: config/.spellcheck.yml # put path to configuration file here + source_files: source/scanning.md source/triggers.md + task_name: Markdown ``` ### Predefined Name @@ -622,8 +622,8 @@ jobs: - name: Spellcheck uses: rojopolis/spellcheck-github-actions@0.62.0 with: - config_path: .github/spellcheck.yml - skip_dict_compile: true # <--- set to true to skip custom dictionary compilation + config_path: .github/spellcheck.yml + skip_dict_compile: true # <--- set to true to skip custom dictionary compilation ``` This can be useful if you have a large custom dictionary that does not change often, as it can save time during the action run. @@ -662,7 +662,7 @@ jobs: - name: Spellcheck uses: rojopolis/spellcheck-github-actions@0.62.0 with: - config_path: .github/spellcheck.yml # <--- put path to configuration file here + config_path: .github/spellcheck.yml # <--- put path to configuration file here ``` ```yaml