diff --git a/CHANGELOG.md b/CHANGELOG.md index 2320bef4..fb529c32 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,11 @@ # Change Log for spellcheck-github-actions +## 0.58.0, 2026-01-15, security release, update not required + +- A minor security issue in the dependency: pymdown-extensions, which is used by the core component PySpelling + - https://github.com/advisories/GHSA-r6h4-mm7h-8pmq + - Original issue: https://github.com/facelessuser/pymdown-extensions/issues/2716 + ## 0.57.0, 2026-01-14, maintenance release, update not required - Docker based image updated to Python 3.14.2 slim trixie via PR [#310](https://github.com/rojopolis/spellcheck-github-actions/pull/310) from Dependabot. The version is the same, the image has had updates. diff --git a/README.md b/README.md index bbf01182..4964584c 100644 --- a/README.md +++ b/README.md @@ -110,7 +110,7 @@ jobs: steps: # The checkout step - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck ``` @@ -208,7 +208,7 @@ jobs: steps: # The checkout step - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck with: source_files: README.md CHANGELOG.md notes/Notes.md @@ -236,7 +236,7 @@ jobs: steps: # The checkout step - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck with: source_files: README.md CHANGELOG.md notes/Notes.md @@ -334,7 +334,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck with: config_path: config/.spellcheck.yml # put path to configuration file here @@ -465,7 +465,7 @@ See the documentation for [PySpelling](https://facelessuser.github.io/pyspelling The action can be specified to use `hunspell` instead of `aspell` by setting the `spellchecker` parameter to `hunspell`. ```yaml - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck with: task_name: Markdown @@ -571,7 +571,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck with: config_path: .github/spellcheck.yml @@ -602,7 +602,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck with: config_path: .github/spellcheck.yml # <--- put path to configuration file here @@ -843,7 +843,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - - uses: rojopolis/spellcheck-github-actions@0.57.0 + - uses: rojopolis/spellcheck-github-actions@0.58.0 name: Spellcheck ``` diff --git a/action.yml b/action.yml index 2d9fd72b..f8f0c3af 100644 --- a/action.yml +++ b/action.yml @@ -33,4 +33,4 @@ branding: icon: type runs: using: docker - image: 'docker://jonasbn/github-action-spellcheck:0.57.0' + image: 'docker://jonasbn/github-action-spellcheck:0.58.0' diff --git a/requirements.txt b/requirements.txt index 738e382f..c3d0bd3f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,7 +4,7 @@ bracex==2.5.post1 html5lib==1.1 lxml==5.3.0 Markdown==3.7 -pymdown-extensions==10.15.0 +pymdown-extensions==10.16.1 pyspelling==2.12.1 PyYAML==6.0.2 six==1.16.0