Security patch for dependency pymdown-extensions

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log for spellcheck-github-actions
 
+## 0.58.0, 2026-01-15, security release, update not required
+
+- A minor security issue in the dependency: pymdown-extensions, which is used by the core component PySpelling
+  - https://github.com/advisories/GHSA-r6h4-mm7h-8pmq
+  - Original issue: https://github.com/facelessuser/pymdown-extensions/issues/2716
+
 ## 0.57.0, 2026-01-14, maintenance release, update not required
 
 - Docker based image updated to Python 3.14.2 slim trixie via PR [#310](https://github.com/rojopolis/spellcheck-github-actions/pull/310) from Dependabot. The version is the same, the image has had updates.

README.md

@@ -110,7 +110,7 @@ jobs:
     steps:
     # The checkout step
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
 ```
 
@@ -208,7 +208,7 @@ jobs:
     steps:
     # The checkout step
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
       with:
         source_files: README.md CHANGELOG.md notes/Notes.md
@@ -236,7 +236,7 @@ jobs:
     steps:
     # The checkout step
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
       with:
         source_files: README.md CHANGELOG.md notes/Notes.md
@@ -334,7 +334,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
       with:
         config_path: config/.spellcheck.yml # put path to configuration file here
@@ -465,7 +465,7 @@ See the documentation for [PySpelling](https://facelessuser.github.io/pyspelling
 The action can be specified to use `hunspell` instead of `aspell` by setting the `spellchecker` parameter to `hunspell`.
 
 ```yaml
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
       with:
         task_name: Markdown
@@ -571,7 +571,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
       with:
         config_path: .github/spellcheck.yml
@@ -602,7 +602,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
       with:
         config_path: .github/spellcheck.yml # <--- put path to configuration file here
@@ -843,7 +843,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: rojopolis/spellcheck-github-actions@0.57.0
+    - uses: rojopolis/spellcheck-github-actions@0.58.0
       name: Spellcheck
 ```
 

action.yml

@@ -33,4 +33,4 @@ branding:
   icon: type
 runs:
   using: docker
-  image: 'docker://jonasbn/github-action-spellcheck:0.57.0'
+  image: 'docker://jonasbn/github-action-spellcheck:0.58.0'

requirements.txt

@@ -4,7 +4,7 @@ bracex==2.5.post1
 html5lib==1.1
 lxml==5.3.0
 Markdown==3.7
-pymdown-extensions==10.15.0
+pymdown-extensions==10.16.1
 pyspelling==2.12.1
 PyYAML==6.0.2
 six==1.16.0