Pull requests

• fix(docker): bump chainguard/git base to drop emSign ECC Root CA - G3

  #465·SUSTAPLE117 opened Oct 21, 2026Contributor·

  ·

• build(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 in /.github/workflows in the github_actions group across 1 directory

  dependenciesgithub_actions
  #463·dependabot[bot] opened Oct 14, 2026Bot·

  ·

• fix(rules): ignore bash scripts under RUNNER_TEMP in untrusted_checkout_exec

  #461·Tyagiquamar opened Oct 11, 2026Contributor·

  ·
  1

  3

• fix(rules): check major and minor action refs against the latest release in their line

  #460·Mohil-Ahuja opened Oct 10, 2026·

  ·
  1

  2

• perf(opa): cache prepared eval queries to avoid per-Eval PrepareForEval

  #448·matiasinsaurralde opened Jul 9, 2026Contributor·6 tasks done·

  ·

• build(deps): bump github.com/rs/zerolog from 1.35.0 to 1.35.1

  dependenciesgo
  #435·dependabot[bot] opened May 1, 2026Bot·

  ·
  1

• build(deps): bump github.com/mark3labs/mcp-go from 0.46.0 to 0.50.0

  dependenciesgo
  #434·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump github.com/package-url/packageurl-go from 0.1.5 to 0.1.6

  dependenciesgo
  #433·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0

  dependenciesgithub_actions
  #432·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump github/codeql-action from 4.31.2 to 4.35.3

  dependenciesgithub_actions
  #431·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump github.com/open-policy-agent/opa from 1.15.1 to 1.16.1

  dependenciesgo
  #430·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1

  dependenciesgithub_actions
  #429·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1

  dependenciesgithub_actions
  #428·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0

  dependenciesgithub_actions
  #427·dependabot[bot] opened May 1, 2026Bot·

  ·

• build(deps): bump github.com/go-git/go-git/v6 from 6.0.0-20260331140939-8126d61b3452 to 6.0.0-alpha.2 in the go_modules group across 1 directory

  dependenciesgo
  #426·dependabot[bot] opened Apr 17, 2026Bot·

  ·