From fa85b1991b90ab027c25b06c7e79fbd1037b0d3d Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Tue, 28 Jul 2026 10:40:54 +0200 Subject: [PATCH 1/5] docs(changelog): prepare v2.10.2 release notes Signed-off-by: PythonWoods --- .zenzic.toml | 2 +- CHANGELOG.md | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/.zenzic.toml b/.zenzic.toml index 99f7a46..fed229a 100644 --- a/.zenzic.toml +++ b/.zenzic.toml @@ -118,7 +118,7 @@ brand_obsolescence = [ # IMPACT: In --audit mode, shown with [POLICY_EXEMPTION] label. # [governance.directory_policies] -"README.md" = ["Z104"] +"README.md" = ["Z101"] "assets/**" = ["Z405"] # Governance Playbook: diff --git a/CHANGELOG.md b/CHANGELOG.md index 5ff46f2..aef7fae 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,9 @@ All notable changes to zenzic-action are documented in this file. The project ad ## [Unreleased] +### Fixed +- **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to `0.26.1`, integrating critical URP unification and static asset resolution fixes. + ## [2.10.1] - 2026-07-26 ### Changed From 8daa1e167cfd9fdf5921fdbc64381ffe17156598 Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Tue, 28 Jul 2026 10:48:20 +0200 Subject: [PATCH 2/5] chore(deps): pin zenzic core to 0.26.2 Signed-off-by: PythonWoods --- .bumpversion.toml | 2 +- CONTRIBUTING.md | 2 +- README.md | 4 ++-- RELEASE.md | 4 ++-- action.yml | 2 +- pyproject.toml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.bumpversion.toml b/.bumpversion.toml index dd7ec26..b9195b5 100644 --- a/.bumpversion.toml +++ b/.bumpversion.toml @@ -47,4 +47,4 @@ replace = '''| `{new_version}` (current) | ✅ All security fixes | # bump-my-version does NOT manage these files; they are listed here for discoverability. # --------------------------------------------------------------------------- [tool.bumpversion.custom_variables.core_version] -current = "0.25.3" +current = "0.26.2" diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index b79766f..535faba 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -111,7 +111,7 @@ uvx pre-commit autoupdate --freeze just verify # 2. Update the Zenzic core pin to the target version (e.g., 0.25.0) -just pin-core 0.25.3 +just pin-core 0.26.2 # 3. Check alignment between core and action dependencies just versions diff --git a/README.md b/README.md index 3294936..6e278f2 100644 --- a/README.md +++ b/README.md @@ -59,7 +59,7 @@ The minimal configuration — zero Python setup, SARIF to Code Scanning in one s - name: Run Zenzic Documentation Quality Gate uses: PythonWoods/zenzic-action@v2 with: - version: "0.25.3" + version: "0.26.2" format: sarif upload-sarif: "true" permissions: @@ -207,7 +207,7 @@ jobs: | Input | Default | Description | |:---|:---|:---| -| `version` | `0.25.3` | Zenzic Core version to execute. Pin to a specific release (e.g. `0.25.0`) for reproducible CI. | +| `version` | `0.26.2` | Zenzic Core version to execute. Pin to a specific release (e.g. `0.25.0`) for reproducible CI. | | `format` | `"text"` | Output format: `text`, `json`, or `sarif` | | `upload-sarif` | `"false"` | Automatically upload SARIF output to GitHub Code Scanning | diff --git a/RELEASE.md b/RELEASE.md index 2956f85..4f9541c 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -14,9 +14,9 @@ Before tagging, every item must be green: -- [ ] `action.yml` — `default:` pin updated to the latest Zenzic core version (`0.25.3`) +- [ ] `action.yml` — `default:` pin updated to the latest Zenzic core version (`0.26.2`) - [ ] `package.json` version bumped to `2.10.1` -- [ ] `pyproject.toml` — synchronized with core pin (`zenzic==0.25.3`) +- [ ] `pyproject.toml` — synchronized with core pin (`zenzic==0.26.2`) - [ ] `just versions` — returns `✅ Ecosystem alignment verified.` - [ ] `just verify` — exits 0 - [ ] `zenzic check .` — zero findings (DQS 100/100) diff --git a/action.yml b/action.yml index 8682f21..31abe1a 100644 --- a/action.yml +++ b/action.yml @@ -16,7 +16,7 @@ inputs: version: description: "Zenzic version to use. Defaults to latest stable." required: false - default: "0.25.3" # x-zenzic-core-pin + default: "0.26.2" # x-zenzic-core-pin format: description: "Output format: 'text', 'json', or 'sarif'." required: false diff --git a/pyproject.toml b/pyproject.toml index 05ab05a..4d9e674 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -10,7 +10,7 @@ license = {text = "Apache-2.0"} authors = [{name = "PythonWoods", email = "dev@pythonwoods.dev"}] dynamic = ["version"] dependencies = [ - "zenzic==0.25.3", + "zenzic==0.26.2", ] [project.urls] From a2a6fdcb623725df515220be445e57d245c95e5a Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Tue, 28 Jul 2026 10:48:34 +0200 Subject: [PATCH 3/5] release: bump version to 2.10.2 Signed-off-by: PythonWoods --- .bumpversion.toml | 2 +- CHANGELOG.md | 2 ++ RELEASE.md | 14 +++++++------- SECURITY.md | 4 ++-- package.json | 2 +- 5 files changed, 13 insertions(+), 11 deletions(-) diff --git a/.bumpversion.toml b/.bumpversion.toml index b9195b5..b9ebc2f 100644 --- a/.bumpversion.toml +++ b/.bumpversion.toml @@ -2,7 +2,7 @@ # SPDX-License-Identifier: Apache-2.0 [tool.bumpversion] -current_version = "2.10.1" +current_version = "2.10.2" parse = "(?P\\d+)\\.(?P\\d+)\\.(?P\\d+)" serialize = ["{major}.{minor}.{patch}"] diff --git a/CHANGELOG.md b/CHANGELOG.md index aef7fae..6dceb1f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,8 @@ All notable changes to zenzic-action are documented in this file. The project ad ## [Unreleased] +## [2.10.2] - 2026-07-28 + ### Fixed - **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to `0.26.1`, integrating critical URP unification and static asset resolution fixes. diff --git a/RELEASE.md b/RELEASE.md index 4f9541c..033e854 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -6,8 +6,8 @@ | Field | Value | | :------ | :--------- | -| Version | v2.10.1 | -| Date | 2026-07-26 | +| Version | v2.10.2 | +| Date | 2026-07-28 | | Status | Stable | ## Release Checklist @@ -15,7 +15,7 @@ Before tagging, every item must be green: - [ ] `action.yml` — `default:` pin updated to the latest Zenzic core version (`0.26.2`) -- [ ] `package.json` version bumped to `2.10.1` +- [ ] `package.json` version bumped to `2.10.2` - [ ] `pyproject.toml` — synchronized with core pin (`zenzic==0.26.2`) - [ ] `just versions` — returns `✅ Ecosystem alignment verified.` - [ ] `just verify` — exits 0 @@ -40,15 +40,15 @@ git checkout main git pull origin main # 6. Create the release tag and push -git tag -s -m "Release v2.10.1" v2.10.1 -git push origin v2.10.1 +git tag -s -m "Release v2.10.2" v2.10.2 +git push origin v2.10.2 # 7. Move the floating v2 tag to the new release: -git tag -s -fa v2 v2.10.1^{} -m "release: v2.10.1" +git tag -s -fa v2 v2.10.2^{} -m "release: v2.10.2" git push origin v2 --force # Verification (Atomic Parity Check): -git rev-parse v2^{} v2.10.1^{} +git rev-parse v2^{} v2.10.2^{} # SUCCESS: Both hashes must be identical. ``` diff --git a/SECURITY.md b/SECURITY.md index 48f1042..74a7e25 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -75,8 +75,8 @@ by the wrapper script — it is consumed exclusively by `github/codeql-action/up | Version | Support status | |---------|----------------| -| `2.10.1` (current) | ✅ All security fixes | -| `< 2.10.1` | ❌ End of life — no support | +| `2.10.2` (current) | ✅ All security fixes | +| `< 2.10.2` | ❌ End of life — no support | --- diff --git a/package.json b/package.json index 1edb7ba..0cf9037 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "zenzic-action", - "version": "2.10.1", + "version": "2.10.2", "private": true, "description": "Official GitHub Action for Zenzic — Documentation Quality Gate", "license": "Apache-2.0", From 11dcde9b9a8af629dff797d93619895c7d5c7451 Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Tue, 28 Jul 2026 10:50:02 +0200 Subject: [PATCH 4/5] docs(changelog): update Zenzic Core dependency to version 0.26.2 Signed-off-by: PythonWoods --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6dceb1f..555eb54 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,7 +12,7 @@ All notable changes to zenzic-action are documented in this file. The project ad ## [2.10.2] - 2026-07-28 ### Fixed -- **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to `0.26.1`, integrating critical URP unification and static asset resolution fixes. +- **Core Baseline Alignment**: Realigned pinned Zenzic Core dependency to `0.26.2`, integrating critical URP unification and static asset resolution fixes. ## [2.10.1] - 2026-07-26 From 038b3290ba38d6ff397a10e3b4911b49941234af Mon Sep 17 00:00:00 2001 From: PythonWoods Date: Tue, 28 Jul 2026 11:27:05 +0200 Subject: [PATCH 5/5] ci(deps): absorb dependabot updates from PR #70 Signed-off-by: PythonWoods --- .github/workflows/compliance.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/security-posture.yml | 2 +- .github/workflows/self-check.yml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml index f8e081d..ff18345 100644 --- a/.github/workflows/compliance.yml +++ b/.github/workflows/compliance.yml @@ -26,7 +26,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 51073d1..e4d09a7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,12 +17,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Generate GitHub Release - uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3 + uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3 with: generate_release_notes: true make_latest: true diff --git a/.github/workflows/security-posture.yml b/.github/workflows/security-posture.yml index 5ea2851..434dcfe 100644 --- a/.github/workflows/security-posture.yml +++ b/.github/workflows/security-posture.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Check for SECURITY.md run: | diff --git a/.github/workflows/self-check.yml b/.github/workflows/self-check.yml index f534d2f..4d3df6d 100644 --- a/.github/workflows/self-check.yml +++ b/.github/workflows/self-check.yml @@ -37,7 +37,7 @@ jobs: # Local and CI run identical 'just check' invocations. steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Determine Zenzic Core Branch (Parity or Fallback) id: resolve-branch @@ -106,7 +106,7 @@ jobs: fi - name: Checkout local zenzic (unreleased) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: PythonWoods/zenzic ref: ${{ steps.resolve-branch.outputs.core_ref }}