From eb4e5497691ca2199fc1b61823c9fa89996d44c2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Apr 2026 10:18:56 +0000 Subject: [PATCH 1/2] [CHORE](gha)(deps): Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.2 to 0.5.3. - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/71321a20a9ded102f6e9ce5718a2fcec2c4f70d8...b1d7e1fb5de872772f31590499237e7cce841e8e) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/omf_sec_checks.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/omf_sec_checks.yml b/.github/workflows/omf_sec_checks.yml index c627dc5..22066c0 100644 --- a/.github/workflows/omf_sec_checks.yml +++ b/.github/workflows/omf_sec_checks.yml @@ -40,7 +40,7 @@ jobs: persist-credentials: false - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2 + uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3 with: persona: pedantic advanced-security: false # Use GH PR Annotations instead of uploading SARIF results for better visibility in the PR From afc961d9088321b65d7df08fe2bac8489ef05d4a Mon Sep 17 00:00:00 2001 From: John McCall Date: Wed, 22 Apr 2026 22:34:08 +0200 Subject: [PATCH 2/2] no slim Signed-off-by: John McCall --- .github/workflows/overture-projection.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/overture-projection.yml b/.github/workflows/overture-projection.yml index c325f63..e37b3ca 100644 --- a/.github/workflows/overture-projection.yml +++ b/.github/workflows/overture-projection.yml @@ -168,7 +168,7 @@ permissions: jobs: overture-projection: name: Overture PRojection - runs-on: ubuntu-slim + runs-on: ubuntu-latest # One active run per PR; cancel in-progress if a new commit is pushed. concurrency: