chore(deps)(deps): bump the github-actions group with 11 updates by dependabot[bot] · Pull Request #609 · Jebel-Quant/rhiza-cli

dependabot · 2026-07-17T14:07:54Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the github-actions group with 11 updates:

Package	From	To
jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_book.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_ci.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza	`1.1.3`	`1.2.1`
actions/attest	`4.1.1`	`4.2.0`
jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_sync.yml	`1.1.3`	`1.2.1`
jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml	`1.1.3`	`1.2.1`

Updates jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

Fix latent helper hazards and harden dogfood linking path (#1399)

Apply suggested fix to tests/bundles/test_bundle_combinations.py from Copilot Autofix (#1400)

Potential fix for 1 code quality finding (#1401)

Pin required checks to GitHub Actions and protect v* tags (#1410)

Commits

e0fe023 chore: release v1.2.1
0920712 ci: bump rhiza self-reference workflow and action pins to v1.2.1
7a906d2 chore: release v1.2.0 (#1417)
432b341 chore: remove all rhiza-tools usage from the template (#1415)
f5c82ad chore: remove rhiza-tools usage from make.d (suppression-audit, pip-audit, an...
98d0fcf ci: derive reusable Python matrix from BAIPP classifiers (#1414)
20e5e93 chore: drop make bump/release targets — releasing moves to rhiza-claude /rele...
6502ddc security: pin required checks to GitHub Actions and protect v* tags (#1410)
1b1e280 chore: de-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
04bf907 chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_book.yml from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_book.yml's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_book.yml's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

Fix latent helper hazards and harden dogfood linking path (#1399)

Apply suggested fix to tests/bundles/test_bundle_combinations.py from Copilot Autofix (#1400)

Potential fix for 1 code quality finding (#1401)

Pin required checks to GitHub Actions and protect v* tags (#1410)

Commits

e0fe023 chore: release v1.2.1
0920712 ci: bump rhiza self-reference workflow and action pins to v1.2.1
7a906d2 chore: release v1.2.0 (#1417)
432b341 chore: remove all rhiza-tools usage from the template (#1415)
f5c82ad chore: remove rhiza-tools usage from make.d (suppression-audit, pip-audit, an...
98d0fcf ci: derive reusable Python matrix from BAIPP classifiers (#1414)
20e5e93 chore: drop make bump/release targets — releasing moves to rhiza-claude /rele...
6502ddc security: pin required checks to GitHub Actions and protect v* tags (#1410)
1b1e280 chore: de-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
04bf907 chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_ci.yml from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_ci.yml's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_ci.yml's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

Fix latent helper hazards and harden dogfood linking path (#1399)

Apply suggested fix to tests/bundles/test_bundle_combinations.py from Copilot Autofix (#1400)

Potential fix for 1 code quality finding (#1401)

Pin required checks to GitHub Actions and protect v* tags (#1410)

Commits

e0fe023 chore: release v1.2.1
0920712 ci: bump rhiza self-reference workflow and action pins to v1.2.1
7a906d2 chore: release v1.2.0 (#1417)
432b341 chore: remove all rhiza-tools usage from the template (#1415)
f5c82ad chore: remove rhiza-tools usage from make.d (suppression-audit, pip-audit, an...
98d0fcf ci: derive reusable Python matrix from BAIPP classifiers (#1414)
20e5e93 chore: drop make bump/release targets — releasing moves to rhiza-claude /rele...
6502ddc security: pin required checks to GitHub Actions and protect v* tags (#1410)
1b1e280 chore: de-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
04bf907 chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

Fix latent helper hazards and harden dogfood linking path (#1399)

Apply suggested fix to tests/bundles/test_bundle_combinations.py from Copilot Autofix (#1400)

Potential fix for 1 code quality finding (#1401)

Pin required checks to GitHub Actions and protect v* tags (#1410)

Commits

e0fe023 chore: release v1.2.1
0920712 ci: bump rhiza self-reference workflow and action pins to v1.2.1
7a906d2 chore: release v1.2.0 (#1417)
432b341 chore: remove all rhiza-tools usage from the template (#1415)
f5c82ad chore: remove rhiza-tools usage from make.d (suppression-audit, pip-audit, an...
98d0fcf ci: derive reusable Python matrix from BAIPP classifiers (#1414)
20e5e93 chore: drop make bump/release targets — releasing moves to rhiza-claude /rele...
6502ddc security: pin required checks to GitHub Actions and protect v* tags (#1410)
1b1e280 chore: de-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
04bf907 chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

Fix latent helper hazards and harden dogfood linking path (#1399)

Apply suggested fix to tests/bundles/test_bundle_combinations.py from Copilot Autofix (#1400)

Potential fix for 1 code quality finding (#1401)

Pin required checks to GitHub Actions and protect v* tags (#1410)

Commits

e0fe023 chore: release v1.2.1
0920712 ci: bump rhiza self-reference workflow and action pins to v1.2.1
7a906d2 chore: release v1.2.0 (#1417)
432b341 chore: remove all rhiza-tools usage from the template (#1415)
f5c82ad chore: remove rhiza-tools usage from make.d (suppression-audit, pip-audit, an...
98d0fcf ci: derive reusable Python matrix from BAIPP classifiers (#1414)
20e5e93 chore: drop make bump/release targets — releasing moves to rhiza-claude /rele...
6502ddc security: pin required checks to GitHub Actions and protect v* tags (#1410)
1b1e280 chore: de-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
04bf907 chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

Fix latent helper hazards and harden dogfood linking path (#1399)

Apply suggested fix to tests/bundles/test_bundle_combinations.py from Copilot Autofix (#1400)

Potential fix for 1 code quality finding (#1401)

Pin required checks to GitHub Actions and protect v* tags (#1410)

Commits

e0fe023 chore: release v1.2.1
0920712 ci: bump rhiza self-reference workflow and action pins to v1.2.1
7a906d2 chore: release v1.2.0 (#1417)
432b341 chore: remove all rhiza-tools usage from the template (#1415)
f5c82ad chore: remove rhiza-tools usage from make.d (suppression-audit, pip-audit, an...
98d0fcf ci: derive reusable Python matrix from BAIPP classifiers (#1414)
20e5e93 chore: drop make bump/release targets — releasing moves to rhiza-claude /rele...
6502ddc security: pin required checks to GitHub Actions and protect v* tags (#1410)
1b1e280 chore: de-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
04bf907 chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
Additional commits viewable in compare view

Updates jebel-quant/rhiza from 1.1.3 to 1.2.1

Release notes

Sourced from jebel-quant/rhiza's releases.

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

Remove the automated rhiza_sync feature (sync is now manual) (#1403)

Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)

De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)

Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)

Derive reusable Python matrix from BAIPP classifiers (#1414)

Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)

Remove all rhiza-tools usage from the template (#1415)

Other Changes

Fix for Module is imported more than once (#1397)

Fix for Module is imported more than once (#1398)

... (truncated)

Changelog

Sourced from jebel-quant/rhiza's changelog.

[1.2.1] - 2026-07-17

Maintenance

Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

(bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

(deps) Lock file maintenance (#1402)

(deps) Update dependency typer to v0.26.8 (#1407)

(deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)

(deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)

(deps) Update dependency mypy to v2.3.0 (

Bumps the github-actions group with 11 updates: | Package | From | To | | --- | --- | --- | | [jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_book.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_ci.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.0` | | [jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_sync.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.1` | Updates `jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_book.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_ci.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `actions/attest` from 4.1.1 to 4.2.0 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](actions/attest@v4.1.1...v4.2.0) Updates `jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_sync.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.1) --- updated-dependencies: - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_book.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-17T14:07:55Z

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-07-17T14:08:55Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added the dependencies label Jul 17, 2026

tschm closed this Jul 17, 2026

tschm deleted the dependabot/github_actions/github-actions-1f87ff8008 branch July 17, 2026 14:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps)(deps): bump the github-actions group with 11 updates#609

chore(deps)(deps): bump the github-actions group with 11 updates#609
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-1f87ff8008

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.1

Changelog

[1.2.1] - 2026-07-17

Maintenance

v1.2.0

Changelog

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

[1.2.1] - 2026-07-17

Maintenance

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

v1.2.1

Changelog

[1.2.1] - 2026-07-17

Maintenance

v1.2.0

Changelog

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

[1.2.1] - 2026-07-17

Maintenance

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

v1.2.1

Changelog

[1.2.1] - 2026-07-17

Maintenance

v1.2.0

Changelog

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

[1.2.1] - 2026-07-17

Maintenance

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

v1.2.1

Changelog

[1.2.1] - 2026-07-17

Maintenance

v1.2.0

Changelog

[1.2.0] - 2026-07-16

New Features

Bug Fixes

Dependencies

Maintenance

Other Changes

[1.2.1] - 2026-07-17

Maintenance

[1.2.0] - 2026-07-16

New Features

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading