coming soon to the mise docs

I'm leaning towards satire lol, it's pretty good

jactionlint 2.2 is out. 28 new rules (133 → 161), mostly for script injection, token permissions, pinning and runner limits. • --changed-since: only report what a PR changed • shell syntax errors, even without shellcheck • flags jobs whose permissions are too narrow for their actions • checks GitHub’s Actions lock file • uvx jactionlint Some new rules are on by default, so read the notes before upgrading. github.com/jdx/jactionlint/r…

16TiB saved since i started using it

this is crazy, it's just the past 5 months

jactionlint 2.0 is out. actionlint, maintained, plus zizmor-style security audits in one binary. Rules: actionlint 17, zizmor 41, jactionlint 130+ (not entirely comparable, but still) • `--fix` that converges • dependabot.yml and composite action.yml linting • your `# zizmor: ignore` comments keep working • baseline mode to adopt it gradually github.com/jdx/jactionlint

i will say that it's not the best result, but the way things are going anymore i'm sure that's temporary

new in mise: tools that keep themselves up to date. set auto_update on a global tool and mise upgrades it right before it runs. optionally run a daemon to do upgrades in the background. mise.jdx.dev/dev-tools/#auto…