build(deps): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: rvben/rumdl and zizmorcore/zizmor-action.

Updates rvben/rumdl from 0.2.37 to 0.2.43

Release notes

Sourced from rvben/rumdl's releases.

v0.2.43

Added

• invisiblechars: new rule MD084 for detecting invisible characters (#758) (0a6354a)

Fixed

• md084: treat a zero width joiner between visible characters as presentation (4fbb1cc)
• md084: keep attached variation selectors in consecutive-character detection (f4e9fd3)
• md084: don't flag variation selectors attached to a base character (14941bb)

Downloads

File	Platform	Checksum
rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64	checksum
rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz	Linux x86_64 (musl)	checksum
rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz	Linux ARM64	checksum
rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz	Linux ARM64 (musl)	checksum
rumdl-v0.2.43-x86_64-apple-darwin.tar.gz	macOS x86_64	checksum
rumdl-v0.2.43-aarch64-apple-darwin.tar.gz	macOS ARM64 (Apple Silicon)	checksum
rumdl-v0.2.43-x86_64-pc-windows-msvc.zip	Windows x86_64	checksum

Installation

Using uv (Recommended)

uv tool install rumdl

Using pip

pip install rumdl

Using pipx

pipx install rumdl

Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.42

Added

• mojibake: new rule MD083 for mojibake detection (#753) (552842b)

... (truncated)

Changelog

Sourced from rvben/rumdl's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.2.49 - 2026-08-02

Security

• config: keep an extends target's path and contents out of messages about it (72bcb49)

  An extends value is expanded from the environment before it is resolved, so naming the resolved path in an error or warning printed environment variable values wherever that message went, which under CI is the build log. extends also points at an arbitrary path, so a target that is not valid TOML had its offending line quoted back. A file reached through extends is now named by the reference as written, and its own text is never repeated. A config you name yourself is unchanged, and rumdl config, the language server's report to its editor, and RUST_LOG=debug still show resolved paths.

  Reported privately by Shuvam Kumar.

Fixed

• md072: keep every trailing newline when sorting frontmatter keys (a5e7c40)
• fix-utils: measure fix ranges against the content the rule read (2ed4238)
• md044: read a wikilink's display text, not the page name it hides (51d584e)
• md039: keep wikilinks and nested images intact when trimming link text (aabd859)
• md045,md057,md044: stop reporting wiki embeds as images (1147d17)
• md058,md065: preserve the trailing newline when inserting blank lines (#783) (0ba54ce)
• md013: track line numbers in BlockBuilder for list reflow (#780) (56e2b3f)
• mkdocs: read an indented code block inside a container body as code (9439134)
• md087,inline-config: judge directives in indented container bodies (9285de1)

Performance

• md038: judge nested backticks against the outermost spans on a line (b02ea88)

0.2.48 - 2026-08-01

Added

• md087: report inline disable comments that suppress nothing (40fc37d)
• md051,md057: check path-shaped frontmatter values behind an option (98a0ff0)
• md033: add allowed-inside and a no-markdown-equivalent allowlist value (cb0ba51)
• name rules by their readable name in generated output (3b196d8)
• md082: add allow-parent-headings to accept a heading with subsections (662d570)
• md040: add custom-languages for fence labels Linguist does not know (1eda9f4)
• md086: add rule for unclosed comment delimiters (6cbd27f)

... (truncated)

Commits

• d4b387e chore: bump version to v0.2.43
• 4fbb1cc fix(md084): treat a zero width joiner between visible characters as presentation
• f4e9fd3 fix(md084): keep attached variation selectors in consecutive-character detection
• 14941bb fix(md084): don't flag variation selectors attached to a base character
• 0a6354a feat(invisiblechars): new rule MD084 for detecting invisible characters (#758)
• 69f0700 chore: bump version to v0.2.42
• d14b252 fix(lint_context): prevent panic when HTML tag window splits a UTF-8 char
• 552842b feat(mojibake): new rule MD083 for mojibake detection (#753)
• 36d3e21 chore: bump version to v0.2.41
• e6bb033 feat(flavor): add Hugo flavor and skip block attribute lists in blanks-around...
• Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.6.0 to 0.6.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.1

zizmor 1.28.0 is now the default version used by the action.

Commits

• 6fc4b00 Sync zizmor versions (#145)
• 2596f29 chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 in ...
• 1159a04 Bump pins (#140)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions