chore(deps): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: rvben/rumdl and zizmorcore/zizmor-action.

Updates rvben/rumdl from 0.2.37 to 0.2.43

Release notes

Sourced from rvben/rumdl's releases.

v0.2.43

Added

• invisiblechars: new rule MD084 for detecting invisible characters (#758) (0a6354a)

Fixed

• md084: treat a zero width joiner between visible characters as presentation (4fbb1cc)
• md084: keep attached variation selectors in consecutive-character detection (f4e9fd3)
• md084: don't flag variation selectors attached to a base character (14941bb)

Downloads

File	Platform	Checksum
rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64	checksum
rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz	Linux x86_64 (musl)	checksum
rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz	Linux ARM64	checksum
rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz	Linux ARM64 (musl)	checksum
rumdl-v0.2.43-x86_64-apple-darwin.tar.gz	macOS x86_64	checksum
rumdl-v0.2.43-aarch64-apple-darwin.tar.gz	macOS ARM64 (Apple Silicon)	checksum
rumdl-v0.2.43-x86_64-pc-windows-msvc.zip	Windows x86_64	checksum

Installation

Using uv (Recommended)

uv tool install rumdl

Using pip

pip install rumdl

Using pipx

pipx install rumdl

Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.42

Added

• mojibake: new rule MD083 for mojibake detection (#753) (552842b)

... (truncated)

Changelog

Sourced from rvben/rumdl's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.2.48 - 2026-08-01

Added

• md087: report inline disable comments that suppress nothing (40fc37d)
• md051,md057: check path-shaped frontmatter values behind an option (98a0ff0)
• md033: add allowed-inside and a no-markdown-equivalent allowlist value (cb0ba51)
• name rules by their readable name in generated output (3b196d8)
• md082: add allow-parent-headings to accept a heading with subsections (662d570)
• md040: add custom-languages for fence labels Linguist does not know (1eda9f4)
• md086: add rule for unclosed comment delimiters (6cbd27f)
• md057: report relative links that point at their own file (7fd85fe)
• lsp: report inline config problems as diagnostics (20acc02)

Fixed

• md063: name the documented style spellings when a style is invalid (5476db8)
• md013: exempt an HTML-only line in a blockquote inside a list item (98e5d34)
• md013: exempt nested standalone links (3be374e)
• md013: adjust paragraph reflow limit for common indent (2f7c68e)
• md032: avoid warning on pseudo-list markers after recognized lists (71e6ff5)
• md062: preserve parentheses in link destinations (8ec2eea)
• md051: resolve cross-file links whose path carries a query string (8876d46)
• md051,md057: read frontmatter in documents that hold no body links (5f35562)
• md040: take disabled fences out of the label vote by the shared state (dd7011d)
• md040: honor a rule alias in a disable comment (7b86267)
• md040: reject custom-languages entries containing whitespace (651a7ec)
• md040: stop normalizing fence labels to an invalid preferred alias (7c10626)
• config: apply map-valued rule options set in rumdl.toml (a8ff5b6)
• inline-config: ignore directives inside indented code blocks (fee4d6f)
• config: warn when an inline enable targets a per-file-ignored rule (3c3837f)
• lsp: measure diagnostic positions in UTF-16 code units (3cb34b4)
• comments: read an unclosed comment in a container body, not in code (85bd3f8)
• comments: hide the block an unclosed <!-- opens from every rule (27c247c)
• md086: keep reporting an Obsidian opener below an unclosed HTML one (a05dff9)
• md086: don't report a comment opener the other syntax hides (4d589a1)
• comments: ignore Obsidian comment delimiters inside front matter (441a0a4)
• comments: ignore comment delimiters inside front matter (dded694)
• comments: end an HTML comment at the first --> after the opener (274166a)
• md057: keep search paths a fallback when matching a link to its own file (26e88cc)
• md057: anchor reference definition fixes to the link destination (b930b71)
• lsp: use defaults when a workspace root's own scope cannot be resolved (d1777ce)
• cli: count fixes a document enables with an inline configure-file comment (f17a5eb)

... (truncated)

Commits

• d4b387e chore: bump version to v0.2.43
• 4fbb1cc fix(md084): treat a zero width joiner between visible characters as presentation
• f4e9fd3 fix(md084): keep attached variation selectors in consecutive-character detection
• 14941bb fix(md084): don't flag variation selectors attached to a base character
• 0a6354a feat(invisiblechars): new rule MD084 for detecting invisible characters (#758)
• 69f0700 chore: bump version to v0.2.42
• d14b252 fix(lint_context): prevent panic when HTML tag window splits a UTF-8 char
• 552842b feat(mojibake): new rule MD083 for mojibake detection (#753)
• 36d3e21 chore: bump version to v0.2.41
• e6bb033 feat(flavor): add Hugo flavor and skip block attribute lists in blanks-around...
• Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.6.0 to 0.6.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.1

zizmor 1.28.0 is now the default version used by the action.

Commits

• 6fc4b00 Sync zizmor versions (#145)
• 2596f29 chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 in ...
• 1159a04 Bump pins (#140)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions