chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0

[dependabot]

Bumps zizmorcore/zizmor-action from 0.5.7 to 0.6.0.

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

• Fold Docker image pull output into a collapsed Actions log group by @​woodruffw with @​Copilot in zizmorcore/zizmor-action#132
• Readme: document missing inputs by @​staabm in zizmorcore/zizmor-action#130
• ci: block version sync workflow on forks by @​shaanmajid in zizmorcore/zizmor-action#129
• Sync zizmor versions by @​github-actions[bot] in zizmorcore/zizmor-action#137
• Add collect input by @​woodruffw in zizmorcore/zizmor-action#139

New Contributors

• @​woodruffw with @​Copilot made their first contribution in zizmorcore/zizmor-action#132
• @​staabm made their first contribution in zizmorcore/zizmor-action#130
• @​shaanmajid made their first contribution in zizmorcore/zizmor-action#129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

Commits

• 6599ee8 Add collect input (#139)
• bec05c8 Sync zizmor versions (#137)
• cf59549 Add issue templates (#135)
• f72bf17 chore(deps): bump github/codeql-action/upload-sarif (#134)
• b2a6fac ci: block version sync workflow on forks (#129)
• 2d88f44 Readme: document missing inputs (#130)
• d81e276 Fold Docker image pull output into a collapsed Actions log group (#132)
• 8c13c53 chore(deps): bump the github-actions group with 2 updates (#133)
• 2f8e9c6 README: bump versions (#128)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[changeset-bot]

⚠️ No Changeset found

Latest commit: e829b24

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

Cloudflare Pages Deployment

Event Name: pull_request
Environment: preview
Project: cloudflare-pages-action
Built with commit: 4fa3cb1
Preview URL: https://3e855d8e.cloudflare-pages-action-a5z.pages.dev
Branch Preview URL: https://dependabot-github-actions-zi-00tj.cloudflare-pages-action-a5z.pages.dev

Wrangler Output

⛅️ wrangler 4.86.0
───────────────────
Uploading... (3/3)
✨ Success! Uploaded 0 files (3 already uploaded) (0.24 sec)

✨ Uploading _headers
✨ Uploading Functions bundle
🌎 Deploying...
✨ Deployment complete! Take a peek over at https://3e855d8e.cloudflare-pages-action-a5z.pages.dev
✨ Deployment alias URL: https://dependabot-github-actions-zi-00tj.cloudflare-pages-action-a5z.pages.dev

[andykenward]

@claude review

[claude]

Claude finished @andykenward's task in 34s —— View job

---

Reviewing PR #817

• Gather context on the change
• Review the workflow diff
• Post review feedback

Review

This is a routine Dependabot dependency bump — clean and low-risk.

Change: .github/workflows/zizmor.yml line 28 — zizmorcore/zizmor-action pinned SHA updated from 192e21d7... (#v0.5.7) to 6599ee8b... (#v0.6.0).

Verified:

• The commit SHA 6599ee8b7a49aef6a770f63d261d214911a7ce02 matches the head of the v0.5.7...v0.6.0 compare view in the PR description ("Add collect input" (Update #139)), so the pin correctly corresponds to the v0.6.0 tag.
• The #vX.Y.Z trailing comment is kept in sync with the SHA, consistent with the pinning convention used elsewhere in this workflow (e.g. actions/checkout@...#v7.0.0 on line 23).
• Per this repo's CLAUDE.md, I don't have permission to modify files under .github/workflows/, but no changes are needed here regardless — the diff is correct as-is.
• No new inputs from the v0.6.0 release (e.g. the new collect input mentioned in the release notes) are required or used by this workflow, so no follow-up changes are needed.

No issues found. This is safe to merge.

[dependabot]

Superseded by #827.