[dependabot]

Bumps the actions group with 3 updates in the / directory: julia-actions/setup-julia, dtolnay/rust-toolchain and hyperpolymath/smtp-notify-action.

Updates julia-actions/setup-julia from 3.0.2 to 3.0.3

Release notes

Sourced from julia-actions/setup-julia's releases.

v3.0.3

What's Changed

• We upgraded from NodeJS 24.13.0 to 24.14.1 (but still stayed on NodeJS v24). We don't expect this to have any breaking effect on users.
• We updated some of our dependencies.
• We set a 7-day dependency cooldown on our dependencies.
• We made changes to our documentation.

New Contributors

• @​DilumAluthge-LLM made their first contribution in julia-actions/setup-julia#395

Full Changelog

Full Changelog: julia-actions/setup-julia@v3.0.2...v3.0.3

Commits

• da90847 Bump handlebars from 4.7.9 to 4.7.10 (#423)
• ea6d69a Update some NPM dependencies (#421)
• 9cf546a Create a CLAUDE.md that just points to AGENTS.md (#420)
• cce2e36 Bump the all-github-actions group with 3 updates (#417)
• e89cce5 Bump js-yaml from 3.15.1 to 3.15.2 (#416)
• e7038b2 Bump toml from 3.0.0 to 4.2.0 (#415)
• 9d04d8e Run npm audit fix (#414)
• 6a9b62e Bump brace-expansion (#413)
• 730edd2 Bump browserslist from 4.28.1 to 4.28.8 (#412)
• d396689 Bump the all-github-actions group across 1 directory with 5 updates (#409)
• Additional commits viewable in compare view

Updates dtolnay/rust-toolchain from 7e38f4b43b4db5c8dd498af069a4f6196df1d067 to 683b588c487a69d01f6c6ddf40f036ff682cc2c8

Commits

• 683b588 Add 1.99.1 patch release
• e2a55d2 Merge pull request #187 from dtolnay/pwn
• 6af9a09 Unify flags[@] and downgrade[@]
• 83d0610 Safely handle action inputs
• See full diff in compare view

Updates hyperpolymath/smtp-notify-action from 0.5.0 to 0.5.1

Release notes

Sourced from hyperpolymath/smtp-notify-action's releases.

v0.5.1

Protocol-neutral server_address metadata

server_address is the host input for both SMTP and NNTP, and remained the only input in action.yml still described as SMTP-only ('SMTP server host name'). It now reads:

description: 'Server host name (SMTP or NNTP, per protocol: `protocol`)'

The secure and diagnose folded scalar descriptions were also rewrapped to line width (Reports → reports after the colon in diagnose), and the download URL in action.yml now points to v0.5.1.

Because workflow editors, consumers, and GitHub Marketplace read action.yml from the release tag — and tags are immutable here — this ships as v0.5.1 rather than moving v0.5.0. v0.5.0 remains supported in SECURITY.md since the binary and input surface are unchanged.

For the full NNTP posting (protocol: nntp, newsgroups) and Marketplace readiness notes introduced in the 0.5 series, see v0.5.0 and CHANGELOG.adoc.

Provenance

Zero Zig or Idris2 source files changed between v0.5.0 and v0.5.1. CI rebuilt both static musl binaries from this tag and verified they hash byte-identically to the unchanged SHA-256 pins inside action.yml before publishing. SHA256SUMS is attached:

2683da8f619dd5f310c9f6884da39e825c807c2c86a6319c19aba39b27f9c5c9  smtp-notify-x86_64-linux-musl
a58138308fb9832e1ceb551a12f1b04e591dc38ba5fd336c9acfb3f263161f29  smtp-notify-aarch64-linux-musl

Changelog

Sourced from hyperpolymath/smtp-notify-action's changelog.

// SPDX-License-Identifier: MPL-2.0 = Changelog :toc: macro :toclevels: 2

All notable changes to this action are recorded here. The format follows https://keepachangelog.com/en/1.1.0/[Keep a Changelog]; versions follow https://semver.org/spec/v2.0.0.html[Semantic Versioning].

The unit of release is the action ref: the tag or commit you pin determines both action.yml and, through the SHA-256 pins inside it, the exact binary that runs.

toc::[]

== v0.6.0-rc.1 — 2026-10-24 (pre-release)

Pre-release adding protocol: nntps as a direct, fail-closed spelling for NNTP over implicit TLS (port 563), alongside SemVer pre-release support in release.yml. Published as a GitHub pre-release so v0.5.1 remains Latest (and the Marketplace-eligible stable release) while protocol: nntps and D-015 (live news-server verification) are exercised.

=== Added

• protocol: nntps (SMTP_PROTOCOL=nntps). Selects NNTP over implicit TLS (RFC 4642 §2.1, default port 563) directly without needing a separate secure: line. Fail-closed against conflicting transport inputs: pairing protocol: nntps with secure: false/starttls or secure: plaintext refuses the run before opening a socket rather than silently downgrading TLS or silently ignoring secure (D-011).
• Pre-release tag handling in .github/workflows/release.yml. Tags carrying a SemVer pre-release suffix (*-*, such as v0.6.0-rc.1) now pass --prerelease to gh release create, keeping the latest stable tag as Latest.

=== Changed

• action.yml asset URL names v0.6.0-rc.1 and pins the rebuilt static musl binaries (adc643aa… for x86_64-linux-musl, 16206d7d… for aarch64-linux-musl).

== v0.5.1 — 2026-10-24

A metadata correction, and the release to publish the Marketplace listing from. The binary is byte-identical to v0.5.0's — the two SHA-256 pins are unchanged and re-verified by the release workflow — so v0.5.0 remains supported and correct for anyone already pinned to it. A new tag rather than an edit of the existing one because a tag is immutable here: consumers pin SHAs, and GitHub reads action.yml from the tag, which is the same property that made v0.5.0 necessary in the first place.

... (truncated)

Commits

• e384daf fix(action): protocol-neutral server_address wording (needs tag v0.5.1) (#28)
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 289c6e7c-cfe1-42d6-8e08-d74cedc39059

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn