chore(deps): Bump stbenjam/skillsaw from 0.10.1 to 0.11.2

[dependabot]

Bumps stbenjam/skillsaw from 0.10.1 to 0.11.2.

Release notes

Sourced from stbenjam/skillsaw's releases.

v0.11.2

What's New

Fixes

• Fix XSS vulnerability in docs HTML renderer — renderTypeView() now rejects unknown hash-derived type values instead of injecting them into innerHTML
• Show "No results found" for unknown type parameters instead of leaving stale content visible
• Escape icon class/char values in search results as defense-in-depth

v0.11.1

What's New

Fixes

• Fix unlinked-internal-reference rule modifying paths inside backtick code spans
• Allow backtick-wrapped paths to be linked when the path is the entire code span
• Fix frontmatter write_body corruption and line offset bugs
• Fix frontmatter_line_offset for empty-dict frontmatter
• Fix .mdc line offset by making CursorRuleBlock a ParsedFrontmatterBlock
• Fix review action not updating comments when line numbers change
• Post new comment at moved line even when old line has replies
• Save LLM dry-run patches for deterministic application

CI / Security

• Bump upload-artifact to v7 and download-artifact to v8
• Add persist-credentials: false to checkout steps
• Add security comments and SHA pinning docs to CI workflow examples
• Remove incorrect success gate from review workflow

v0.11.0

What's New

New features

• Support GitLab Code Quality output format (#204)
• Add baseline feature for accepting existing violations (#201)
• Support category, tags, keywords, and other marketplace fields in docs (#198)
• Add documentation website with MkDocs Material (#195)

Fixes

• Omit null values from baseline JSON; promote Baseline in docs nav (#205)
• Stop add plugin from modifying settings.json (#194)
• Remove unused custom_dir override that breaks Pages deploy (#196)

Docs

• Update custom rules docs to use lint tree and show autofix (#200)

Commits

• c2592a0 Bump version to 0.11.2 (#225)
• cf2a023 Merge pull request #224 from stbenjam/fix/codeql-xss-docs
• 18b70ed Clear content on unknown type instead of silent return
• 2acba23 Fix XSS in docs HTML renderer for hash-derived type parameter
• 8518bff Merge pull request #223 from stbenjam/release/v0.11.1
• 8cbf62c [Auto] Update generated files for 0.11.1
• eb62a4f [Auto] Bump version to 0.11.1
• b794af7 Merge pull request #220 from stbenjam/fix/219-backtick-paths
• 91fd561 [Auto] Refine return type of inline_code_span_bounds to Optional[Tuple[int, i...
• 0ec5982 Merge branch 'main' into fix/219-backtick-paths
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated development infrastructure tools for code quality assurance and automated review processes.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign enxebre for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• .github/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: f92fd55c-d859-4ea9-8703-518d42d41221

📥 Commits

Reviewing files that changed from the base of the PR and between b77d3ea and afd6ab3.

📒 Files selected for processing (2)

• .github/workflows/lint-plugins.yml
• .github/workflows/lint-review.yml

---

Walkthrough

The PR updates the pinned version of the stbenjam/skillsaw GitHub Action from v0.10.1 to v0.11.2 across two CI workflow files: lint-plugins.yml and lint-review.yml, applying the same version bump consistently.

Changes

Skillsaw Action Version Bump

Layer / File(s)	Summary
Update skillsaw action to v0.11.2 .github/workflows/lint-plugins.yml, .github/workflows/lint-review.yml	Both lint workflow files pin the stbenjam/skillsaw action to the newer v0.11.2 release, updating the commit hash from 70211511... to c2592a0f... in both the lint-plugins and lint-review steps.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• openshift-eng/ai-helpers#456: The main PR's pinned stbenjam/skillsaw action version bump directly follows the retrieved PR's migration to the skillsaw GitHub Actions for linting/review.
• openshift-eng/ai-helpers#471: Both PRs directly modify the same linting GitHub workflow actions by bumping the pinned stbenjam/skillsaw action versions.
• openshift-eng/ai-helpers#453: Both PRs modify GitHub Actions lint workflows to use skillsaw tooling with version updates.

Suggested labels

dependencies, workflows

Suggested reviewers

• stbenjam
• mrunalp
• bryan-cox

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Git Push Safety Rules	❌ Error	PR includes tag-plugin-versions.yml with git push origin --tags in automated workflow, violating the prohibition on automated push without user confirmation.	Remove automated git push from workflows or implement explicit user approval requirement before any push operations execute.

✅ Passed checks (9 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately and clearly summarizes the main change—updating the stbenjam/skillsaw dependency from version 0.10.1 to 0.11.2 across workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No Real People Names In Style References	✅ Passed	PR only updates GitHub Actions workflow versions, not plugin/skill documentation or prompts. No style references or real people names added.
No Assumed Git Remote Names	✅ Passed	The modified workflow files (lint-plugins.yml and lint-review.yml) contain no git commands or hardcoded remote names like "origin" or "upstream"—only standard GitHub Actions configurations.
No Untrusted Mcp Servers	✅ Passed	PR only updates stbenjam/skillsaw GitHub Action from v0.10.1 to v0.11.2; no new MCP server installations from untrusted sources are introduced.
Ai-Helpers Overlap Detection	✅ Passed	PR only modifies GitHub Actions workflow configs (.github/workflows/.yml), not ai-helpers functional files (plugins//commands/, plugins/*/skills/, agents/). Overlap detection check not applicable.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/github_actions/stbenjam/skillsaw-0.11.2

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

skillsaw: additional violations

Severity	Rule	File	Message
❌ error	plugins-doc-up-to-date	docs/index.html	docs/ is out of sync with plugin metadata. Run 'make update' to update.

[stbenjam]

We'll take care of it

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.