Trylle

Support YAML anchors and aliases (&anchor and *anchor) in workflow files. In addition to parsing YAML anchors correctly, actionlint checks unused and undefined anchors. See the document for more details. (#133, thanks @srz-zumix for the initial implementation at #568 and @alexaandru for trying another approach at #557)

jobs:
  test:
    runs-on: ubuntu-latest
    services:
      nginx:
        image: nginx:latest
        credentials: &credentials
          username: ${{ secrets.user }}
          password: ${{ secrets.password }}
    steps:
      - run: ./download.sh
        # OK: Valid alias to &credentials
        env: *credentials
      - run: ./check.sh
        # ERROR: Undefined anchor 'credential'
        env: *credential
      - run: ./upload.sh
        # ERROR: Unused anchor 'credentials'
        env: &credentials

Remove support for *-xl macOS runner labels because they were dropped. (#592, thanks @muzimuzhi)
Remove support for the macOS 13 runner labels because they were dropped on Dec 4, 2025. (#593, thanks @muzimuzhi)
- macos-13
- macos-13-large
- macos-13-xlarge
Increase the maximum number of inputs in the workflow_dispatch event from 10 to 25 because the limitation was recently relaxed. (#598, thanks @Haegi)
Support artifact-metadata permission for workflow permissions. (#602, thanks @martincostello)
Detect more complicated constants at if: conditions as error. See the rule document for more details.
Refactor the workflow parser with Go iterators. This slightly improves the performance and memory usage.
Fix parsing extra { and } characters in format string of format() function call. For example v1.7.9 didn't parse "{{0} {1} {2}}" correctly.
Detect an invalid value at type in workflow call inputs as error.
Report YAML merge key << as error because GitHub Actions doesn't support the syntax.

Check available contexts in expressions at jobs.<job_id>.snapshot.if.

snapshot:
  image-name: my-custom-image
  # ERROR: `env` context is not allowed here
  if: ${{ env.USE_SNAPSHOT == 'true' }}

Fix the instruction to install actionlint with mise in the installation document. (#591, thanks @risu729)
Update the popular actions data set to the latest to include new major versions of the actions.

Assets