Jeffallan/claude-skills v0.4.19 on GitHub

.github/dependabot.yml: weekly Dependabot updates for GitHub Actions, which keep the SHA pins and their version comments current

CI: third-party GitHub Actions in validate.yml, release.yml, and publish-plugin.yml are pinned to full commit SHAs, with the release tag in a trailing comment, instead of mutable tags like actions/checkout@v6. Each pin resolves to the commit its tag pointed to, so workflow behavior is unchanged
CI: merged the first Dependabot updates for GitHub Actions: actions/checkout 6.1.0 → 7.0.1 (#255), actions/setup-node 6.5.0 → 7.1.0 (#258), actions/upload-pages-artifact 4.0.0 → 5.0.0 (#256), actions/deploy-pages 4.0.5 → 5.0.1 (#254), and softprops/action-gh-release 2.6.2 → 3.0.3 (#257). None of their breaking changes apply here: the workflows never check out fork PRs under pull_request_target, never publish to npm, and run on GitHub-hosted runners that support the Node 24 runtime

kubernetes-specialist: references/configuration.md Secret examples used realistic-looking literals (sk-1234567890abcdef, PEM and OpenSSH private-key blocks, a registry auth string, sample passwords), which the Claude plugin directory blocked as "Secret in a shipped file". They are now obvious placeholders such as <db-password> and <PEM-encoded private key>
Skill references: replaced 149 credential-like literals across 63 files in 31 skills with angle-bracket placeholders, so example code cannot be mistaken for real secrets. This covers connection strings with embedded passwords (postgres://user:pass@), sample secrets such as YourStrong@Passw0rd, AWS's documented example keys and ghp_/xoxb-/sk_live_ samples in security-reviewer, CLI flags with literal credentials, test-fixture passwords ('Test1234', 'SecurePass123!'), and older placeholder styles ("your-api-key", YOUR_API_KEY). Paired values, such as a fixture password and the login that uses it, share one placeholder. Spring ${VAR:default} fallbacks for the database password and JWT secret now have no default

Documentation: https://jeffallan.github.io/claude-skills/