Section 4 names actionlint's Python packaging, and btclib-org/btclib#1563 moves to the kjanat/actionlint fork #1698

Section 4 of README.md, in the hook list under The lint gate is .pre-commit-config.yaml, says:

workflows — actionlint and zizmor, both at zero findings, both required to stay there. actionlint via its Python packaging, the upstream hook's only non-docker id needing a go toolchain.

On 2026-10-11 the maintainer decided in btclib-org/btclib#1563 to switch to the kjanat/actionlint fork, pinned by commit sha, accepting a Go build in pre-commit. The fork parses the uses: $/... syntax that zizmor's self-repository audit recommends; rhysd/actionlint does not. The decision says btclib-org/btclib-node follows the same change.

The branch for btclib (actionlint-fork-1563) uses the fork's actionlint-shellcheck hook, which is language: golang. Once it lands, btclib no longer matches section 4, and an audit under section 15 would report it.

How it is known:

gh api -H 'Accept: application/vnd.github.raw' repos/btclib-org/.github/contents/README.md | grep -n 'actionlint via its Python packaging'
gh issue view 1563 --repo btclib-org/btclib --json comments --jq '.comments[-2:][].body'

Done when section 4 names the hook the maintainer chose, with its reason (it parses $/) and its cost (a Go build), or says which trees use which hook.