chore(deps): Bump lycheeverse/lychee-action from 2.7.0 to 2.9.0

[dependabot]

Bumps lycheeverse/lychee-action from 2.7.0 to 2.9.0.

Release notes

Sourced from lycheeverse/lychee-action's releases.

v2.9.0

Summary

This release updates the default lychee version from v0.23.0 to v0.24.2.

The main reason for this release is compatibility with the new lychee 0.24.x release artifacts. Starting with lychee v0.24.0, the archive layout changed, and the lychee binary may now be packaged inside a subdirectory. lychee-action now detects that layout automatically, so users can upgrade without changing their workflows.

If you use:

uses: lycheeverse/lychee-action@v2

you will get the new version once the floating v2 tag has been updated. If you pin exact versions, update to:

uses: lycheeverse/lychee-action@v2.9.0

What’s new from lychee v0.24.x

Better diagnostics

lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports.

Text fragment checking

lychee can now check URL text fragments, such as links containing #:~:text=.... This helps catch links that point to a valid page but no longer points to the intended highlighted text.

Sitemap support

lychee can now read sitemap.xml inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate.

JUnit output

lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML.

Redirect and remap visibility

lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier.

Multiple config files

lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings.

Timeout handling

lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints.

Fixes and reliability improvements

... (truncated)

Commits

• e747777 Bump actions/cache from 5 to 6 (#340)
• 39066c6 Bump actions/checkout from 6 to 7 (#339)
• 6da1d14 Install into $RUNNER_TEMP instead of $HOME (#338)
• a63497c fixes #322 check for null (#336)
• b40e218 [create-pull-request] automated change
• faea714 bump default to 0.24.1 and auto-detect lychee bin in subfolder (#330)
• 8646ba3 Add message with Summary report URL (#326)
• c6e7911 [create-pull-request] automated change
• 631725a Bump peter-evans/create-pull-request from 7 to 8 (#318)
• 942f324 Bump actions/cache from 4 to 5 (#319)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[yada]

@dependabot rebase

[yada]

@dependabot recreate

[yada]

Validated PR #517 at commit 84a9a6a, including the Lychee action update.

• The action is pinned to lychee-action v2.9.0.
• Corrected the invalid HTTP header from accept=*/* to accept: */*.
• Converted the arguments to a folded YAML scalar; YAML parsing confirms it produces the exact intended command.
• Excluded LinkedIn because it returns bot-blocking status 999; the repository’s other broken-link workflow already excludes this domain.
• Tested the corrected arguments with the official Lychee 0.24.2 binary against the live website.
• Results: 128 total links, 114 unique, 102 successful, 26 excluded, 2 redirects, and 0 errors.
• Confirmed the generated Markdown report remains compatible with the workflow’s existing error-detection step.
• Fresh spell-check and DCO checks are green.
• The PR is clean and mergeable.

This also fixes the previous false-success condition where fail: false masked Lychee’s argument-parsing failure.

No regression found. Ready to merge.