Skip to content

Release v4.13.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Sep 21:28
v4.13.1
1950c4d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Every checkout in javascript-build.yml now sets persist-credentials: false. None of the build jobs push, so the token no longer stays in the local git config where later steps (dependency scripts, tests) could read it.

publish.yml is unchanged because its release step may rely on the checkout credentials.

Fixes #219

Assets 2
Loading