Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2025

Bumps tj-actions/changed-files from 44 to 46.

Release notes

Sourced from tj-actions/changed-files's releases.

v46

Changes in v46.0.3

What's Changed

Full Changelog: tj-actions/changed-files@v46...v46.0.3


Changes in v46.0.2

What's Changed

New Contributors

Full Changelog: tj-actions/changed-files@v46...v46.0.2


Changes in v46.0.1

[!WARNING]
Security Alert: A critical security issue was identified in this action due to a compromised commit.

This commit has been removed from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future.

Action Required:

  • Review your workflows executed between March 14 and March 15. If you notice unexpected output under the changed-files section, decode it using the following command: echo 'xxx' | base64 -d | base64 -d

... (truncated)

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

46.0.3 - (2025-03-23)

🔄 Update

  • Updated README.md (#2501)

Co-authored-by: github-actions[bot] (41e0de5) - (github-actions[bot])

  • Updated README.md (#2499)

Co-authored-by: github-actions[bot] (9457878) - (github-actions[bot])

📚 Documentation

⚙️ Miscellaneous Tasks

  • deps: Bump test/demo from 5dfac2e to c6bd3b3 (#2505) (823fceb) - (dependabot[bot])
  • Pin github actions (#2503) (7a369a7) - (Tonye Jack)
  • deps-dev: Bump @​types/node from 22.13.10 to 22.13.11 (#2502) (9468856) - (dependabot[bot])

⬆️ Upgrades

  • Upgraded to v46.0.2 (#2500)

Co-authored-by: github-actions[bot] Co-authored-by: Tonye Jack jtonye@ymail.com (401c722) - (github-actions[bot])

46.0.2 - (2025-03-22)

🐛 Bug Fixes

  • Update log message when attempting to locate merge base (#2493) (a5cad85) - (Tonye Jack)

➕ Add

  • Add hint to revoke leaked token (#2475)

(d52b942) - (undefined)

🔄 Update

  • Updated README.md (#2496)

Co-authored-by: github-actions[bot] (9cc867c) - (github-actions[bot])

  • Updated README.md (#2492)

Co-authored-by: github-actions[bot] (f2f439b) - (github-actions[bot])

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 44 to 46.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v44...v46)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 29, 2025
@dependabot dependabot bot requested a review from Klintrup as a code owner March 29, 2025 22:46
@codara-ai-code-review
Copy link

Potential issues, bugs, and flaws that can introduce unwanted behavior:

  1. /.github/workflows/lint.yml - The update from tj-actions/changed-files@v44 to tj-actions/changed-files@v46 may introduce changes in behavior due to potential modifications in the action itself. Ensure that your use cases still align with any changes introduced in v46, particularly if there are breaking changes or altered functionality that impact how changed files are processed.

Code suggestions and improvements for better exception handling, logic, standardization, and consistency:

  1. /.github/workflows/lint.yml - It is advisable to specify a version range (e.g., tj-actions/changed-files@^v46) instead of a fixed patch version. This practice allows the action to receive non-breaking updates while remaining compatible, thus enhancing maintainability.
  2. /.github/workflows/lint.yml - Consider implementing error handling or notification steps following the changed-files checks to ensure that if there are significant changes, the workflow can appropriately react (e.g., send an alert or log warning messages). This can aid in monitoring and maintaining awareness of file changes in your project.

@Klintrup
Copy link
Owner

@dependabot merge

@dependabot dependabot bot merged commit de32f9e into main Mar 29, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/dot-github/workflows/tj-actions/changed-files-46 branch March 29, 2025 22:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants