Skip to content

v0.17.0

Choose a tag to compare

View all tags
@tomersein tomersein released this 21 Oct 15:51
0.17.0
69ee655
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Two more ways CI ran a tool that zanadir didn't see, both found by hand-checking a random sample of verdicts across 1,000 popular repositories.

Fixed

  • Reusable workflows get their callers' inputs (#332). When a job calls a reusable workflow with with:, the called steps now run with those values, layered over the inputs' defaults. Before, a step like run: ${{ inputs.afterBuild }} stayed an expression, so whatever tool the caller passed in was never seen. That affected every category.
    • If callers pass different values, each one is kept.
    • An expression that is only an input is replaced by the value word for word, even when the value is a whole script.

Added

  • npm-run-all, run-s and run-p are followed (#333). Arguments can be script names, with their own arguments, or : globs (lint:*, lint:**). --continue-on-error marks what it runs as unable to fail, the same way || true does.
  • Vite+'s vp lint (#333), which runs Oxlint.

Compared with 0.16.0, no verdict changes across 89 corpus repositories. The changes show up in projects that pass commands into reusable workflows or lint through npm-run-all.

Full changelog: 0.16.0...0.17.0

Assets 10
Loading