Skip to content

v0.2.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Oct 23:07
· 15 commits to main since this release
v0.2.1
4c9077c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.2.1

  • Declare Node 24 for the GitHub Action, matching current runner support; CLI engines remain Node >=20.

  • Correct access-scope evidence against official 2026-10 documentation, including write-only analytics mutations and read alternatives.

  • Resolve local GraphQL fragments and aliases while preserving unknown evidence for unsupported patterns.

  • Reject file symlinks, invalid or ambiguous configurations, and malformed options; bound scanned files.

  • Make Action outcomes match failure policy and return actual JSON/SARIF report files.

  • Replace registry self-comparison tests with real operation fixtures and validate packaged Action contents.

  • Retain GraphQL 16 and Node >=20; GraphQL 17 requires newer Node engines.

What's Changed

  • fix: use supported Node runtime for npm publishing by @efegokdemir in #11
  • chore(deps): bump github/codeql-action/upload-sarif from 87ef0dc97def48aa960fbf026a2563ee9dbdb470 to 1190a975f95ce23525efb6a3fc21ea29567c1b52 in /.github/workflows by @dependabot[bot] in #7
  • chore(deps): bump github/codeql-action/analyze from 87ef0dc97def48aa960fbf026a2563ee9dbdb470 to 1190a975f95ce23525efb6a3fc21ea29567c1b52 in /.github/workflows by @dependabot[bot] in #8
  • chore(deps): bump github/codeql-action/init from 87ef0dc97def48aa960fbf026a2563ee9dbdb470 to 1190a975f95ce23525efb6a3fc21ea29567c1b52 in /.github/workflows by @dependabot[bot] in #9
  • Correct scope evidence and harden GraphQL analysis by @efegokdemir in #12
  • Declare the supported GitHub Action runtime by @efegokdemir in #13

Full Changelog: v0.2.0...v0.2.1

Contributors

dependabot and efegokdemir
Assets 2
Loading