Breaking changes
Permission changes
id-token: writepermission is now required- The repository must be granted Vault access to the Artifactory
private-reader/public-readertoken used for Repox
authentication (the reader is chosen from the repository visibility)
Input and output parameter changes
extra-argsnow has event-based defaults. Drop the old PR-only--from-ref/--to-refto use the now automatically
supportedmerge_groupandpushtriggers:- on
pull_requestandmerge_groupevents: incremental--from-ref/--to-ref(base...head). - on
push,workflow_dispatch, and other events:--all-files.
- on
ignore-failureinput is removed and can be safely dropped from the workflow. Hook failures now always fail the
action step, including onpushandmerge_grouptriggers.statusandlogsoutputs are removed.
Pre-commit version update
- The action installs the
pre-commitCLI only when it is not already available in the environment.v1installed
3.7.1;v2installs4.6.2. If a caller already providespre-commitonPATH(for example using
SonarSource/mise-action-wrapper), that version is used unchanged.
Performance improvements
pre-commitCLI and hooks are cached on S3
Full Changelog: 1.2.1...2.0.0