Skip to content

github-delivery v1.7.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Sep 22:29
· 10 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.7.1
3a39682
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

github-delivery v1.7.1

Changed

  • GitHub Actions CodeQL dependencies were refreshed to the latest pinned action revisions used by the repository CI (PR #467).

Fixed

  • Attributed repository and bot content can no longer create merge-discussion intent: embedded instructions such as merge immediately are treated as untrusted data, the router preserves the trusted delivery request instead, and instruction-injection attempts surface an explicit security flag. The adversarial evaluation contracts and routing regression now pin that behavior (PR #468).
Assets 10
Loading