Bump EndBug/add-and-commit from 11.0.0 to 11.1.1

[dependabot]

Bumps EndBug/add-and-commit from 11.0.0 to 11.1.1.

Release notes

Sourced from EndBug/add-and-commit's releases.

v11.1.1

What's Changed

• docs: highlight untrusted git-arg interpolation as a warning callout by @​EndBug in EndBug/add-and-commit#781
• fix: Remove GH var interpolation in action.yml docstring by @​dzcode in EndBug/add-and-commit#783
• fix: validate denylisted git args on every token by @​EndBug in EndBug/add-and-commit#784

New Contributors

• @​dzcode made their first contribution in EndBug/add-and-commit#783

Full Changelog: EndBug/add-and-commit@v11.1.0...v11.1.1

v11.1.0

What's Changed

• feat: add push_attempts to retry failed pushes by @​EndBug in EndBug/add-and-commit#764
• test: add integration tests for the shipped action by @​EndBug in EndBug/add-and-commit#766
• feat: add dry_run input by @​EndBug in EndBug/add-and-commit#765
• docs: add nmattia as a contributor for ideas by @​allcontributors[bot] in EndBug/add-and-commit#767
• docs: add jcbhmr as a contributor for ideas by @​allcontributors[bot] in EndBug/add-and-commit#768
• fix: reject remote-helper overrides skipped by -u by @​EndBug in EndBug/add-and-commit#770
• fix: block scheme:: remote helpers and restrict git transports by @​EndBug in EndBug/add-and-commit#771
• fix: resolve absolute cwd without dumping the minified bundle (#495) by @​EndBug in EndBug/add-and-commit#772
• feat: treat pull: true as a default git pull by @​EndBug in EndBug/add-and-commit#773
• docs: add ross-spencer as a contributor for bug by @​allcontributors[bot] in EndBug/add-and-commit#774
• docs: add louisabraham as a contributor for ideas by @​allcontributors[bot] in EndBug/add-and-commit#775
• fix: reject --pathspec-from-file to prevent log disclosure by @​EndBug in EndBug/add-and-commit#777
• fix: neutralize workflow-command injection in info logs by @​EndBug in EndBug/add-and-commit#776
• fix: reject glued quotes that string-argv would split into extra git flags by @​EndBug in EndBug/add-and-commit#778
• chore(deps): bump js-yaml from 5.2.3 to 5.3.0 by @​dependabot[bot] in EndBug/add-and-commit#780
• chore(deps-dev): bump @​vercel/ncc from 0.44.1 to 0.45.0 by @​dependabot[bot] in EndBug/add-and-commit#779

Full Changelog: EndBug/add-and-commit@v11.0.0...v11.1.0

Commits

• cc9c08b 11.1.1
• 3446398 fix: validate denylisted git args on every token (#784)
• b0ca327 fix: Remove GH var interpolation in action.yml docstring (#783)
• 3e1240d docs: highlight untrusted git-arg interpolation as a warning callout (#781)
• fc1cf1d 11.1.0
• f14ee6d chore(deps-dev): bump @​vercel/ncc from 0.44.1 to 0.45.0 (#779)
• bccc19e chore(deps): bump js-yaml from 5.2.3 to 5.3.0 (#780)
• 7a6d750 ci: rebuild lib on Dependabot PRs so CI can re-run
• 66d71de fix: reject glued quotes that string-argv would split into extra git flags (#...
• 60ff4bb fix: neutralize workflow-command injection in info logs (#776)
• Additional commits viewable in compare view