Skip to content

v1.0.0

Latest
Latest

Choose a tag to compare

View all tags
@fstr fstr released this 16 Oct 18:48
v1.0.0
4df4861
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First tagged release.

Security

  • Inputs and generated values reach the shell through env: and are quoted, so values such as the version override or file path can't inject shell code. (#12)
  • Uses firebolt-db/action-generate-version v1.1.0, which treats commit subjects as data and validates the generated version. (#14)

Other

  • Actions pinned to commit SHAs (setup-python v7, softprops/action-gh-release v3). These need runner v2.327.1 or later (Node 24).
  • Lint & scan workflow (actionlint, zizmor) and the standard PR title check.

Inputs and outputs are unchanged. The action still pushes the version bump and tag with the caller's checkout credentials, so the caller's checkout needs persist-credentials: true.

Assets 2
Loading