Skip to content

v0.7.0

Choose a tag to compare

@github-actions github-actions released this 16 Oct 19:14
· 91 commits to main since this release
Immutable release. Only release title and notes can be modified.

0.7.0 (2026-10-16)

⚠ BREAKING CHANGES

  • controls: releaseWorkflowsMustNotRestoreUntrustedCache is renamed
    untrustedTriggersMustNotWriteCache, and publishActions, cacheActions,
    publishScriptPatterns, publishScriptExcludePatterns and allowedJobs are
    removed. The old key is ignored with a warning; plumber config migrate
    renames it. exemptWorkflows and exemptJobs accept the risk of a workflow
    or a job, listed in the output. ISSUE-705 findings re-key (RecipeVersion 7).

🐛 Bug Fixes

  • controls: flag cache write granted to untrusted triggers (e8f9e5a), closes #533

✅ Tests

  • controls: pin every context a cache-mode expression can read (8fbab2b)