Skip to content

v5.165.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Oct 23:49
· 643 commits to v5 since this release
v5.165.3
e32b9a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • The built-in project.label_driven_trusted_bots default no longer includes github-actions[bot], which is the shared identity of every workflow in a repo (including ones triggered by untrusted events), so a workflow-applied triage/accepted label could clear the label-driven approval and self-authorization gates without a person. Only kubestellar-prow[bot] stays trusted by default; operators whose Prow emulation runs as github-actions[bot] must add it explicitly per deployment via label_driven_trusted_bots (#11737).

SBOMs: SPDX JSON, generated by Syft against the linux/amd64 image digest, attached below for hive, hive-contributor, and hive-hub. They cover linux/amd64 only — see releases.md for why linux/arm64 is not scanned separately.

NOTICE: third-party license attribution for the Go module dependencies compiled into these images, attached below. Does not cover base-image OS packages or the Node.js/tmux layers built from source — see releases.md for the exact boundary.

Assets 6
Loading