Skip to content

Repository navigation

v7.0.1

Choose a tag to compare

View all tags
@igorjs igorjs released this 30 Jun 21:41
· 94 commits to main since this release
v7.0.1
This tag was signed with the committer’s verified signature.
igorjs Igor J. S.
SSH Key Fingerprint: /ElPq5WgaofadpFxIaHgDD1OaqQzuTiMNbCzx0B1/k4
Verified
Learn about vigilant mode.
5fa2e3a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Token validation now accepts ghs_ installation tokens in the new JWT stateless format (dots and dashes in token body), rolled out by GitHub on 2026-04-27. Validation now checks only the token prefix per GitHub's 2026-04-24 guidance, treating the body as opaque.
  • Corrected documented rate-limit delay from 100ms to 350ms to match actual behaviour.
  • Workflow name validation now accepts dots, allowing names like Node.js CI or ci.build.
Assets 2
Loading