You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Bug fixes
distribute: fix Argument list too long (E2BIG) breaking later steps (#69). The distribute action persisted the full response — including the unbounded per-file files[] breakdown — into $GITHUB_ENV (FLY_DISTRIBUTE_RESULTS). Accumulated across steps it crossed the Linux 128 KB single-env-var limit (MAX_ARG_STRLEN), after which every later step and post-cleanup step failed to spawn. The action now persists only the fields the job summary renders; the full response remains available on the step results output.
transfer: apply the same projection to FLY_TRANSFER_RESULTS (upload/download/go-publish) so it can't hit the same wall as file counts grow. Full results (with message) remain on the results output.
Security
Bump undici 6.24.1 → 6.27.0 (transitive via @actions/http-client), remediating CVE-2026-12151 (High) and CVE-2026-9679 (Medium). Both Not Applicable by contextual analysis.
Follow-up
#71 tracks moving the results accumulator off $GITHUB_ENV (temp file) as the root-cause fix.