Skip to content

v1.2.1 — Dependabot action bumps inside the reusables

Choose a tag to compare

View all tags
@cpitzi cpitzi released this 17 Aug 23:00
· 3 commits to main since this release
v1.2.1
47af63e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch release per the semver policy (SHA-pinned third-party action updates, no caller-facing interface changes): checkout v7.0.1, setup-node v7.0.0, upload-artifact v7.0.1, aws-actions/configure-aws-credentials v6.2.3, codeql-action/upload-sarif v4.37.7 across the reusable workflows (#49).

Checkout/setup-node v7 are already proven green across the fleet's own workflows tonight. The deploy-path bump (configure-aws-credentials v4→v6 inside site-deploy.yml) is exercised only by a real deploy: the first consumer that bumps to v1.2.1 should watch its post-merge deploy run — the same acceptance pattern the v1.1.x rollout used.

Assets 2
Loading