v13.7.8

uses: noise-rest/tf-via-pr@6cdb96be0f5fe9323a6ab881288c234b59129fc5 # v13.7.8

Tip

The organization has been renamed from "OP5dev" to "noise-rest" -- GitHub should handle redirects automatically, but heads-up just in case!

Changes v13.7.7...v13.7.8

• #672 chore: remove redundant AWS tests and workflow
• #671 chore: rename GitHub org from OP5dev to noise-rest
• #673 chore(deps): bump pinned actions/upload-artifact to v7.0.2
• #674 docs: bump GitHub Action references to latest major versions

v13.7.7

uses: op5dev/tf-via-pr@c335f9c1b9fe089e6a6e7d12fd27c755020ffc0d # v13.7.7

Tip

OP5dev organization will be renamed in the next release (GitHub should handle redirects automatically, but heads-up just in case!)

Fixed

• Restores comment-pos-1 to comment-pos-6 inputs (thank you, @FnhNielsen).
• Accepts inputs which contain spaces (eg., working-directory: my dir).
• Skips listing PR comments when comment-pr: never.

Secured

• Moves all ${{ }} out of run: scripts into step env: to harden against script injection.
• Semantic versioning triggers GitHub automation to draft immutable releases with templated content.

Changes v13.7.6...v13.7.7

• #668 feat: restore custom PR comment positions (#547, #557)
• #669 refactor: harden composite action bash and expressions
• #670 refactor: enhance release tagging automation

v13.7.6

uses: op5dev/tf-via-pr@a83f0401f98f1509cf234a62fb60ddb2cd62d224 # v13.7.6

Note

OP5dev organization will be renamed as part of an upcoming release (GitHub should handle redirects automatically, but here's a heads-up just in case!)

Fixed

• #666 Identify current job via job.check_run_id to determine workflow step more reliably (thank you, @joe-dematteo).
  • On GHES, where check_run_id is not available, this gracefully degrades to skip check-run summary and link to the workflow run instead.

If you're on GHES, please get in touch if you'd like to take part in sharing feedback to guide development of this project (as I don't have access to GHES instance).

View changelog or v13.7.5...v13.7.6

v13.7.5

uses: op5dev/tf-via-pr@3b4a0baebd84b96b511b7e330653059485ffc310 # v13.7.5

Note

OP5dev organization will be renamed as part of an upcoming release (GitHub should handle redirects automatically, but here's a heads-up just in case!)

Fixed

• #664 Explicitly sort plan file artifacts by created_at to use the latest/newest one (thank you, @pmcconnell-tc).

View changelog or v13.7.4...v13.7.5

v14.0.0-alpha

uses: op5dev/tf-via-pr@de3d1ac3ca31b0a4f8df07b63189ea778d232079 # v14.0.0-alpha

This alpha release is for testing purposes, not for production use.

View changelog or v13.7.3...v14.0.0-alpha

v13.7.4

uses: op5dev/tf-via-pr@39ed2635c056ca408ed24cc5c2baf0ef4381a7a5 # v13.7.4

Note

OP5dev organization will be renamed as part of an upcoming release (with no action necessary on your part!)

Fixed

• #548 Replace dual-process substitution with single pipe for output capture (thank you @dghermanMI).
• #551, #552 Graceful handling of PR number retrieval logic for various workflow event trigger types.

Updated

• #550 Dependency actions/upload-artifact for non-GHE users.
• #555 Action versions in workflow examples.

Secured

• #553 CodeQL expression injection of GitHub context values via environment variables.

New Contributors

• @dghermanMI made their first contribution in #548

View changelog or v13.7.3...v13.7.4

v13.7.3

uses: op5dev/tf-via-pr@8d74c69c2863bcb3bb87c8313ca46bc2fc89b98a # v13.7.3

Note

OP5dev organisation will be renamed as part of upcoming release, with no actions necessary on your behalf(!)

Fixed

• #539 Pass in original github.token during check-run API call (thank you, @renkeven).

Updated

• #526, #537 Dependency actions/upload-artifact to v7.0.0 for non-GHE users.

New Contributors

• @renkeven made their first contribution in #539

View changelog or v13.7.2...v13.7.3

v13.7.2

uses: op5dev/tf-via-pr@5a4229041e3c90818d85813d4e4a4d44f653d5e9 # v13.7.2

Fixed

• #519 Upload of encrypted plan file for GHE users (thank you, @EmNaveed).
• #522 Only enable booleans with true instead of any non-zero string input (thank you, @jbaldodiego).

Updated

• #512 Dependency actions/upload-artifact from v4.6.2 to v5.0.0 for non-GHE users.
• #521 "To-do" provisioning of interim build artifacts, join discussion (thank you, @slords).

View changelog or v13.7.1...v13.7.2

v13.7.1

uses: op5dev/tf-via-pr@a90a5e0eca088a36ed6bf75b5b4a6f7d07b750cc # v13.7.1

Fixed

• #508 Regression for non-PR event triggers, such as releases (thank you, @birjj and @devantler).
• #509, #510 Deletion of apply PR comment when comment-pr: on-diff is set (thank you, @birjj).

View changelog or v13.7.0...v13.7.1

v13.7.0

uses: op5dev/tf-via-pr@2f33acce007b2ffe06335724294c706680bcf96f # v13.7.0

Improved

• #497, #501 Workflow examples to reflect latest changes (thank you, @jlkravitz).
• #498 Diff only logs output when plan-files differ while plan-parity: true (thank you, @b-).

Fixed

• #493 Matrix job identification when non-matrix job(s) also exist in the workflow (thank you, @ego93).
• #503 For comment-pr and tag-actor arguments, renamed "on-change" to "on-diff" to better reflect the condition upon which they're true, where detailed-exitcode is either 1 an error or 2 a non-empty diff.
  Deprecation: In the next major version, "on-change" option will be dropped.

Secured

• #504 Refactored user-controlled inputs to remediate potential code injection.

View changelog or v13.6.1...v13.7.0