Skip to content

v1.7.2

Choose a tag to compare

@github-actions github-actions released this 13 Jul 16:41
04bebeb

Security

  • Sync never writes into .git/ — path mappings and target folders can't place a file inside the git directory. .github, .gitignore, and .gitattributes are unaffected.
  • Path mappings reject control characters — a destination with a newline or other control character is rejected.
  • Tokens bind to their host sooner — a token saved before a repository is configured now binds on the next sync. Existing setups are unchanged.