Skip to content

v2.3.0

Choose a tag to compare

View all tags
@ylazakovich ylazakovich released this 31 Jul 19:52
· 11 commits to main since this release
v2.3.0
c11a8fa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v2.3.0

  • Hardened composite-action input transport so shell metacharacters cannot be evaluated as generated shell source.
  • Corrected Compose service parsing for scaled services and operand-taking options, including --no-attach and -t/--timeout.
  • Made explicit -p/--project-name selection authoritative with Docker Compose last-value-wins semantics and safe ordered fallbacks when no containers exist yet.
  • Scoped container discovery and diagnostics to the resolved Compose project and fail closed when the project cannot be resolved.
  • Pinned internal workflow actions to immutable commits and disabled persisted checkout credentials.

Full Changelog: v2.2.0...v2.3.0

Assets 2
Loading