Skip to content

v1.2.3

Choose a tag to compare

@github-actions github-actions released this 10 Jul 08:22
· 34 commits to main since this release

Security-posture housekeeping. No functional change to generated artifacts.

  • Add SECURITY.md. Documents the skill's two intentional external touch-points and why they are safe: the optional bring-your-own-bucket S3 publish helper (uploads to a bucket you own, then prints a link - never downloads or executes), and the optional client-side, version-pinned, self-gating Mermaid CDN import used only for live (non-shipped) diagrams. Gives human auditors and LLM-assisted skill scanners the rationale in-repo.
  • CI: bump actions/checkout@v4 to @v5 in the release workflow; the v4 pin runs on the deprecated Node 20 runner.