Skip to content

http-action v0.2.8

Choose a tag to compare

@github-actions github-actions released this 05 Sep 13:56
· 24 commits to main since this release
c28de0f

Fixed

  • A WhatsApp Channel or broadcast-list post can no longer fire a backend request. The only
    chat-scope gate was the group flag, and a @newsletter post arrives flagged as a non-group chat, so
    a channel this account merely follows could match an action and perform a real, irreversible write
    on behalf of a sender the operator has no relationship with.
  • The README described the handler as always returning { continue: true }; it claims a message that
    matched an action, so a keyword bot or a flow does not answer the same command.

Changed

  • Verified against OpenWA v0.23.4 (testedOpenWAVersion 0.23.3 -> 0.23.4).

Install: download http-action.zip below and upload it in the OpenWA dashboard (Plugins → Install). For install-from-URL on a production host (OpenWA ≥ 0.20.0), append #sha256=<digest below> to the asset URL.

SHA-256: ce1e1ed7c34a28efd5f721e78ddf4150a7543abb5387adcd7131c5a9f5cae589