Skip to content

v17.0.0

Marketplace
Marketplace
Compare
Choose a tag to compare
@jackton1 jackton1 released this 29 Dec 03:07
· 91 commits to main since this release
v17.0.0
bc950d8
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

馃敟 馃敟 BREAKING CHANGE 馃敟 馃敟

A new safe_output input is now available to prevent outputting unsafe filename characters (Enabled by default). This would escape characters in the filename that could be used for command injection.

Note

This can be disabled by setting the safe_output to false this comes with a recommendation to store all outputs generated in an environment variable first before using them.

Example

...
      - name: Verify Changed files
        uses: tj-actions/verify-changed-files@v16
        id: verify-changed-files
        with:
          safe_output: false # set to false because we are using an environment variable to store the output and avoid command injection.
      
      - name: List all changed tracked and untracked files
        env:
          FILES_CHANGED: ${{ steps.verify-changed-files.outputs.changed_files }}
        run: |
          echo "Changed files: $FILES_CHANGED
...

What's Changed

Full Changelog: v16...v17.0.0

Contributors

renovate, jackton1, and 2 other contributors
Assets 2