Compare commits
2 Commits
c05a1c48cb
...
1a67d8b0e1
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
1a67d8b0e1 | ||
|
|
1a78209408 |
@@ -40,7 +40,7 @@ A `### Breaking` section is used in addition to Keep a Changelog's standard sect
|
|||||||
- Pinned `securego/gosec` and `golang/govulncheck-action` to concrete version tags (`v2.22.4` and `v1.0.4`) so self-hosted Gitea runners can resolve them via direct git clone without relying on the GitHub Actions floating-tag API.
|
- Pinned `securego/gosec` and `golang/govulncheck-action` to concrete version tags (`v2.22.4` and `v1.0.4`) so self-hosted Gitea runners can resolve them via direct git clone without relying on the GitHub Actions floating-tag API.
|
||||||
- Restored explicit gosec caching by storing a pinned `v2.22.4` binary under `${{ runner.temp }}/gosec-bin` with `actions/cache@v4`, so CI keeps fast security scans while still using the Go 1.26 toolchain from `setup-go`.
|
- Restored explicit gosec caching by storing a pinned `v2.22.4` binary under `${{ runner.temp }}/gosec-bin` with `actions/cache@v4`, so CI keeps fast security scans while still using the Go 1.26 toolchain from `setup-go`.
|
||||||
- Replaced `securego/gosec` composite action with a direct `go install github.com/securego/gosec/v2/cmd/gosec@v2.22.4 && gosec ./...` run step so gosec uses the Go 1.26 toolchain installed by `setup-go` rather than the action's bundled Go 1.24 binary which ignores `GOTOOLCHAIN=auto`.
|
- Replaced `securego/gosec` composite action with a direct `go install github.com/securego/gosec/v2/cmd/gosec@v2.22.4 && gosec ./...` run step so gosec uses the Go 1.26 toolchain installed by `setup-go` rather than the action's bundled Go 1.24 binary which ignores `GOTOOLCHAIN=auto`.
|
||||||
- Fixed nested local composite-action references to use `./../run-vociferate` (instead of `../run-vociferate`) so strict runners that enforce `{org}/{repo}[/path]@ref` for non-local paths correctly classify them as local actions.
|
- Fixed nested local composite-action references to use repository-local `./run-vociferate` paths so strict runners do not misparse parent-directory (`../`) action references as malformed remote coordinates.
|
||||||
|
|
||||||
## [1.0.2] - 2026-03-21
|
## [1.0.2] - 2026-03-21
|
||||||
|
|
||||||
|
|||||||
@@ -164,7 +164,7 @@ runs:
|
|||||||
- name: Extract changelog unreleased entries
|
- name: Extract changelog unreleased entries
|
||||||
id: extract-changelog
|
id: extract-changelog
|
||||||
if: steps.changelog-file.outputs.exists == 'true'
|
if: steps.changelog-file.outputs.exists == 'true'
|
||||||
uses: ./../run-vociferate
|
uses: ./run-vociferate
|
||||||
with:
|
with:
|
||||||
root: ${{ github.workspace }}
|
root: ${{ github.workspace }}
|
||||||
changelog: ${{ inputs.changelog }}
|
changelog: ${{ inputs.changelog }}
|
||||||
|
|||||||
@@ -66,7 +66,7 @@ runs:
|
|||||||
- name: Recommend version
|
- name: Recommend version
|
||||||
id: recommend-version
|
id: recommend-version
|
||||||
if: steps.normalize-version.outputs.value == ''
|
if: steps.normalize-version.outputs.value == ''
|
||||||
uses: ./../run-vociferate
|
uses: ./run-vociferate
|
||||||
with:
|
with:
|
||||||
root: ${{ github.workspace }}
|
root: ${{ github.workspace }}
|
||||||
version-file: ${{ inputs.version-file }}
|
version-file: ${{ inputs.version-file }}
|
||||||
@@ -102,7 +102,7 @@ runs:
|
|||||||
printf 'value=%s\n' "$(date -u +%F)" >> "$GITHUB_OUTPUT"
|
printf 'value=%s\n' "$(date -u +%F)" >> "$GITHUB_OUTPUT"
|
||||||
|
|
||||||
- name: Prepare release files
|
- name: Prepare release files
|
||||||
uses: ./../run-vociferate
|
uses: ./run-vociferate
|
||||||
with:
|
with:
|
||||||
root: ${{ github.workspace }}
|
root: ${{ github.workspace }}
|
||||||
version-file: ${{ inputs.version-file }}
|
version-file: ${{ inputs.version-file }}
|
||||||
|
|||||||
@@ -65,7 +65,7 @@ runs:
|
|||||||
|
|
||||||
- name: Extract release notes
|
- name: Extract release notes
|
||||||
id: extract-notes
|
id: extract-notes
|
||||||
uses: ./../run-vociferate
|
uses: ./run-vociferate
|
||||||
with:
|
with:
|
||||||
root: ${{ github.workspace }}
|
root: ${{ github.workspace }}
|
||||||
changelog: ${{ inputs.changelog }}
|
changelog: ${{ inputs.changelog }}
|
||||||
|
|||||||
Reference in New Issue
Block a user