You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2023/06/24 18:46:30 UTC

[commons-compress] branch master updated: [StepSecurity] ci: Harden GitHub Actions #396

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-compress.git


The following commit(s) were added to refs/heads/master by this push:
     new ebb34186 [StepSecurity] ci: Harden GitHub Actions #396
ebb34186 is described below

commit ebb3418640b6afb204b73477727469bd7823458d
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Sat Jun 24 14:46:26 2023 -0400

    [StepSecurity] ci: Harden GitHub Actions #396
---
 src/changes/changes.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 94e32994..f3f64451 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -51,6 +51,8 @@ The <action> type attribute can be add,update,fix,remove.
       <action type="fix" dev="ggregory" due-to="Daniele Galloppo">Use try-with-resources in ArchiveStreamFactory #391.</action>
       <action type="fix" dev="ggregory" due-to="Martin Wiesner">Javadoc and code comments: Sanitize grammar issues and typos #393.</action>
       <action type="fix" dev="ggregory" due-to="Martin Wiesner">Remove redundant (null) initializations #394.</action>
+      <action dev="ggregory" type="fix" due-to="step-security-bot, Gary Gregory">[StepSecurity] ci: Harden GitHub Actions #396.</action>
+      
       <!-- UPDATE -->
       <action type="update" dev="kinow" due-to="Dependabot">Bump zstd-jni from 1.5.4-2 to 1.5.5-4 #377, #383, #388, #390.</action>
       <action type="update" dev="kinow" due-to="Dependabot">Bump memoryfilesystem from 2.5.0 to 2.6.1 #381, #385, #387.</action>