You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2023/06/24 21:28:30 UTC

[commons-skin] branch master updated: [StepSecurity] ci: Harden GitHub Actions #66

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-skin.git


The following commit(s) were added to refs/heads/master by this push:
     new 0eed8f9  [StepSecurity] ci: Harden GitHub Actions #66
0eed8f9 is described below

commit 0eed8f9ebb0ba62865371b120043ef7bd87c02e7
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Sat Jun 24 17:28:27 2023 -0400

    [StepSecurity] ci: Harden GitHub Actions #66
---
 src/changes/changes.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index da8ee86..0c29bb1 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -61,6 +61,8 @@ The <action> type attribute can be add,update,fix,remove.
 
     <body>
       <release version="4.3" date="TBD" description="New features and bug fixes.">
+        <!-- FIX -->
+        <action type="fix" dev="ggregory" due-to="step-security-bot, Gary Gregory">[StepSecurity] ci: Harden GitHub Actions #66.</action>
         <!-- UPDATE -->
         <action type="update" dev="ggregory" due-to="Dependabot">Bump actions/cache from 3.0.8 to 3.0.11 #12.</action>
         <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump actions/checkout from 3 to 3.1.0, #9.</action>