You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2023/06/24 19:09:11 UTC

[commons-exec] branch master updated: [StepSecurity] ci: Harden GitHub Actions #107

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-exec.git


The following commit(s) were added to refs/heads/master by this push:
     new ba5606d  [StepSecurity] ci: Harden GitHub Actions #107
ba5606d is described below

commit ba5606d349fcc03bbc24e24bc946771cd3fe3b87
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Sat Jun 24 15:09:07 2023 -0400

    [StepSecurity] ci: Harden GitHub Actions #107
---
 src/changes/changes.xml | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index dd08498..273e966 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -25,7 +25,12 @@
         <author email="sgoeschl@apache.org">Siegfried Goeschl</author>
     </properties>
     <body>
-        <release version="1.4.0" date="" description="Maintenance and feature Release (Java 8)">
+        <release version="1.4.0" date="20YY-MM-DD" description="Maintenance and feature Release (Java 8)">
+            <!-- ADD -->
+            <action dev="ggregory" type="add" due-to="Gary Gregory">
+                Add ShutdownHookProcessDestroyer.isEmpty().
+            </action>
+            <!-- FIX -->
             <action issue="EXEC-100" dev="sgoeschl" type="update" date="2016-01-11">
                 Sync org.apache.commons.exec.OS with the newest Ant source file
             </action>
@@ -39,14 +44,13 @@
             <action dev="ggregory" type="update" due-to="John Patrick">
                 Use JUnit5 assertThrows() #72.
             </action>
-            <!-- ADD -->
+            <action dev="ggregory" type="fix" due-to="step-security-bot, Gary Gregory">
+                [StepSecurity] ci: Harden GitHub Actions #107.
+            </action>            
+            <!-- UPDATE -->
             <action dev="ggregory" type="add" due-to="Gary Gregory, Dependabot">
                 Bump github/codeql-action from 1 to 2 #52.
             </action>
-            <action dev="ggregory" type="add" due-to="Gary Gregory">
-                Add ShutdownHookProcessDestroyer.isEmpty().
-            </action>
-            <!-- UPDATE -->
             <action issue="EXEC-111" dev="ggregory" type="update" due-to="Gary Gregory">
                 Update from Java 5 to 6.
             </action>