Skip to content

Choose a tag to compare

@jackton1 jackton1 released this 16 Mar 03:57
· 152 commits to main since this release
4cd184a

Warning

Security Alert: A critical security issue was identified in this action due to a compromised commit.

This commit has been removed from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future.

Action Required:

  • Review your workflows executed between March 14 and March 15. If you notice unexpected output under the changed-files section, decode it using the following command: echo 'xxx' | base64 -d | base64 -d
    If the output contains sensitive information (e.g., tokens or secrets), revoke and rotate those secrets immediately.
  • If your workflows reference this commit directly by its SHA, you must update them immediately to avoid using the compromised version.
  • If you are using tagged versions (e.g., v35, v44.5.1), no action is required as these tags have been updated and are now safe to use.

Additionally, as a precaution, we recommend rotating any secrets that may have been exposed during this timeframe to ensure the continued security of your workflows.

What's Changed

  • docs: update docs to highlight security issues by @jackton1 in #2465
  • fix: update github workflow update-readme.yml by @jackton1 in #2466
  • fix: update permission in update-readme.yml workflow by @jackton1 in #2467
  • fix: update update-readme.yml to sign-commits by @jackton1 in #2468
  • Updated README.md by @github-actions in #2469
  • update: sync-release-version.yml by @jackton1 in #2471

New Contributors

  • @github-actions made their first contribution in #2469

Full Changelog: v45.0.5...v46.0.0

What's Changed

  • docs: update docs to highlight security issues by @jackton1 in #2465
  • fix: update github workflow update-readme.yml by @jackton1 in #2466
  • fix: update permission in update-readme.yml workflow by @jackton1 in #2467
  • fix: update update-readme.yml to sign-commits by @jackton1 in #2468
  • Updated README.md by @github-actions in #2469
  • update: sync-release-version.yml by @jackton1 in #2471

Full Changelog: v45.0.5...v46.0.0