Skip to content

Bump tj-actions/changed-files from 45 to 46#473

Merged
zivy merged 1 commit intomasterfrom
dependabot/github_actions/tj-actions/changed-files-46
Mar 24, 2025
Merged

Bump tj-actions/changed-files from 45 to 46#473
zivy merged 1 commit intomasterfrom
dependabot/github_actions/tj-actions/changed-files-46

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 23, 2025

Bumps tj-actions/changed-files from 45 to 46.

Release notes

Sourced from tj-actions/changed-files's releases.

v46

Changes in v46.0.2

What's Changed

New Contributors

Full Changelog: tj-actions/changed-files@v46...v46.0.2


Changes in v46.0.1

[!WARNING]
Security Alert: A critical security issue was identified in this action due to a compromised commit.

This commit has been removed from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future.

Action Required:

  • Review your workflows executed between March 14 and March 15. If you notice unexpected output under the changed-files section, decode it using the following command: echo 'xxx' | base64 -d | base64 -d
    If the output contains sensitive information (e.g., tokens or secrets), revoke and rotate those secrets immediately.
  • If your workflows reference this commit directly by its SHA, you must update them immediately to avoid using the compromised version.
  • If you are using tagged versions (e.g., v35, v44.5.1), no action is required as these tags have been updated and are now safe to use.

Additionally, as a precaution, we recommend rotating any secrets that may have been exposed during this timeframe to ensure the continued security of your workflows.

What's Changed

Full Changelog: tj-actions/changed-files@v46...v46.0.1


... (truncated)

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

46.0.2 - (2025-03-22)

🐛 Bug Fixes

  • Update log message when attempting to locate merge base (#2493) (a5cad85) - (Tonye Jack)

➕ Add

  • Add hint to revoke leaked token (#2475)

(d52b942) - (undefined)

🔄 Update

  • Updated README.md (#2496)

Co-authored-by: github-actions[bot] (9cc867c) - (github-actions[bot])

  • Updated README.md (#2492)

Co-authored-by: github-actions[bot] (f2f439b) - (github-actions[bot])

  • Updated README.md (#2479)

Co-authored-by: github-actions[bot] (531f5f7) - (github-actions[bot])

  • Updated README.md (#2476)

Co-authored-by: github-actions[bot] (9237eb7) - (github-actions[bot])

📚 Documentation

  • Add undefined-moe as a contributor for doc (#2498) (26a3863) - (allcontributors[bot])
  • Update update-readme.yml to use commit hashes in the docs (#2495) (3a33fa9) - (Tonye Jack)
  • Add RajendraP as a contributor for doc (#2491) (678ecec) - (allcontributors[bot])
  • Update versions (#2488) (6482371) - (Tonye Jack)
  • Remove link to commit (#2481) (0fee5fb) - (Tonye Jack)
  • Update README.md (#2478) (dccd194) - (Tonye Jack)

⚙️ Miscellaneous Tasks

  • Update sync-release-version.yml to use commit hash for tags in docs (#2497) (a530a27) - (Tonye Jack)
  • deps: Bump actions/setup-node from 4.2.0 to 4.3.0 (#2484) (0b975f6) - (dependabot[bot])

⬆️ Upgrades

  • Upgraded to v46.0.1 (#2474)

Co-authored-by: github-actions[bot] (45fb12d) - (github-actions[bot])

46.0.1 - (2025-03-16)

... (truncated)

Commits
  • 26a3863 docs: add undefined-moe as a contributor for doc (#2498)
  • a530a27 chore: update sync-release-version.yml to use commit hash for tags in docs (#...
  • 9cc867c Updated README.md (#2496)
  • 3a33fa9 docs: Update update-readme.yml to use commit hashes in the docs (#2495)
  • a5cad85 fix: update log message when attempting to locate merge base (#2493)
  • f2f439b Updated README.md (#2492)
  • 678ecec docs: add RajendraP as a contributor for doc (#2491)
  • 6482371 docs: update versions (#2488)
  • 0b975f6 chore(deps): bump actions/setup-node from 4.2.0 to 4.3.0 (#2484)
  • 0fee5fb docs: remove link to commit (#2481)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 45 to 46.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v45...v46)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 23, 2025
@zivy zivy merged commit a1b9841 into master Mar 24, 2025
9 checks passed
@zivy zivy deleted the dependabot/github_actions/tj-actions/changed-files-46 branch March 24, 2025 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant