Skip to content

chore: Cherry-picked changes from upstream#13

Merged
amanstep merged 3 commits into
mainfrom
auto-cherry-pick
Jun 11, 2026
Merged

chore: Cherry-picked changes from upstream#13
amanstep merged 3 commits into
mainfrom
auto-cherry-pick

Conversation

@github-actions

@github-actions github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Cherry-picked changes from upstream.

github-actions Bot added 2 commits June 8, 2026 04:44
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@carabiner.dev>
Signed-off-by: Biner[Bot] <biner@carabiner.dev>
@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

🚀 PR Updated!

The PR has been updated with the latest cherry-picked commits.

@step-security/maintained-actions-dev Please review and approve the changes.

📦 Target Release Version: v1.1.7
📋 Previous Release Version: v1.1.6

⚠️ Completely Skipped Commits Due to only modifying files in: package.json, package-lock.json, yarn.lock, node_modules/, dist/, or .gitignore

  • 8bbc563ce47e9f1014ad7bc3b9cc108f3de1c5eb
  • f8a674a8ef07d780f96c3670b0623dc65382f4fe
  • 73e94b6ec4adbf65bb7b9f4ecec334dc6576553f
  • f8fe193d6be2e242a625aa17d5c15ca7ad092549
  • 69c2134f5d3ed715cb87c3d19c94269aa7d6b76d
  • 122c8ce07236609548482b9fd4132b5fa205d69b
  • cb852de256514feb5294cc107e07bf1942be9f8e
  • a958d0cced35dfee34b55f91e4f56a05f1e77312
  • 4356ea4859d491594d8b3d858ebba58af832fcc7
  • bcd59b355c4d81b2387327e3365b4f04504db0a7
  • 6c53bcce2c13392af5849774d441e55a1a52ea3a
  • e9aa1ccdf9e93cbd1f8965d6178b85d2b7d3a1f9
  • 85b71c24f39b7bdef77323ec657dcb854a88491d
  • 708f88a5c6859cb6e0cc5c9fb9e56495b18ff56a
  • 0c4687ee67199eae75b461d32d8fa2945bd522d0
  • df962165fd02deaf5215599cc0fe518b1a8c463b
  • 2ccd026d7683896a8414d996b265b6f0e7959878
  • c7d0ed30940ff37e4d162a16241c49fea8eff4d2
  • 2a11d59a135c5e291f305f249a92ad7903e3ee0f

❗ Missing Files:

  • install/download-and-verify/action.yml
  • go/check-latest/action.yml
  • go/check-previous/action.yml
  • go/README.md
  • unpack/sbom/README.md
  • unpack/sbom/action.yml
  • unpack/sbom/generate.sh
  • install/snappy/action.yml
  • install/snappy/action.yml
  • slsa/generate/README.md
  • slsa/generate/action.yml
  • go/README.md
  • slsa/generate/README.md
  • unpack/sbom/README.md
  • go/README.md
  • go/modtidy/action.yml
  • go/README.md
  • install/policyctl/action.yml
  • install/ampel-bootstrap/action.yml
  • install/snappy/action.yml
  • install/snappy/action.yml
  • install/download-and-verify/action.yml
  • install/beaker/action.yml
  • install/policyctl/action.yml
  • install/revex/action.yml
  • install/snappy/action.yml
  • install/unpack/action.yml

🛑 Workflow Files (Cannot be auto-applied by GitHub Actions):

  • .github/workflows/check-binary-versions.yaml from commit 2fe17451fc6d30bebafe36634da59b5d1061c0e8
  • .github/workflows/check-binary-versions.yaml from commit ccdc337ead641c1ac45e4ef0aad80891a04ebd2d
  • .github/workflows/check-binary-versions.yaml from commit 51bdfd77a8b29b1b5c2353aa32061687d2d1cced
  • .github/workflows/check-binary-versions.yaml from commit c83e27cdf0b24061168ee2237529df09f66a4f85
  • .github/workflows/test-installers.yaml from commit 6022a065d6420de5d86333ecfb2b25c57f84b699
  • .github/workflows/test-installers.yaml from commit f76aaf6438603eda55bb3d36022c92e4da03a2a4

❌ Conflicting Files:

  • install/ampel/action.yml from commit c49bffa00249724f63e392e671ef6a12a36f5aec
  • README.md from commit 36602cab0695809fc18d3d8357aeba8afc55a2b1
  • install/ampel/action.yml from commit c4d924884d979f016de4d57d80355a306f800335
  • install/bnd/action.yml from commit 64db79471841f4c54552cd0b3ec69d2ec7749121
  • install/ampel/action.yml from commit f76aaf6438603eda55bb3d36022c92e4da03a2a4
  • install/bnd/action.yml from commit f76aaf6438603eda55bb3d36022c92e4da03a2a4

@amanstep amanstep added the review-required Trigger Claude AI code review on the PR label Jun 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v1.1.6...v1.1.7

📋 File-by-File Analysis:

.github/workflows/test-installers.yaml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+25 -1) | Missing 4 additions | Missing 1 deletions

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+16 -6) | Missing 16 additions | Missing 6 deletions

go/README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 169 additions, 0 deletions)

go/check-latest/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 41 additions, 0 deletions)

go/check-previous/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 41 additions, 0 deletions)

go/modtidy/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 44 additions, 0 deletions)

install/ampel-bootstrap/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+10 -10) | Missing 10 deletions

install/ampel/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+9 -69) | Missing 3 additions | Missing 23 deletions

install/beaker/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 13 additions, 43 deletions)

install/bnd/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+8 -52) | Missing 2 additions | Missing 1 deletions

install/download-and-verify/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+54 -5) | Missing 1 additions | Missing 5 deletions

install/policyctl/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 27 additions, 0 deletions)

install/revex/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 7 additions, 72 deletions)

install/snappy/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 10 additions, 53 deletions)

install/unpack/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 7 additions, 45 deletions)

slsa/generate/README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 119 additions, 0 deletions)

slsa/generate/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 137 additions, 0 deletions)

unpack/sbom/README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 34 additions, 11 deletions)

unpack/sbom/action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 21 additions, 2 deletions)

unpack/sbom/generate.sh

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 6 additions, 1 deletions)

📊 Summary:

  • Total files changed upstream: 20
  • Files present in PR: 6/20
  • Files with matching changes: 0/20

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@amanstep
amanstep merged commit 77e87eb into main Jun 11, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

review-required Trigger Claude AI code review on the PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants