GeezerVison

Sourced from EndBug/add-and-commit's releases.

v11.1.1

What's Changed

• docs: highlight untrusted git-arg interpolation as a warning callout by @​EndBug in EndBug/add-and-commit#781
• fix: Remove GH var interpolation in action.yml docstring by @​dzcode in EndBug/add-and-commit#783
• fix: validate denylisted git args on every token by @​EndBug in EndBug/add-and-commit#784

New Contributors

• @​dzcode made their first contribution in EndBug/add-and-commit#783

Full Changelog: EndBug/add-and-commit@v11.1.0...v11.1.1

v11.1.0

What's Changed

• feat: add push_attempts to retry failed pushes by @​EndBug in EndBug/add-and-commit#764
• test: add integration tests for the shipped action by @​EndBug in EndBug/add-and-commit#766
• feat: add dry_run input by @​EndBug in EndBug/add-and-commit#765
• docs: add nmattia as a contributor for ideas by @​allcontributors[bot] in EndBug/add-and-commit#767
• docs: add jcbhmr as a contributor for ideas by @​allcontributors[bot] in EndBug/add-and-commit#768
• fix: reject remote-helper overrides skipped by -u by @​EndBug in EndBug/add-and-commit#770
• fix: block scheme:: remote helpers and restrict git transports by @​EndBug in EndBug/add-and-commit#771
• fix: resolve absolute cwd without dumping the minified bundle (#495) by @​EndBug in EndBug/add-and-commit#772
• feat: treat pull: true as a default git pull by @​EndBug in EndBug/add-and-commit#773
• docs: add ross-spencer as a contributor for bug by @​allcontributors[bot] in EndBug/add-and-commit#774
• docs: add louisabraham as a contributor for ideas by @​allcontributors[bot] in EndBug/add-and-commit#775
• fix: reject --pathspec-from-file to prevent log disclosure by @​EndBug in EndBug/add-and-commit#777
• fix: neutralize workflow-command injection in info logs by @​EndBug in EndBug/add-and-commit#776
• fix: reject glued quotes that string-argv would split into extra git flags by @​EndBug in EndBug/add-and-commit#778
• chore(deps): bump js-yaml from 5.2.3 to 5.3.0 by @​dependabot[bot] in EndBug/add-and-commit#780
• chore(deps-dev): bump @​vercel/ncc from 0.44.1 to 0.45.0 by @​dependabot[bot] in EndBug/add-and-commit#779

Full Changelog: EndBug/add-and-commit@v11.0.0...v11.1.0

v11.0.0

What's Changed

• chore(deps): bump picomatch by @​dependabot[bot] in EndBug/add-and-commit#724
• chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in EndBug/add-and-commit#725
• chore(deps): bump lodash from 4.17.23 to 4.18.1 by @​dependabot[bot] in EndBug/add-and-commit#728
• chore(deps-dev): bump ts-jest from 29.4.6 to 29.4.9 by @​dependabot[bot] in EndBug/add-and-commit#727
• chore(deps): bump @​actions/github from 9.0.0 to 9.1.0 by @​dependabot[bot] in EndBug/add-and-commit#729
• chore(deps): bump @​actions/github from 9.1.0 to 9.1.1 by @​dependabot[bot] in EndBug/add-and-commit#732
• chore(deps): bump @​actions/core from 3.0.0 to 3.0.1 by @​dependabot[bot] in EndBug/add-and-commit#733
• ci(deps): bump actions/dependency-review-action from 4 to 5 by @​dependabot[bot] in EndBug/add-and-commit#734
• chore(deps-dev): bump ts-jest from 29.4.9 to 29.4.11 by @​dependabot[bot] in EndBug/add-and-commit#736
• chore(deps-dev): bump jest from 30.3.0 to 30.4.2 by @​dependabot[bot] in EndBug/add-and-commit#735
• chore(deps-dev): bump eslint-plugin-prettier from 5.5.5 to 5.5.6 by @​dependabot[bot] in EndBug/add-and-commit#738
• chore(deps): bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot[bot] in EndBug/add-and-commit#739
• ci(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in EndBug/add-and-commit#741
• chore(deps): bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in EndBug/add-and-commit#744
• ci(deps): bump actions/setup-node from 6 to 7 by @​dependabot[bot] in EndBug/add-and-commit#749

... (truncated)

• cc9c08b 11.1.1
• 3446398 fix: validate denylisted git args on every token (#784)
• b0ca327 fix: Remove GH var interpolation in action.yml docstring (#783)
• 3e1240d docs: highlight untrusted git-arg interpolation as a warning callout (#781)
• fc1cf1d 11.1.0
• f14ee6d chore(deps-dev): bump @​vercel/ncc from 0.44.1 to 0.45.0 (#779)
• bccc19e chore(deps): bump js-yaml from 5.2.3 to 5.3.0 (#780)
• 7a6d750 ci: rebuild lib on Dependabot PRs so CI can re-run
• 66d71de fix: reject glued quotes that string-argv would split into extra git flags (#...
• 60ff4bb fix: neutralize workflow-command injection in info logs (#776)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)