Skip to content

chore: Cherry-picked changes from upstream#59

Merged
Raj-StepSecurity merged 5 commits into
mainfrom
auto-cherry-pick
Jun 30, 2026
Merged

chore: Cherry-picked changes from upstream#59
Raj-StepSecurity merged 5 commits into
mainfrom
auto-cherry-pick

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Cherry-picked changes from upstream.

github-actions Bot added 5 commits June 29, 2026 04:52
The behaviour here is slightly ambiguous that it only applies to one yaml key (SLACK_MESSAGE) and not other related keys
Bumps alpine from `56fa17d` to `51183f2`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps alpine from `51183f2` to `865b95f`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps alpine from `865b95f` to `5b10f43`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown
Contributor Author

🚀 PR Updated!

The PR has been updated with the latest cherry-picked commits.

@step-security/maintained-actions-dev Please review and approve the changes.

📦 Target Release Version: v2.4.0
📋 Previous Release Version: v2.3.3

⚠️ Completely Skipped Commits Due to only modifying files in: package.json, package-lock.json, yarn.lock, node_modules/, dist/, or .gitignore

  • c8edc7c8fa5597d77a153ac70ce2e49c567a17db
  • 48bcc47d08698b0f97f3002d38df0738b73e1366
  • b8c5ab36e0e7976788aee5d9664764eab2dcaf1d
  • de074c669d871fbd0f57101c6968c140ceab1818
  • 07cbdbfd6c6190970778d8f98f11d073b2932aae
  • d2407eb0f31a4fdfd8900c2642c20a297f2c6b88
  • 41b4f196fd7e6267ac21cf49b17affe29bdde352
  • d4380f8130c6081bebfffe88671785aa8f70eb03
  • 2ca439b4dfa143e2773d22256c14c53bec1741ab
  • c58b60ee33df2229ed2d2eed86eeaf7e6c527c5a
  • 584ccdf05eb4c8462f55c7c37d715a620ffec220
  • 0a2fd0608f8472ef515fd522da0165682cce9466
  • 73602e59409d90ec55dc56bff1c1373fad58cd63
  • 14ec709938d017b6103b679dc6a393227b8d341c

🛑 Workflow Files (Cannot be auto-applied by GitHub Actions):

  • .github/workflows/build.yaml from commit a755c200fc357f2652c60499e0b440115332b449
  • .github/workflows/build.yaml from commit daf8b1ee3a4b6310da51c3a7c9f4b7fde5db7dfe
  • .github/workflows/release.yaml from commit ad0d047d074714f6b3ae7133d7844119fe22c4b8

❌ Conflicting Files:

  • Dockerfile from commit 8fe2d82f1ca0dcd6ba7e8207ef60ae329c34921a
  • Dockerfile from commit 0ec51f228ab4d83bfe9f1c4a7c5d26071f007708
  • action.yml from commit 3fedf6968a104df5223c3a5ceeee4e60e89015e3
  • Dockerfile from commit e4a26d76db1c7c0c8dd7eb1c34aeeaac28792648
  • action.yml from commit a7022b5ebac4a900645f837668cc0cfc7c97a4f1
  • action.yml from commit 33ca3be66c6f378fe1610fd1d5258632dbed5e58

@Raj-StepSecurity Raj-StepSecurity added the review-required This PR requires review label Jun 29, 2026
@github-actions

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v2.3.3...v2.4.0

📋 File-by-File Analysis:

.github/workflows/build.yaml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+2 -2)

.github/workflows/release.yaml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

Dockerfile

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+2 -2) | Missing 1 additions | Missing 2 deletions

README.md

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+1 -1)

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+2 -2)

main.go

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+0 -1)

📊 Summary:

  • Total files changed upstream: 6
  • Files present in PR: 3/6
  • Files with matching changes: 2/6

Overall Status: 🔴 INCOMPLETE - Missing files or changes

@Raj-StepSecurity
Raj-StepSecurity merged commit df6752c into main Jun 30, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

review-required This PR requires review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant