Sourced from actions/setup-node's releases.
v5.0.0
What's Changed
Breaking Changes
- Upgrade action to use node24 by
@salmanmkcin actions/setup-node#1325Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes
Dependency Upgrades
- Upgrade
@octokit/request-errorand@actions/githubby@dependabot[bot] in actions/setup-node#1227- Upgrade uuid from 9.0.1 to 11.1.0 by
@dependabot[bot] in actions/setup-node#1273- Upgrade undici from 5.28.5 to 5.29.0 by
@dependabot[bot] in actions/setup-node#1295- Upgrade form-data to bring in fix for critical vulnerability by
@gowridurgadin actions/setup-node#1332- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-node#1345Enhancement:
- Enhance caching in setup-node with automatic package manager detection by
@priya-kinthaliin actions/setup-node#1348New Contributors
@priya-kinthalimade their first contribution in actions/setup-node#1348@salmanmkcmade their first contribution in actions/setup-node#1325Full Changelog: https://github.com/actions/setup-node/compare/v4...v5.0.0
v4.4.0
What's Changed
Bug fixes:
- Make eslint-compact matcher compatible with Stylelint by
@FloEdelmannin actions/setup-node#98- Add support for indented eslint output by
@fregantein actions/setup-node#1245Enhancement:
- Support private mirrors by
@marco-ippolitoin actions/setup-node#1240Dependency update:
- Upgrade
@action/cachefrom 4.0.2 to 4.0.3 by@aparnajyothi-yin actions/setup-node#1262New Contributors
@FloEdelmannmade their first contribution in actions/setup-node#98@fregantemade their first contribution in actions/setup-node#1245@marco-ippolitomade their first contribution in actions/setup-node#1240Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.4.0
v4.3.0
What's Changed
Dependency updates
- Upgrade
@actions/globfrom 0.4.0 to 0.5.0 by@dependabotin actions/setup-node#1200- Upgrade
@action/cachefrom 4.0.0 to 4.0.2 by@gowridurgadin actions/setup-node#1251- Upgrade
@vercel/nccfrom 0.38.1 to 0.38.3 by@dependabotin actions/setup-node#1203- Upgrade
@actions/tool-cachefrom 2.0.1 to 2.0.2 by@dependabotin actions/setup-node#1220
... (truncated)
a0853c2
Bump actions/checkout from 4 to 5 (#1345)b7234cc
Upgrade action to use node24 (#1325)d7a1131
Enhance caching in setup-node with automatic package manager detection
(#1348)5e2628c
Bumps form-data (#1332)65becef
Bump undici from 5.28.5 to 5.29.0 (#1295)7e24a65
Bump uuid from 9.0.1 to 11.1.0 (#1273)08f58d1
Bump @octokit/request-error and
@actions/github (#1227)Sourced from actions/github-script's releases.
v8.0.0
What's Changed
- Update Node.js version support to 24.x by
@salmanmkcin actions/github-script#637- README for updating actions/github-script from v7 to v8 by
@sneha-kripin actions/github-script#653⚠️ Minimum Compatible Runner Version
v2.327.1
Release NotesMake sure your runner is updated to this version or newer to use this release.
New Contributors
@salmanmkcmade their first contribution in actions/github-script#637@sneha-kripmade their first contribution in actions/github-script#653Full Changelog: https://github.com/actions/github-script/compare/v7.1.0...v8.0.0
v7.1.0
What's Changed
- Upgrade husky to v9 by
@benelanin actions/github-script#482- Add workflow file for publishing releases to immutable action package by
@Jcambassin actions/github-script#485- Upgrade IA Publish by
@Jcambassin actions/github-script#486- Fix workflow status badges by
@joshmgrossin actions/github-script#497- Update usage of
actions/upload-artifactby@joshmgrossin actions/github-script#512- Clear up package name confusion by
@joshmgrossin actions/github-script#514- Update dependencies with
npm audit fixby@joshmgrossin actions/github-script#515- Specify that the used script is JavaScript by
@timotkin actions/github-script#478- chore: Add Dependabot for NPM and Actions by
@nschonniin actions/github-script#472- Define
permissionsin workflows and update actions by@joshmgrossin actions/github-script#531- chore: Add Dependabot for .github/actions/install-dependencies by
@nschonniin actions/github-script#532- chore: Remove .vscode settings by
@nschonniin actions/github-script#533- ci: Use github/setup-licensed by
@nschonniin actions/github-script#473- make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by
@iamstarkovin actions/github-script#508- Remove
octokitREADME updates for v7 by@joshmgrossin actions/github-script#557- docs: add "exec" usage examples by
@neilimein actions/github-script#546- Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by
@dependabot[bot] in actions/github-script#563- Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by
@dependabot[bot] in actions/github-script#575- Clearly document passing inputs to the
scriptby@joshmgrossin actions/github-script#603- Update README.md by
@nebuk89in actions/github-script#610New Contributors
@benelanmade their first contribution in actions/github-script#482@Jcambassmade their first contribution in actions/github-script#485@timotkmade their first contribution in actions/github-script#478@iamstarkovmade their first contribution in actions/github-script#508@neilimemade their first contribution in actions/github-script#546@nebuk89made their first contribution in actions/github-script#610Full Changelog: https://github.com/actions/github-script/compare/v7...v7.1.0
... (truncated)
ed59741
Merge pull request #653
from actions/sneha-krip/readme-for-v82dc352e
Bold minimum Actions Runner version in README01e118c
Update README for Node 24 runtime requirements8b222ac
Apply suggestion from @salmanmkcadc0eea
README for updating actions/github-script from v7 to v820fe497
Merge pull request #637
from actions/node24e7b7f22
update licenses2c81ba0
Update Node.js version support to 24.xf28e40c
Merge pull request #610
from actions/nebuk89-patch-11ae9958
Update README.mdSourced from actions/setup-python's releases.
v6.0.0
What's Changed
Breaking Changes
- Upgrade to node 24 by
@salmanmkcin actions/setup-python#1164Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
- Add support for
pip-versionby@priyagupta108in actions/setup-python#1129- Enhance reading from .python-version by
@krystof-kin actions/setup-python#787- Add version parsing from Pipfile by
@aradkdjin actions/setup-python#1067Bug fixes:
- Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by
@aparnajyothi-yin actions/setup-python#1183- Change missing cache directory error to warning by
@aparnajyothi-yin actions/setup-python#1182- Add Architecture-Specific PATH Management for Python with --user Flag on Windows by
@aparnajyothi-yin actions/setup-python#1122- Include python version in PyPy python-version output by
@cdce8pin actions/setup-python#1110- Update docs: clarification on pip authentication with setup-python by
@priya-kinthaliin actions/setup-python#1156Dependency updates:
- Upgrade idna from 2.9 to 3.7 in /tests/data by
@dependabot[bot] in actions/setup-python#843- Upgrade form-data to fix critical vulnerabilities #182 & #183 by
@aparnajyothi-yin actions/setup-python#1163- Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by
@aparnajyothi-yin actions/setup-python#1165- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-python#1181- Upgrade
@actions/tool-cachefrom 2.0.1 to 2.0.2 by@dependabot[bot] in actions/setup-python#1095New Contributors
@krystof-kmade their first contribution in actions/setup-python#787@cdce8pmade their first contribution in actions/setup-python#1110@aradkdjmade their first contribution in actions/setup-python#1067Full Changelog: https://github.com/actions/setup-python/compare/v5...v6.0.0
v5.6.0
What's Changed
- Workflow updates related to Ubuntu 20.04 by
@aparnajyothi-yin actions/setup-python#1065- Fix for Candidate Not Iterable Error by
@aparnajyothi-yin actions/setup-python#1082- Upgrade semver and
@types/semverby@dependabotin actions/setup-python#1091- Upgrade prettier from 2.8.8 to 3.5.3 by
@dependabotin actions/setup-python#1046- Upgrade ts-jest from 29.1.2 to 29.3.2 by
@dependabotin actions/setup-python#1081Full Changelog: https://github.com/actions/setup-python/compare/v5...v5.6.0
v5.5.0
What's Changed
Enhancements:
- Support free threaded Python versions like '3.13t' by
@colesburyin actions/setup-python#973- Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade
@action/cachefrom 4.0.0 to 4.0.3 by@priya-kinthaliin actions/setup-python#1056- Add support for .tool-versions file in setup-python by
@mahabaleshwarsin actions/setup-python#1043Bug fixes:
- Fix architecture for pypy on Linux ARM64 by
@mayeutin actions/setup-python#1011 This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.
... (truncated)
e797f83
Upgrade to node 24 (#1164)3d1e2d2
Revert "Enhance cache-dependency-path handling to support files
outside the w...65b0712
Clarify pythonLocation behavior for PyPy and GraalPy in environment
variables...5b668cf
Bump actions/checkout from 4 to 5 (#1181)f62a0e2
Change missing cache directory error to warning (#1182)9322b3c
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in
PackageIn...fbeb884
Bump form-data to fix critical vulnerabilities #182
& #183
(#1163)03bb615
Bump idna from 2.9 to 3.7 in /tests/data (#843)36da51d
Add version parsing from Pipfile (#1067)3c6f142
update documentation (#1156)Sourced from typing-extensions's releases.
4.15.0
No user-facing changes since 4.15.0rc1.
New features since 4.14.1:
- Add the
@typing_extensions.disjoint_basedecorator, as specified in PEP 800. Patch by Jelle Zijlstra.- Add
typing_extensions.type_repr, a backport ofannotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.- Fix behavior of type params in
typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.4.15.0rc1
- Add the
@typing_extensions.disjoint_basedecorator, as specified in PEP 800. Patch by Jelle Zijlstra.- Add
typing_extensions.type_repr, a backport ofannotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.- Fix behavior of type params in
typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Sourced from typing-extensions's changelog.
Release 4.15.0 (August 25, 2025)
No user-facing changes since 4.15.0rc1.
Release 4.15.0rc1 (August 18, 2025)
- Add the
@typing_extensions.disjoint_basedecorator, as specified in PEP 800. Patch by Jelle Zijlstra.- Add
typing_extensions.type_repr, a backport ofannotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.- Fix behavior of type params in
typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
9d1637e
Prepare release 4.15.0 (#658)4bd67c5
Coverage: exclude some noise (#656)e589a26
Coverage: add detailed report to job summary (#655)67d37fe
Coverage: Implement fail_under (#654)e9ae26f
Don't delete previous coverage comment (#653)ac80bb7
Add Coverage workflow (#623)abaaafd
Prepare release 4.15.0rc1 (#650)9810405
Add @disjoint_base (PEP 800) (#634)7ee9e05
Backport type_params fix from CPython (#646)1e8eb9c
Do not refer to PEP 705 as being experimental (#648)Sourced from actions/setup-node's releases.
v5.0.0
What's Changed
Breaking Changes
- Upgrade action to use node24 by
@salmanmkcin actions/setup-node#1325Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes
Dependency Upgrades
- Upgrade
@octokit/request-errorand@actions/githubby@dependabot[bot] in actions/setup-node#1227- Upgrade uuid from 9.0.1 to 11.1.0 by
@dependabot[bot] in actions/setup-node#1273- Upgrade undici from 5.28.5 to 5.29.0 by
@dependabot[bot] in actions/setup-node#1295- Upgrade form-data to bring in fix for critical vulnerability by
@gowridurgadin actions/setup-node#1332- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-node#1345Enhancement:
- Enhance caching in setup-node with automatic package manager detection by
@priya-kinthaliin actions/setup-node#1348New Contributors
@priya-kinthalimade their first contribution in actions/setup-node#1348@salmanmkcmade their first contribution in actions/setup-node#1325Full Changelog: https://github.com/actions/setup-node/compare/v4...v5.0.0
v4.4.0
What's Changed
Bug fixes:
- Make eslint-compact matcher compatible with Stylelint by
@FloEdelmannin actions/setup-node#98- Add support for indented eslint output by
@fregantein actions/setup-node#1245Enhancement:
- Support private mirrors by
@marco-ippolitoin actions/setup-node#1240Dependency update:
- Upgrade
@action/cachefrom 4.0.2 to 4.0.3 by@aparnajyothi-yin actions/setup-node#1262New Contributors
@FloEdelmannmade their first contribution in actions/setup-node#98@fregantemade their first contribution in actions/setup-node#1245@marco-ippolitomade their first contribution in actions/setup-node#1240Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.4.0
v4.3.0
What's Changed
Dependency updates
- Upgrade
@actions/globfrom 0.4.0 to 0.5.0 by@dependabotin actions/setup-node#1200- Upgrade
@action/cachefrom 4.0.0 to 4.0.2 by@gowridurgadin actions/setup-node#1251- Upgrade
@vercel/nccfrom 0.38.1 to 0.38.3 by@dependabotin actions/setup-node#1203- Upgrade
@actions/tool-cachefrom 2.0.1 to 2.0.2 by@dependabotin actions/setup-node#1220
... (truncated)
a0853c2
Bump actions/checkout from 4 to 5 (#1345)b7234cc
Upgrade action to use node24 (#1325)d7a1131
Enhance caching in setup-node with automatic package manager detection
(#1348)5e2628c
Bumps form-data (#1332)65becef
Bump undici from 5.28.5 to 5.29.0 (#1295)7e24a65
Bump uuid from 9.0.1 to 11.1.0 (#1273)08f58d1
Bump @octokit/request-error and
@actions/github (#1227)Sourced from jakebailey/pyright-action's releases.
v2.3.3
- Fix lint (4599f31)
- Replace jest-path-serializer (1349f1a)
- Fix deps (f701448)
- fmt (ec50111)
- Update engines (41972b7)
- Update github actions (#180) (86e183a)
- Update actions/checkout action to v5 (#190) (8b711b9)
- Update deps (9631dc2)
- Update deps (fa0d678)
- Update github actions (#163) (623784a)
- Fix eslint (73a65bd)
- Update deps (dee7200)
- Update deps (ea37d1c)
- Update nvmrc (fb32d81)
- Update eslint (b0c5af5)
- Update deps (f4851c1)
- Update actions/cache action to v4.2.0 (#159) (57f6678)
- Update codecov/codecov-action action to v5 (#154) (f572338)
- Update github actions (#146) (b7d7f8e)
- Update deps (b721321)
- Update deps (4156862)
- Update github actions (#121) (ec480a0)
- Update deps (bfe39b3)
6cabc0f
Release v2.3.34599f31
Fix lint1349f1a
Replace jest-path-serializerf701448
Fix depsec50111
fmt41972b7
Update engines86e183a
Update github actions (#180)8b711b9
Update actions/checkout action to v5 (#190)9631dc2
Update depsfa0d678
Update depsSourced from actions/setup-python's releases.
v6.0.0
What's Changed
Breaking Changes
- Upgrade to node 24 by
@salmanmkcin actions/setup-python#1164Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
- Add support for
pip-versionby@priyagupta108in actions/setup-python#1129- Enhance reading from .python-version by
@krystof-kin actions/setup-python#787- Add version parsing from Pipfile by
@aradkdjin actions/setup-python#1067Bug fixes:
- Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by
@aparnajyothi-yin actions/setup-python#1183- Change missing cache directory error to warning by
@aparnajyothi-yin actions/setup-python#1182- Add Architecture-Specific PATH Management for Python with --user Flag on Windows by
@aparnajyothi-yin actions/setup-python#1122- Include python version in PyPy python-version output by
@cdce8pin actions/setup-python#1110- Update docs: clarification on pip authentication with setup-python by
@priya-kinthaliin actions/setup-python#1156Dependency updates:
- Upgrade idna from 2.9 to 3.7 in /tests/data by
@dependabot[bot] in actions/setup-python#843- Upgrade form-data to fix critical vulnerabilities #182 & #183 by
@aparnajyothi-yin actions/setup-python#1163- Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by
@aparnajyothi-yin actions/setup-python#1165- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-python#1181- Upgrade
@actions/tool-cachefrom 2.0.1 to 2.0.2 by@dependabot[bot] in actions/setup-python#1095New Contributors
@krystof-kmade their first contribution in actions/setup-python#787@cdce8pmade their first contribution in actions/setup-python#1110@aradkdjmade their first contribution in actions/setup-python#1067Full Changelog: https://github.com/actions/setup-python/compare/v5...v6.0.0
v5.6.0
What's Changed
- Workflow updates related to Ubuntu 20.04 by
@aparnajyothi-yin actions/setup-python#1065- Fix for Candidate Not Iterable Error by
@aparnajyothi-yin actions/setup-python#1082- Upgrade semver and
@types/semverby@dependabotin actions/setup-python#1091- Upgrade prettier from 2.8.8 to 3.5.3 by
@dependabotin actions/setup-python#1046- Upgrade ts-jest from 29.1.2 to 29.3.2 by
@dependabotin actions/setup-python#1081Full Changelog: https://github.com/actions/setup-python/compare/v5...v5.6.0
v5.5.0
What's Changed
Enhancements:
- Support free threaded Python versions like '3.13t' by
@colesburyin actions/setup-python#973- Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade
@action/cachefrom 4.0.0 to 4.0.3 by@priya-kinthaliin actions/setup-python#1056- Add support for .tool-versions file in setup-python by
@mahabaleshwarsin actions/setup-python#1043Bug fixes:
- Fix architecture for pypy on Linux ARM64 by
@mayeutin actions/setup-python#1011 This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.
... (truncated)
e797f83
Upgrade to node 24 (#1164)3d1e2d2
Revert "Enhance cache-dependency-path handling to support files
outside the w...65b0712
Clarify pythonLocation behavior for PyPy and GraalPy in environment
variables...5b668cf
Bump actions/checkout from 4 to 5 (#1181)f62a0e2
Change missing cache directory error to warning (#1182)9322b3c
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in
PackageIn...fbeb884
Bump form-data to fix critical vulnerabilities #182
& #183
(#1163)03bb615
Bump idna from 2.9 to 3.7 in /tests/data (#843)36da51d
Add version parsing from Pipfile (#1067)3c6f142
update documentation (#1156)Sourced from actions/setup-python's releases.
v6.0.0
What's Changed
Breaking Changes
- Upgrade to node 24 by
@salmanmkcin actions/setup-python#1164Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
- Add support for
pip-versionby@priyagupta108in actions/setup-python#1129- Enhance reading from .python-version by
@krystof-kin actions/setup-python#787- Add version parsing from Pipfile by
@aradkdjin actions/setup-python#1067Bug fixes:
- Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by
@aparnajyothi-yin actions/setup-python#1183- Change missing cache directory error to warning by
@aparnajyothi-yin actions/setup-python#1182- Add Architecture-Specific PATH Management for Python with --user Flag on Windows by
@aparnajyothi-yin actions/setup-python#1122- Include python version in PyPy python-version output by
@cdce8pin actions/setup-python#1110- Update docs: clarification on pip authentication with setup-python by
@priya-kinthaliin actions/setup-python#1156Dependency updates:
- Upgrade idna from 2.9 to 3.7 in /tests/data by
@dependabot[bot] in actions/setup-python#843- Upgrade form-data to fix critical vulnerabilities #182 & #183 by
@aparnajyothi-yin actions/setup-python#1163- Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by
@aparnajyothi-yin actions/setup-python#1165- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-python#1181- Upgrade
@actions/tool-cachefrom 2.0.1 to 2.0.2 by@dependabot[bot] in actions/setup-python#1095New Contributors
@krystof-kmade their first contribution in actions/setup-python#787@cdce8pmade their first contribution in actions/setup-python#1110@aradkdjmade their first contribution in actions/setup-python#1067Full Changelog: https://github.com/actions/setup-python/compare/v5...v6.0.0
v5.6.0
What's Changed
- Workflow updates related to Ubuntu 20.04 by
@aparnajyothi-yin actions/setup-python#1065- Fix for Candidate Not Iterable Error by
@aparnajyothi-yin actions/setup-python#1082- Upgrade semver and
@types/semverby@dependabotin actions/setup-python#1091- Upgrade prettier from 2.8.8 to 3.5.3 by
@dependabotin actions/setup-python#1046- Upgrade ts-jest from 29.1.2 to 29.3.2 by
@dependabotin actions/setup-python#1081Full Changelog: https://github.com/actions/setup-python/compare/v5...v5.6.0
v5.5.0
What's Changed
Enhancements:
- Support free threaded Python versions like '3.13t' by
@colesburyin actions/setup-python#973- Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade
@action/cachefrom 4.0.0 to 4.0.3 by@priya-kinthaliin actions/setup-python#1056- Add support for .tool-versions file in setup-python by
@mahabaleshwarsin actions/setup-python#1043Bug fixes:
- Fix architecture for pypy on Linux ARM64 by
@mayeutin actions/setup-python#1011 This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.
... (truncated)
e797f83
Upgrade to node 24 (#1164)3d1e2d2
Revert "Enhance cache-dependency-path handling to support files
outside the w...65b0712
Clarify pythonLocation behavior for PyPy and GraalPy in environment
variables...5b668cf
Bump actions/checkout from 4 to 5 (#1181)f62a0e2
Change missing cache directory error to warning (#1182)9322b3c
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in
PackageIn...fbeb884
Bump form-data to fix critical vulnerabilities #182
& #183
(#1163)03bb615
Bump idna from 2.9 to 3.7 in /tests/data (#843)36da51d
Add version parsing from Pipfile (#1067)3c6f142
update documentation (#1156)Sourced from sha.js's changelog.
v2.4.12 - 2025-07-01
Commits
- [eslint] switch to eslint
7acadfb- [meta] add
auto-changelogb46e711- [eslint] fix package.json indentation
df9d521- [Tests] migrate from travis to GHA
c43c64a- [Fix] support multi-byte wide typed arrays
f2a258e- [meta] reorder package.json
d8d77c0- [meta] add
npmignore35aec35- [Tests] avoid console logs
73e33ae- [Tests] fix tests run in batch
2629130- [Tests] drop node requirement to 0.10
00c7f23- [Dev Deps] update
buffer,hash-test-vectors,standard,tape,typedarray92b5de5- [Tests] drop node requirement to v3
9b5eca8- [meta] set engines to
>= 4807084c- Only apps should have lockfiles
c72789c- [Deps] update
inherits,safe-buffer5428cfc- [Dev Deps] update
@ljharb/eslint-config2dbe0aa- update README to reflect LICENSE
8938256- [Dev Deps] add missing peer dep
d528896- [Dev Deps] remove unused
bufferdep94ca724
eb4ea2f
v2.4.12d8d77c0
[meta] reorder package.jsondf9d521
[eslint] fix package.json indentation35aec35
[meta] add npmignored528896
[Dev Deps] add missing peer depb46e711
[meta] add auto-changelog94ca724
[Dev Deps] remove unused buffer dep2dbe0aa
[Dev Deps] update @ljharb/eslint-config73e33ae
[Tests] avoid console logsf2a258e
[Fix] support multi-byte wide typed arraysThis version was pushed to npm by ljharb, a new releaser for sha.js since your current version.
Sourced from actions/setup-node's releases.
v6.0.0
What's Changed
Breaking Changes
- Limit automatic caching to npm, update workflows and documentation by
@priyagupta108in actions/setup-node#1374Dependency Upgrades
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by
@dependabot[bot] in #1336- Upgrade prettier from 2.8.8 to 3.6.2 by
@dependabot[bot] in #1334- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by
@dependabot[bot] in #1362Full Changelog: https://github.com/actions/setup-node/compare/v5...v6.0.0
Sourced from actions/setup-node's releases.
v6.0.0
What's Changed
Breaking Changes
- Limit automatic caching to npm, update workflows and documentation by
@priyagupta108in actions/setup-node#1374Dependency Upgrades
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by
@dependabot[bot] in #1336- Upgrade prettier from 2.8.8 to 3.6.2 by
@dependabot[bot] in #1334- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by
@dependabot[bot] in #1362Full Changelog: https://github.com/actions/setup-node/compare/v5...v6.0.0
Sourced from actions/upload-artifact's releases.
v5.0.0
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.
- Update README.md by
@GhadimiRin actions/upload-artifact#681- Update README.md by
@nebuk89in actions/upload-artifact#712- Readme: spell out the first use of GHES by
@danwkennedyin actions/upload-artifact#727- Update GHES guidance to include reference to Node 20 version by
@patrikpolyakin actions/upload-artifact#725- Bump
@actions/artifacttov4.0.0- Prepare
v5.0.0by@danwkennedyin actions/upload-artifact#734New Contributors
@GhadimiRmade their first contribution in actions/upload-artifact#681@nebuk89made their first contribution in actions/upload-artifact#712@danwkennedymade their first contribution in actions/upload-artifact#727@patrikpolyakmade their first contribution in actions/upload-artifact#725Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v5.0.0
v4.6.2
What's Changed
- Update to use artifact 2.3.2 package & prepare for new upload-artifact release by
@salmanmkcin actions/upload-artifact#685New Contributors
@salmanmkcmade their first contribution in actions/upload-artifact#685Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.6.2
v4.6.1
What's Changed
- Update to use artifact 2.2.2 package by
@yacaovsncin actions/upload-artifact#673Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.6.1
v4.6.0
What's Changed
- Expose env vars to control concurrency and timeout by
@yacaovsncin actions/upload-artifact#662Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.6.0
v4.5.0
What's Changed
- fix: deprecated
Node.jsversion in action by@hamirmahalin actions/upload-artifact#578- Add new
artifact-digestoutput by@bdehamerin actions/upload-artifact#656New Contributors
@hamirmahalmade their first contribution in actions/upload-artifact#578
... (truncated)
330a01c
Merge pull request #734
from actions/danwkennedy/prepare-5.0.003f2824
Update github.dep.yml905a1ec
Prepare v5.0.02d9f9cd
Merge pull request #725
from patrikpolyak/patch-19687587
Merge branch 'main' into patch-12848b2c
Merge pull request #727
from danwkennedy/patch-19b51177
Spell out the first use of GHEScd231ca
Update GHES guidance to include reference to Node 20 versionde65e23
Merge pull request #712
from actions/nebuk89-patch-18747d8c
Update README.mdf421a23
2.1.4c412fa1
refactor to same pattern as v3Sourced from peter-evans/find-comment's releases.
Find Comment v4.0.0
⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.
What's Changed
- build(deps-dev): bump
@types/nodefrom 18.19.28 to 18.19.30 by@dependabot[bot] in peter-evans/find-comment#301- build(deps-dev): bump
@types/nodefrom 18.19.30 to 18.19.31 by@dependabot[bot] in peter-evans/find-comment#302- build(deps-dev): bump
@types/nodefrom 18.19.31 to 18.19.33 by@dependabot[bot] in peter-evans/find-comment#303- build(deps-dev): bump prettier from 3.2.5 to 3.3.0 by
@dependabot[bot] in peter-evans/find-comment#304- build(deps-dev): bump prettier from 3.3.0 to 3.3.1 by
@dependabot[bot] in peter-evans/find-comment#305- build(deps-dev): bump
@types/nodefrom 18.19.33 to 18.19.34 by@dependabot[bot] in peter-evans/find-comment#306- build(deps-dev): bump prettier from 3.3.1 to 3.3.2 by
@dependabot[bot] in peter-evans/find-comment#307- build(deps-dev): bump braces from 3.0.2 to 3.0.3 by
@dependabot[bot] in peter-evans/find-comment#308- build(deps-dev): bump ws from 7.5.9 to 7.5.10 by
@dependabot[bot] in peter-evans/find-comment#309- build(deps-dev): bump
@types/nodefrom 18.19.34 to 18.19.39 by@dependabot[bot] in peter-evans/find-comment#310- build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by
@dependabot[bot] in peter-evans/find-comment#311- build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by
@dependabot[bot] in peter-evans/find-comment#312- build(deps-dev): bump
@types/nodefrom 18.19.39 to 18.19.41 by@dependabot[bot] in peter-evans/find-comment#313- build(deps-dev): bump
@types/nodefrom 18.19.41 to 18.19.42 by@dependabot[bot] in peter-evans/find-comment#314- build(deps-dev): bump
@types/nodefrom 18.19.42 to 18.19.43 by@dependabot[bot] in peter-evans/find-comment#315- build(deps-dev): bump
@types/nodefrom 18.19.43 to 18.19.44 by@dependabot[bot] in peter-evans/find-comment#316- build(deps-dev): bump
@types/nodefrom 18.19.44 to 18.19.45 by@dependabot[bot] in peter-evans/find-comment#317- build(deps-dev): bump
@types/nodefrom 18.19.45 to 18.19.47 by@dependabot[bot] in peter-evans/find-comment#318- build(deps): bump peter-evans/create-pull-request from 6 to 7 by
@dependabot[bot] in peter-evans/find-comment#319- build(deps-dev): bump
@types/nodefrom 18.19.47 to 18.19.50 by@dependabot[bot] in peter-evans/find-comment#320- build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by
@dependabot[bot] in peter-evans/find-comment#321- build(deps-dev): bump
@vercel/nccfrom 0.38.1 to 0.38.2 by@dependabot[bot] in peter-evans/find-comment#322- build(deps-dev): bump
@types/nodefrom 18.19.50 to 18.19.54 by@dependabot[bot] in peter-evans/find-comment#323- Update distribution by
@actions-botin peter-evans/find-comment#324- build(deps): bump
@actions/corefrom 1.10.1 to 1.11.1 by@dependabot[bot] in peter-evans/find-comment#325- Update distribution by
@actions-botin peter-evans/find-comment#326- build(deps-dev): bump
@types/nodefrom 18.19.54 to 18.19.55 by@dependabot[bot] in peter-evans/find-comment#327- build(deps-dev): bump
@types/nodefrom 18.19.55 to 18.19.57 by@dependabot[bot] in peter-evans/find-comment#328- build(deps-dev): bump
@types/nodefrom 18.19.57 to 18.19.59 by@dependabot[bot] in peter-evans/find-comment#329- build(deps-dev): bump
@types/nodefrom 18.19.59 to 18.19.63 by@dependabot[bot] in peter-evans/find-comment#330- build(deps-dev): bump
@types/nodefrom 18.19.63 to 18.19.64 by@dependabot[bot] in peter-evans/find-comment#331- build(deps-dev): bump
@vercel/nccfrom 0.38.2 to 0.38.3 by@dependabot[bot] in peter-evans/find-comment#332- build(deps-dev): bump
@types/nodefrom 18.19.64 to 18.19.65 by@dependabot[bot] in peter-evans/find-comment#333- build(deps-dev): bump
@types/nodefrom 18.19.65 to 18.19.67 by@dependabot[bot] in peter-evans/find-comment#334- build(deps-dev): bump prettier from 3.3.3 to 3.4.1 by
@dependabot[bot] in peter-evans/find-comment#335- build(deps-dev): bump prettier from 3.4.1 to 3.4.2 by
@dependabot[bot] in peter-evans/find-comment#336- build(deps-dev): bump
@types/nodefrom 18.19.67 to 18.19.68 by@dependabot[bot] in peter-evans/find-comment#337- build(deps-dev): bump
@types/nodefrom 18.19.68 to 18.19.69 by@dependabot[bot] in peter-evans/find-comment#338- build(deps-dev): bump
@types/nodefrom 18.19.69 to 18.19.70 by@dependabot[bot] in peter-evans/find-comment#339- build(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.2.3 by
@dependabot[bot] in peter-evans/find-comment#340- build(deps-dev): bump
@types/nodefrom 18.19.70 to 18.19.71 by@dependabot[bot] in peter-evans/find-comment#341- build(deps-dev): bump
@types/nodefrom 18.19.71 to 18.19.74 by@dependabot[bot] in peter-evans/find-comment#342- build(deps-dev): bump
@types/nodefrom 18.19.74 to 18.19.75 by@dependabot[bot] in peter-evans/find-comment#343- build(deps-dev): bump prettier from 3.4.2 to 3.5.1 by
@dependabot[bot] in peter-evans/find-comment#344- build(deps-dev): bump
@types/nodefrom 18.19.75 to 18.19.76 by@dependabot[bot] in peter-evans/find-comment#345- build(deps): bump
@octokit/request-errorand@actions/githubby@dependabot[bot] in peter-evans/find-comment#346
... (truncated)
b30e6a3
feat: v4 (#389)b4929e7
build(deps-dev): bump @types/node from 18.19.124 to
18.19.127 (#388)1f47d94
build(deps-dev): bump @vercel/ncc from 0.38.3 to 0.38.4
(#387)a723a15
build(deps): bump actions/setup-node from 4 to 5 (#386)8bacb1b
build(deps-dev): bump @types/node from 18.19.123 to
18.19.124 (#385)048de65
build(deps): bump actions/checkout from 4 to 5 (#384)c02750f
build(deps-dev): bump @types/node from 18.19.122 to
18.19.123 (#383)092c582
build(deps): bump actions/download-artifact from 4 to 5 (#382)c115bb0
build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#381)8d3be5d
build(deps-dev): bump @types/node from 18.19.121 to
18.19.122 (#380)Sourced from tomli's changelog.
2.3.0
- Added
- Binary wheels for Python 3.14 (also free-threaded)
- Performance
- Reduced import time
3fccd16
Bump version: 2.2.1 → 2.3.06504016
Add 2.3.0 changelog0bc66fc
Remove now off-by-default PyPy from cibuildwheel skip list0aa242f
Update license metadata to appease PEP 639a18221e
Bump GitHub CI actions6fa4d90
[pre-commit.ci] pre-commit autoupdate (#260)b974fa1
[pre-commit.ci] pre-commit autoupdate (#248)f574f36
Update mypy to 1.15 and use --strict mode (#257)1da01ef
Reduce import time by removing typing import (#251)4188188
Reduce import time by removing string and
tomli._types importsSourced from actions/setup-node's releases.
v6.0.0
What's Changed
Breaking Changes
- Limit automatic caching to npm, update workflows and documentation by
@priyagupta108in actions/setup-node#1374Dependency Upgrades
- Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by
@dependabot[bot] in #1336- Upgrade prettier from 2.8.8 to 3.6.2 by
@dependabot[bot] in #1334- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by
@dependabot[bot] in #1362Full Changelog: https://github.com/actions/setup-node/compare/v5...v6.0.0
v5.0.0
What's Changed
Breaking Changes
- Enhance caching in setup-node with automatic package manager detection by
@priya-kinthaliin actions/setup-node#1348This update, introduces automatic caching when a valid
packageManagerfield is present in yourpackage.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, setpackage-manager-cache: falsesteps: - uses: actions/checkout@v5 - uses: actions/setup-node@v5 with: package-manager-cache: false
- Upgrade action to use node24 by
@salmanmkcin actions/setup-node#1325Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
- Upgrade
@octokit/request-errorand@actions/githubby@dependabot[bot] in actions/setup-node#1227- Upgrade uuid from 9.0.1 to 11.1.0 by
@dependabot[bot] in actions/setup-node#1273- Upgrade undici from 5.28.5 to 5.29.0 by
@dependabot[bot] in actions/setup-node#1295- Upgrade form-data to bring in fix for critical vulnerability by
@gowridurgadin actions/setup-node#1332- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-node#1345New Contributors
@priya-kinthalimade their first contribution in actions/setup-node#1348@salmanmkcmade their first contribution in actions/setup-node#1325Full Changelog: https://github.com/actions/setup-node/compare/v4...v5.0.0
v4.4.0
... (truncated)
2028fbc
Limit automatic caching to npm, update workflows and documentation (#1374)1342781
Bump actions/publish-action from 0.3.0 to 0.4.0 (#1362)89d709d
Bump prettier from 2.8.8 to 3.6.2 (#1334)cd2651c
Bump ts-jest from 29.1.2 to 29.4.1 (#1336)a0853c2
Bump actions/checkout from 4 to 5 (#1345)b7234cc
Upgrade action to use node24 (#1325)d7a1131
Enhance caching in setup-node with automatic package manager detection
(#1348)5e2628c
Bumps form-data (#1332)65becef
Bump undici from 5.28.5 to 5.29.0 (#1295)7e24a65
Bump uuid from 9.0.1 to 11.1.0 (#1273)Sourced from js-yaml's changelog.
[3.14.2] - 2025-11-15
Security
- Backported v4.1.1 fix to v3
[4.1.1] - 2025-11-12
Security
- Fix prototype pollution issue in yaml merge (<<) operator.
[4.1.0] - 2021-04-15
Added
- Types are now exported as
yaml.types.XXX.- Every type now has
optionsproperty with original arguments kept as they were (seeyaml.types.int.optionsas an example).Changed
Schema.extend()now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered asabcdinstead ofcbad).[4.0.0] - 2021-01-03
Changed
- Check migration guide to see details for all breaking changes.
- Breaking: "unsafe" tags
!!js/function,!!js/regexp,!!js/undefinedare moved to js-yaml-js-types package.- Breaking: removed
safe*functions. Useload,loadAll,dumpinstead which are all now safe by default.yaml.DEFAULT_SAFE_SCHEMAandyaml.DEFAULT_FULL_SCHEMAare removed, useyaml.DEFAULT_SCHEMAinstead.yaml.Schema.create(schema, tags)is removed, useschema.extend(tags)instead.!!binarynow always mapped toUint8Arrayon load.- Reduced nesting of
/libfolder.- Parse numbers according to YAML 1.2 instead of YAML 1.1 (
01234is now decimal,0o1234is octal,1:23is parsed as string instead of base60).dump()no longer quotes:,[,],(,)except when necessary, #470, #557.- Line and column in exceptions are now formatted as
(X:Y)instead ofat line X, column Y(also present in compact format), #332.- Code snippet created in exceptions now contains multiple lines with line numbers.
dump()now serializesundefinedasnullin collections and removes keys withundefinedin mappings, #571.dump()withskipInvalid=truenow serializes invalid items in collections as null.- Custom tags starting with
!are now dumped as!taginstead of!<!tag>, #576.- Custom tags starting with
tag:yaml.org,2002:are now shorthanded using!!, #258.Added
... (truncated)
9963d36
3.14.2 released10d3c8e
dist rebuild5278870
fix prototype pollution in merge (<<) (#731)37caaad
3.14.1 released094c0f7
dist rebuild9586ebe
Avoid calling hasOwnProperty of user-controlled objects34e5072
3.14.0 released7b25c83
Browser files rebuild6f73473
Dev deps bump0c29349
Travis-CI: drop old nodejs versionsSourced from js-yaml's changelog.
[3.14.2] - 2025-11-15
Security
- Backported v4.1.1 fix to v3
[4.1.1] - 2025-11-12
Security
- Fix prototype pollution issue in yaml merge (<<) operator.
[4.1.0] - 2021-04-15
Added
- Types are now exported as
yaml.types.XXX.- Every type now has
optionsproperty with original arguments kept as they were (seeyaml.types.int.optionsas an example).Changed
Schema.extend()now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered asabcdinstead ofcbad).[4.0.0] - 2021-01-03
Changed
- Check migration guide to see details for all breaking changes.
- Breaking: "unsafe" tags
!!js/function,!!js/regexp,!!js/undefinedare moved to js-yaml-js-types package.- Breaking: removed
safe*functions. Useload,loadAll,dumpinstead which are all now safe by default.yaml.DEFAULT_SAFE_SCHEMAandyaml.DEFAULT_FULL_SCHEMAare removed, useyaml.DEFAULT_SCHEMAinstead.yaml.Schema.create(schema, tags)is removed, useschema.extend(tags)instead.!!binarynow always mapped toUint8Arrayon load.- Reduced nesting of
/libfolder.- Parse numbers according to YAML 1.2 instead of YAML 1.1 (
01234is now decimal,0o1234is octal,1:23is parsed as string instead of base60).dump()no longer quotes:,[,],(,)except when necessary, #470, #557.- Line and column in exceptions are now formatted as
(X:Y)instead ofat line X, column Y(also present in compact format), #332.- Code snippet created in exceptions now contains multiple lines with line numbers.
dump()now serializesundefinedasnullin collections and removes keys withundefinedin mappings, #571.dump()withskipInvalid=truenow serializes invalid items in collections as null.- Custom tags starting with
!are now dumped as!taginstead of!<!tag>, #576.- Custom tags starting with
tag:yaml.org,2002:are now shorthanded using!!, #258.Added
... (truncated)
9963d36
3.14.2 released10d3c8e
dist rebuild5278870
fix prototype pollution in merge (<<) (#731)37caaad
3.14.1 released094c0f7
dist rebuild9586ebe
Avoid calling hasOwnProperty of user-controlled objects34e5072
3.14.0 released7b25c83
Browser files rebuild6f73473
Dev deps bump0c29349
Travis-CI: drop old nodejs versionsSourced from actions/checkout's releases.
v6.0.0
What's Changed
- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- v6-beta by
@ericsciplein actions/checkout#2298- update readme/changelog for v6 by
@ericsciplein actions/checkout#2311Full Changelog: https://github.com/actions/checkout/compare/v5.0.0...v6.0.0
v6-beta
What's Changed
Updated persist-credentials to store the credentials under
$RUNNER_TEMPinstead of directly in the local git config.This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.
v5.0.1
What's Changed
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301Full Changelog: https://github.com/actions/checkout/compare/v5...v5.0.1
Sourced from actions/checkout's changelog.
Changelog
V6.0.0
- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248V5.0.1
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301V5.0.0
- Update actions checkout to use node 24 by
@salmanmkcin actions/checkout#2226V4.3.1
- Port v6 cleanup to v4 by
@ericsciplein actions/checkout#2305V4.3.0
- docs: update README.md by
@motssin actions/checkout#1971- Add internal repos for checking out multiple repositories by
@mouismailin actions/checkout#1977- Documentation update - add recommended permissions to Readme by
@benwellsin actions/checkout#2043- Adjust positioning of user email note and permissions heading by
@joshmgrossin actions/checkout#2044- Update README.md by
@nebuk89in actions/checkout#2194- Update CODEOWNERS for actions by
@TingluoHuangin actions/checkout#2224- Update package dependencies by
@salmanmkcin actions/checkout#2236v4.2.2
url-helper.tsnow leverages well-known environment variables by@jww3in actions/checkout#1941- Expand unit test coverage for
isGhesby@jww3in actions/checkout#1946v4.2.1
- Check out other refs/* by commit if provided, fall back to ref by
@orhantoyin actions/checkout#1924v4.2.0
- Add Ref and Commit outputs by
@lucacomein actions/checkout#1180- Dependency updates by
@dependabot- actions/checkout#1777, actions/checkout#1872v4.1.7
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by
@dependabotin actions/checkout#1739- Bump actions/checkout from 3 to 4 by
@dependabotin actions/checkout#1697- Check out other refs/* by commit by
@orhantoyin actions/checkout#1774- Pin actions/checkout's own workflows to a known, good, stable version. by
@jww3in actions/checkout#1776v4.1.6
- Check platform to set archive extension appropriately by
@cory-millerin actions/checkout#1732v4.1.5
- Update NPM dependencies by
@cory-millerin actions/checkout#1703- Bump github/codeql-action from 2 to 3 by
@dependabotin actions/checkout#1694- Bump actions/setup-node from 1 to 4 by
@dependabotin actions/checkout#1696- Bump actions/upload-artifact from 2 to 4 by
@dependabotin actions/checkout#1695
... (truncated)
Sourced from jws's releases.
v3.2.3
Changed
- Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key) when using HMAC algorithms.
- Upgrading JWA version to 1.4.2, addressing a compatibility issue for Node >= 25.
Sourced from jws's changelog.
[3.2.3]
Changed
- Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key) when using HMAC algorithms.
- Upgrading JWA version to 1.4.2, adressing a compatibility issue for Node >= 25.
[3.0.0]
Changed
- BREAKING:
jwt.verifynow requires analgorithmparameter, andjws.createVerifyrequires analgorithmoption. The"alg"field signature headers is ignored. This mitigates a critical security flaw in the library which would allow an attacker to generate signatures with arbitrary contents that would be accepted byjwt.verify. See https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ for details.2.0.0 - 2015-01-30
Changed
BREAKING: Default payload encoding changed from
binarytoutf8.utf8is a is a more sensible default thanbinarybecause many payloads, as far as I can tell, will contain user-facing strings that could be in any language. (6b6de48)Code reorganization, thanks
@fearphage! (7880050)Added
- Option in all relevant methods for
encoding. For those few users that might be depending on abinaryencoding of the messages, this is for them. (6b6de48)
This version was pushed to npm by julien.wollscheid, a new releaser for jws since your current version.
Sourced from jws's releases.
v3.2.3
Changed
- Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key) when using HMAC algorithms.
- Upgrading JWA version to 1.4.2, addressing a compatibility issue for Node >= 25.
Sourced from jws's changelog.
[3.2.3]
Changed
- Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key) when using HMAC algorithms.
- Upgrading JWA version to 1.4.2, adressing a compatibility issue for Node >= 25.
[3.0.0]
Changed
- BREAKING:
jwt.verifynow requires analgorithmparameter, andjws.createVerifyrequires analgorithmoption. The"alg"field signature headers is ignored. This mitigates a critical security flaw in the library which would allow an attacker to generate signatures with arbitrary contents that would be accepted byjwt.verify. See https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ for details.2.0.0 - 2015-01-30
Changed
BREAKING: Default payload encoding changed from
binarytoutf8.utf8is a is a more sensible default thanbinarybecause many payloads, as far as I can tell, will contain user-facing strings that could be in any language. (6b6de48)Code reorganization, thanks
@fearphage! (7880050)Added
- Option in all relevant methods for
encoding. For those few users that might be depending on abinaryencoding of the messages, this is for them. (6b6de48)
This version was pushed to npm by julien.wollscheid, a new releaser for jws since your current version.
Sourced from actions/upload-artifact's releases.
v6.0.0
v6 - What's new
[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (
runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
- Upload Artifact Node 24 support by
@salmanmkcin actions/upload-artifact#719- fix: update
@actions/artifactfor Node.js 24 punycode deprecation by@salmanmkcin actions/upload-artifact#744- prepare release v6.0.0 for Node.js 24 support by
@salmanmkcin actions/upload-artifact#745Full Changelog: https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0
b7c566a
Merge pull request #745
from actions/upload-artifact-v6-releasee516bc8
docs: correct description of Node.js 24 support in READMEddc45ed
docs: update README to correct action name for Node.js 24 support615b319
chore: release v6.0.0 for Node.js 24 support017748b
Merge pull request #744
from actions/fix-storage-blob38d4c79
chore: rebuild dist7d27270
chore: add missing license cache files for @actions/core,
@actions/io, and mi...5f643d3
chore: update license files for @actions/artifact@5.0.1 dependencies1df1684
chore: update package-lock.json with @actions/artifact@5.0.1b5b1a91
fix: update @actions/artifact to ^5.0.0 for Node.js 24
punycode fixSourced from dessant/lock-threads's releases.
v6.0.0
Learn more about this release from the changelog.
Sourced from dessant/lock-threads's changelog.
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
6.0.0 (2025-12-12)
⚠ BREAKING CHANGES
- the action now requires Node.js 24
Bug Fixes
- update dependencies (6548363)
5.0.1 (2023-11-22)
Bug Fixes
5.0.0 (2023-11-14)
⚠ BREAKING CHANGES
- Discussions are also processed by default, set the
process-onlyinput parameter to preserve the old behaviorsteps: - uses: dessant/lock-threads@v5 with: process-only: 'issues, prs'
- the action now requires Node.js 20
Features
Bug Fixes
- update dependencies (5a25b54)
4.0.1 (2023-06-12)
... (truncated)
Sourced from actions/upload-artifact's releases.
v6.0.0
v6 - What's new
[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (
runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
- Upload Artifact Node 24 support by
@salmanmkcin actions/upload-artifact#719- fix: update
@actions/artifactfor Node.js 24 punycode deprecation by@salmanmkcin actions/upload-artifact#744- prepare release v6.0.0 for Node.js 24 support by
@salmanmkcin actions/upload-artifact#745Full Changelog: https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0
b7c566a
Merge pull request #745
from actions/upload-artifact-v6-releasee516bc8
docs: correct description of Node.js 24 support in READMEddc45ed
docs: update README to correct action name for Node.js 24 support615b319
chore: release v6.0.0 for Node.js 24 support017748b
Merge pull request #744
from actions/fix-storage-blob38d4c79
chore: rebuild dist7d27270
chore: add missing license cache files for @actions/core,
@actions/io, and mi...5f643d3
chore: update license files for @actions/artifact@5.0.1 dependencies1df1684
chore: update package-lock.json with @actions/artifact@5.0.1b5b1a91
fix: update @actions/artifact to ^5.0.0 for Node.js 24
punycode fixSourced from qs's changelog.
6.14.1
- [Fix] ensure arrayLength applies to
[]notation as well- [Fix]
parse: when a custom decoder returnsnullfor a key, ignore that key- [Refactor]
parse: extract key segment splitting helper- [meta] add threat model
- [actions] add workflow permissions
- [Tests]
stringify: increase coverage- [Dev Deps] update
eslint,@ljharb/eslint-config,npmignore,es-value-fixtures,for-each,object-inspect6.14.0
- [New]
parse: addthrowOnParameterLimitExceededoption (#517)- [Refactor]
parse: useutils.combinemore- [patch]
parse: add explicitthrowOnLimitExceededdefault- [actions] use shared action; re-add finishers
- [meta] Fix changelog formatting bug
- [Deps] update
side-channel- [Dev Deps] update
es-value-fixtures,has-bigints,has-proto,has-symbols- [Tests] increase coverage
6.13.1
- [Fix]
stringify: avoid a crash when afilterkey isnull- [Fix]
utils.merge: functions should not be stringified into keys- [Fix]
parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset- [Fix]
stringify: ensure a non-stringfilterdoes not crash- [Refactor] use
__proto__syntax instead ofObject.createfor null objects- [Refactor] misc cleanup
- [Tests]
utils.merge: add some coverage- [Tests] fix a test case
- [actions] split out node 10-20, and 20+
- [Dev Deps] update
es-value-fixtures,mock-property,object-inspect,tape6.13.0
- [New]
parse: addstrictDepthoption (#511)- [Tests] use
npm auditinstead ofaud6.12.3
- [Fix]
parse: properly account forstrictNullHandlingwhenallowEmptyArrays- [meta] fix changelog indentation
6.12.2
- [Fix]
parse: parse encoded square brackets (#506)- [readme] add CII best practices badge
3fa11a5
v6.14.1a626704
[Dev Deps] update npmignore3086902
[Fix] ensure arrayLength applies to [] notation as
wellfc7930e
[Dev Deps] update eslint,
@ljharb/eslint-config0b06aac
[Dev Deps] update @ljharb/eslint-config64951f6
[Refactor] parse: extract key segment splitting helpere1bd259
[Dev Deps] update @ljharb/eslint-configf4b3d39
[eslint] add eslint 9 optional peer dep6e94d95
[Dev Deps] update eslint,
@ljharb/eslint-config, npmignore973dc3c
[actions] add workflow permissions84e9028
Finalize36ed6f6
Merge pull request #521
from 2xB/fix520f6eee56
Rely on passthrough to designate a wrapper for its side effect.3c9510b
Prefer noop for degenerate behavior.a36bab9
Avoid if block.8dd2937
Decouple clear_after_fork from lru_cache and then compose.1da3f45
Add news fragment.a1c25d8
🧎♀️ Genuflect to the types.4e962a8
👹 Feed the hobgoblins (delint).6a30ab9
Allow initial currsize to be greater than one (as happens when running
the te...dec55b7
Bump main to v4.17.23 (#6088)19c9251
fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729
jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45
Prevent prototype pollution on baseUnset function4879a7a
doc: fix autoLink function, conversion of source links (#6056)9648f69
chore: remove yarn.lock file (#6053)dfa407d
ci: remove legacy configuration files (#6052)156e196
feat: add renovate setup (#6039)933e106
ci: add pipeline for Bun (#6023)072a807
docs: update links related to Open JS Foundation (#5968)