Skip to content

fix: Upgrade diff to fix DoS vulnerabilities #11621

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
anthonyshew merged 3 commits into from
Feb 1, 2026
Merged

fix: Upgrade diff to fix DoS vulnerabilities #11621

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ff14305
fix: Pass secrets explicitly in canary workflow
anthonyshew Feb 1, 2026
d181ecd
Merge branch 'main' of https://github.com/vercel/turborepo into fix/c…
anthonyshew Feb 1, 2026
104c9da
fix: Upgrade diff to fix DoS vulnerabilities
anthonyshew Feb 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
fix: Pass secrets explicitly in canary workflow 
The release workflow now requires explicit secrets declarations.
Update the canary caller to pass them explicitly instead of using
`secrets: inherit`, which is also more secure as it only passes
the required secrets rather than all repository secrets.
  • Loading branch information
@anthonyshew
anthonyshew committed Feb 1, 2026
commit ff14305082b741ab1fb28fa6bebe121de63d00e3
5 changes: 4 additions & 1 deletion .github/workflows/turborepo-canary.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,10 @@ jobs:
with:
increment: prerelease
is-canary: true
secrets: inherit
secrets:
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
DOCS_ALIAS_FAILURE_SLACK_WEBHOOK_URL: ${{ secrets.DOCS_ALIAS_FAILURE_SLACK_WEBHOOK_URL }}

create-canary-pr:
name: "Open Canary Release PR"
Expand Down