Compare commits

...

3 Commits

Author SHA1 Message Date
renovate[bot]
6c84c6009f
Merge f4b38b9891 into ce7b7612ae 2026-03-06 10:47:39 +01:00
Marco Nenciarini
ce7b7612ae
fix(security): harden GitHub Actions workflows against expression injection (#773)
Some checks failed
release-please / release-please (push) Failing after 3s
Move `${{ }}` expressions from `run:` blocks into step-level `env:`
blocks, then reference them as properly-quoted shell variables.

Part of cloudnative-pg/cloudnative-pg#10113

Assisted-by: Claude Opus 4.6

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
2026-03-06 10:37:54 +01:00
renovate[bot]
f4b38b9891
fix(deps): update all non-major go dependencies
| datasource | package                              | from    | to      |
| ---------- | ------------------------------------ | ------- | ------- |
| go         | github.com/cert-manager/cert-manager | v1.19.2 | v1.19.3 |
| go         | github.com/elastic/crd-ref-docs      | v0.2.0  | v0.3.0  |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-02 14:56:59 +00:00

View File

@ -51,10 +51,12 @@ jobs:
# We use a GitHub token with write permissions to create the release, # We use a GitHub token with write permissions to create the release,
# otherwise we won't be able to trigger a new run when pushing on main. # otherwise we won't be able to trigger a new run when pushing on main.
- name: Run release-please - name: Run release-please
env:
REPO_URL: ${{ github.repository }}
run: | run: |
npx release-please release-pr \ npx release-please release-pr \
--token="${{ secrets.REPO_PAT }}" \ --token="${{ secrets.REPO_PAT }}" \
--repo-url="${{ github.repository }}" --repo-url="${REPO_URL}"
npx release-please github-release \ npx release-please github-release \
--token="${{ secrets.REPO_PAT }}" \ --token="${{ secrets.REPO_PAT }}" \
--repo-url="${{ github.repository }}" --repo-url="${REPO_URL}"