v1.26.2-beta.2

Merge pull request #242 from LerianStudio/chore/pin-internal-composit…

v1.26.2-beta.1

Merge pull request #241 from LerianStudio/fix/cosign-sign-retry-expon…

v1.26.1

Github-actions-shared-workflows v1.26.1

• Fixes:
  • Addressed CodeQL medium findings to improve security.
  • Renamed deprecated app-id input to client-id to align with updated standards.
  • Filtered dismissed and fixed alerts from PR comments in the CodeQL reporter.
  • Enforced composite vs reusable pinning policy for pinned actions.

Contributors: @bedatty, @lerian-studio

Compare changes

v1.26.1-beta.8

fix(update-major-tag): freeze lease from local ref snapshot after fet…

v1.26.1-beta.7

fix(update-major-tag): use --force-with-lease to guard against concur…

v1.26.1-beta.6

fix(workflows): address codeql medium findings (#234)

* fix(workflows): address codeql medium findings on release and helm workflows

* fix(helm-update-chart): avoid untrusted-checkout pattern by switching branch after checkout

* docs(helm-update-chart): sync base_branch description with allowlist and actual default

* fix(helm-update-chart): reset base branch to fresh remote tracking ref

* fix(helm-update-chart): add workflow-level least-privilege permissions

v1.26.1-beta.5

chore(deps): bump slackapi/slack-github-action from 1.24.0 to 2.1.1 i…

v1.26.1-beta.4

fix(actions): rename deprecated app-id input to client-id (#228)

v1.26.1-beta.3

fix(self-release): force-update floating major tag on stable release …

v1.26.1-beta.2

fix(codeql-reporter): filter dismissed and fixed alerts from PR comment