-
Notifications
You must be signed in to change notification settings - Fork 3
rebase topic branch #49
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: feature/test2
Are you sure you want to change the base?
Changes from all commits
89c0990
71726fe
72cb387
be3ffce
00b7e8e
e3bcf8b
3abcfc7
6109869
d987d78
d325324
1c0f2d1
5d31b54
865b5ac
d20f5ae
c4f2ee7
411de3f
c1a840b
6f9d2df
e5c0828
3e1df04
1f5976d
5c29cb8
b3f7447
0191197
f80da68
0ac247d
174e68c
38b8215
e1b9f99
d24c9dc
532c056
29cef43
7da3f50
83ded17
4799f3b
0fa9124
9e3c5ac
c3f9ec5
7d31f4e
274ec09
97dc61f
5d4365c
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -0,0 +1,20 @@ | ||||||
| name: "CLA" | ||||||
|
|
||||||
| permissions: | ||||||
| contents: read | ||||||
| pull-requests: write | ||||||
| actions: write | ||||||
|
||||||
| actions: write |
Copilot
AI
Apr 16, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The workflow requests multiple write scopes. If the called reusable workflow doesn’t strictly require actions: write and statuses: write, drop them to follow least-privilege. Keeping only the minimal required permissions materially reduces the impact of any token misuse in pull_request_target / comment-trigger contexts.
| actions: write | |
| statuses: write |
Copilot
AI
Mar 1, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Using pull_request_target together with a PAT-like secret (CLA_ASSISTANT) is high risk because pull_request_target runs in the base-repo context and can expose secrets if any PR-controlled code is checked out or executed (even indirectly) by the called reusable workflow. Ensure the reusable workflow never runs PR code, or switch to a safer trigger/token model for CLA checks.
Copilot
AI
Mar 2, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This workflow runs on pull_request_target and passes a PAT-like secret (CLA_ASSISTANT) while granting multiple write permissions. Since pull_request_target executes in the base repo context, ensure the referenced reusable workflow cannot be influenced to run untrusted PR code (e.g., avoid checking out PR head or executing scripts from the PR). If not strictly required, reduce permissions to the minimum needed and consider restricting triggers/conditions to trusted actors.
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
@@ -4,8 +4,149 @@ All notable changes to this project will be documented in this file. Dates are d | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Generated by [`auto-changelog`](https://github.com/CookPete/auto-changelog). | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| #### [4.13.0](https://github.com/rdkcentral/meta-oss-reference-release/compare/4.12.2...4.13.0) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - RDKE-1040: Update release notes for 4.13.0 [`#88`](https://github.com/rdkcentral/meta-oss-reference-release/pull/88) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - Update CODEOWNERS [`#87`](https://github.com/rdkcentral/meta-oss-reference-release/pull/87) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - Merge tag '4.12.0' into develop [`0fa9124`](https://github.com/rdkcentral/meta-oss-reference-release/commit/0fa912471d4bb121e2842a2c38fe0731146d99e9) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| #### [4.12.2](https://github.com/rdkcentral/meta-oss-reference-release/compare/4.12.0...4.12.2) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| > 3 April 2026 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - RDKOSS-820: OSS Release 4.12.2 [`7c2bf5c`](https://github.com/rdkcentral/meta-oss-reference-release/commit/7c2bf5c95a8fdb90b96bdac315c0e38da5d3001d) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - RDKOSS-820: Update changelog for Rel 4.12.2 [`4897cf7`](https://github.com/rdkcentral/meta-oss-reference-release/commit/4897cf7042360953888123e97ec60c367ddf490f) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| #### [4.12.0](https://github.com/rdkcentral/meta-oss-reference-release/compare/4.11.0...4.12.0) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| > 2 March 2026 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - RDKE-971: Updated Release note for 4.12.0 [`#82`](https://github.com/rdkcentral/meta-oss-reference-release/pull/82) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - RDKE-971: Update Changelog for Rel 4.12.0 [`83ded17`](https://github.com/rdkcentral/meta-oss-reference-release/commit/83ded1759561d7b53a8e46c7439e70ca8c6b525f) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - Merge tag '4.11.0' into develop [`532c056`](https://github.com/rdkcentral/meta-oss-reference-release/commit/532c056219d284121627834cdf90fe36418431ed) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| #### [4.11.0](https://github.com/rdkcentral/meta-oss-reference-release/compare/4.10.1...4.11.0) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| > 27 February 2026 |
Copilot
AI
Mar 1, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Typo in changelog entry: "assigment" should be "assignment" (appears multiple times in this new release section).
| - RDKCOM-5437, RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) | |
| - RDKCOM-5437, RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) |
Copilot
AI
Mar 2, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Spelling: "assigment" should be "assignment".
| - RDKCOM-5437, RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - RDKE-899: Update changelog for Rel 4.10.0 [`0191197`](https://github.com/rdkcentral/meta-oss-reference-release/commit/01911972f7a9063942ea8e180d4c05152232e397) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) | |
| - RDKCOM-5437, RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - RDKE-899: Update changelog for Rel 4.10.0 [`0191197`](https://github.com/rdkcentral/meta-oss-reference-release/commit/01911972f7a9063942ea8e180d4c05152232e397) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) |
Copilot
AI
Mar 2, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Spelling: "assigment" should be "assignment".
| - RDKCOM-5437, RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - RDKE-899: Update changelog for Rel 4.10.0 [`0191197`](https://github.com/rdkcentral/meta-oss-reference-release/commit/01911972f7a9063942ea8e180d4c05152232e397) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) | |
| - RDKCOM-5437, RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - RDKE-899: Update changelog for Rel 4.10.0 [`0191197`](https://github.com/rdkcentral/meta-oss-reference-release/commit/01911972f7a9063942ea8e180d4c05152232e397) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) |
Copilot
AI
Apr 16, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Correct spelling of 'assigment' to 'assignment'.
| - RDKCOM-5437, RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - RDKE-899: Update changelog for Rel 4.10.0 [`0191197`](https://github.com/rdkcentral/meta-oss-reference-release/commit/01911972f7a9063942ea8e180d4c05152232e397) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assigment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) | |
| - RDKCOM-5437, RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`#47`](https://github.com/rdkcentral/meta-oss-reference-release/pull/47) | |
| - Update CODEOWNERS [`#73`](https://github.com/rdkcentral/meta-oss-reference-release/pull/73) | |
| - RDKE-899: Update changelog for Rel 4.10.0 [`0191197`](https://github.com/rdkcentral/meta-oss-reference-release/commit/01911972f7a9063942ea8e180d4c05152232e397) | |
| - Merge tag '4.9.0' into develop [`6f9d2df`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6f9d2df82f9cfaf5cab200bb39b2a63c77259cec) | |
| - RDKDEV-1130: Weak assignment of REL_OSS_IPK_SERVER_PATH [`6109869`](https://github.com/rdkcentral/meta-oss-reference-release/commit/6109869e439fc23150954e0a37d0bfc6f381ab69) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The PR title suggests only a rebase, but the diff includes functional/config changes (feed logic + CVE feed), documentation version bumps, and new GitHub workflow/CODEOWNERS updates. Consider updating the PR title/description to reflect the actual scope so reviewers and release tooling have accurate context.