A new safe_output input is now available to prevent outputting unsafe filename characters (Enabled by default). This would escape characters in the filename that could be used for command injection.
[!NOTE]
This can be disabled by setting the safe_output to false this comes with a recommendation to store all outputs generated in an environment variable first before using them.
Example
...- name:Verify Changed filesuses:tj-actions/verify-changed-files@v16id:verify-changed-fileswith:safe_output:false# set to false because we are using an environment variable to store the output and avoid command injection.- name:List all changed tracked and untracked filesenv:FILES_CHANGED:${{ steps.verify-changed-files.outputs.changed_files }}run:| echo "Changed files: $FILES_CHANGED...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [tj-actions/verify-changed-files](https://github.com/tj-actions/verify-changed-files) | action | major | `v16` -> `v19` |
---
### Release Notes
<details>
<summary>tj-actions/verify-changed-files (tj-actions/verify-changed-files)</summary>
### [`v19`](https://github.com/tj-actions/verify-changed-files/releases/tag/v19)
[Compare Source](https://github.com/tj-actions/verify-changed-files/compare/v18...v19)
### Changes in v19.0.0
#### 🔥 🔥 BREAKING CHANGE 🔥 🔥
- Upgrade tj-actions/glob action to v21
#### What's Changed
- Upgraded to v18 by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/378
- chore(deps): update tj-actions/verify-changed-files action to v18 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/379
- chore(deps): update codacy/codacy-analysis-cli-action action to v4.4.0 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/380
- chore(deps): update peter-evans/create-pull-request action to v6.0.1 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/381
- chore(deps): update tj-actions/glob action to v21 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/382
**Full Changelog**: https://github.com/tj-actions/verify-changed-files/compare/v18...v19.0.0
***
### [`v18`](https://github.com/tj-actions/verify-changed-files/releases/tag/v18)
[Compare Source](https://github.com/tj-actions/verify-changed-files/compare/v17...v18)
### Changes in v18.0.0
#### 🔥 🔥 BREAKING CHANGE 🔥 🔥
- Upgrade tj-actions/glob action to v20 which upgrades Node.js to v20
#### What's Changed
- Upgraded to v17.1.0 by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/374
- chore(deps): update tj-actions/glob action to v20 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/375
- chore(deps): update peter-evans/create-pull-request action to v6 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/376
**Full Changelog**: https://github.com/tj-actions/verify-changed-files/compare/v17...v18.0.0
***
### [`v17`](https://github.com/tj-actions/verify-changed-files/releases/tag/v17)
[Compare Source](https://github.com/tj-actions/verify-changed-files/compare/v16...v17)
### Changes in v17.1.0
#### What's Changed
- Upgraded to v17.0.2 by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/364
- chore(deps): update tj-actions/glob action to v19 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/367
- feat: add support for running action within a subdirectory by [@​jackton1](https://github.com/jackton1) in https://github.com/tj-actions/verify-changed-files/pull/366
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/368
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/369
- feat: add support for matching non ascii characters by [@​jackton1](https://github.com/jackton1) in https://github.com/tj-actions/verify-changed-files/pull/371
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/373
**Full Changelog**: https://github.com/tj-actions/verify-changed-files/compare/v17...v17.1.0
***
### Changes in v17.0.2
#### What's Changed
- Upgraded to v17.0.1 by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/361
- chore(deps): update tj-actions/glob action to v18 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/363
- chore: update test by [@​jackton1](https://github.com/jackton1) in https://github.com/tj-actions/verify-changed-files/pull/362
**Full Changelog**: https://github.com/tj-actions/verify-changed-files/compare/v17...v17.0.2
***
### Changes in v17.0.1
#### What's Changed
- Upgraded to v17 by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/358
- chore(deps): update tj-actions/verify-changed-files action to v17 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/359
- fix: bug with adding separator to output by [@​jackton1](https://github.com/jackton1) in https://github.com/tj-actions/verify-changed-files/pull/360
**Full Changelog**: https://github.com/tj-actions/verify-changed-files/compare/v17...v17.0.1
***
### Changes in v17.0.0
#### 🔥 🔥 BREAKING CHANGE 🔥 🔥
A new `safe_output` input is now available to prevent outputting unsafe filename characters (Enabled by default). This would escape characters in the filename that could be used for command injection.
> \[!NOTE]
> This can be disabled by setting the `safe_output` to false this comes with a recommendation to store all outputs generated in an environment variable first before using them.
##### Example
```yaml
...
- name: Verify Changed files
uses: tj-actions/verify-changed-files@v16
id: verify-changed-files
with:
safe_output: false # set to false because we are using an environment variable to store the output and avoid command injection.
- name: List all changed tracked and untracked files
env:
FILES_CHANGED: ${{ steps.verify-changed-files.outputs.changed_files }}
run: |
echo "Changed files: $FILES_CHANGED
...
```
#### What's Changed
- Upgraded to v16.1.1 by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/343
- chore(deps): update actions/checkout action to v4.1.1 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/344
- Bump actions/checkout from 4.1.0 to 4.1.1 by [@​dependabot](https://github.com/dependabot) in https://github.com/tj-actions/verify-changed-files/pull/345
- chore(deps): update tj-actions/auto-doc action to v3.1.1 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/346
- chore(deps): update tj-actions/auto-doc action to v3.2.0 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/347
- chore(deps): update tj-actions/auto-doc action to v3.2.1 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/348
- chore(deps): update tj-actions/auto-doc action to v3.3.0 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/349
- chore(deps): update tj-actions/auto-doc action to v3.4.0 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/350
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/351
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/352
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/353
- chore(deps): update github/codeql-action action to v3 by [@​renovate](https://github.com/renovate) in https://github.com/tj-actions/verify-changed-files/pull/354
- Updated README.md by [@​tj-actions-bot](https://github.com/tj-actions-bot) in https://github.com/tj-actions/verify-changed-files/pull/355
- chore: update entrypoint.sh by [@​jackton1](https://github.com/jackton1) in https://github.com/tj-actions/verify-changed-files/pull/357
**Full Changelog**: https://github.com/tj-actions/verify-changed-files/compare/v16...v17.0.0
***
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNDYuMSIsInVwZGF0ZWRJblZlciI6IjM3LjI0Ni4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v16->v19Release Notes
tj-actions/verify-changed-files (tj-actions/verify-changed-files)
v19Compare Source
Changes in v19.0.0
🔥 🔥 BREAKING CHANGE 🔥 🔥
What's Changed
Full Changelog: https://github.com/tj-actions/verify-changed-files/compare/v18...v19.0.0
v18Compare Source
Changes in v18.0.0
🔥 🔥 BREAKING CHANGE 🔥 🔥
What's Changed
Full Changelog: https://github.com/tj-actions/verify-changed-files/compare/v17...v18.0.0
v17Compare Source
Changes in v17.1.0
What's Changed
Full Changelog: https://github.com/tj-actions/verify-changed-files/compare/v17...v17.1.0
Changes in v17.0.2
What's Changed
Full Changelog: https://github.com/tj-actions/verify-changed-files/compare/v17...v17.0.2
Changes in v17.0.1
What's Changed
Full Changelog: https://github.com/tj-actions/verify-changed-files/compare/v17...v17.0.1
Changes in v17.0.0
🔥 🔥 BREAKING CHANGE 🔥 🔥
A new
safe_outputinput is now available to prevent outputting unsafe filename characters (Enabled by default). This would escape characters in the filename that could be used for command injection.Example
What's Changed
Full Changelog: https://github.com/tj-actions/verify-changed-files/compare/v16...v17.0.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.