All pull requests

Pull requests

• Preserve the pre-step exit code so setFailed still fails the step

  #694·arpitjain099 opened Sep 11, 2026·

  ·

• fix(deps): bump brace-expansion, fast-xml-parser, js-yaml, browserslist, fast-uri to patch disclosed CVEs

  #693·Svector-anu opened Sep 4, 2026·

  ·

• fix: correct stale version comments on five SHA-pinned actions

  #691·crimsondhakx opened Sep 3, 2026·

  ·

• feat: add exempt-files input for source code overwrite detection

  #678·hemantkumar-dev opened Jul 25, 2026·

  ·
  1

  2

• docs: document api-key fallback behavior

  #671·Thinking-builder opened Jun 4, 2026·

  ·
  1

• feat: support # comments in allowed-endpoints input

  #668·vincentayorinde opened May 31, 2026·

  ·
  1

• refactor: improve log output in cleanup functions

  #663·rohan-stepsecurity opened May 11, 2026Member·

  ·

• docs: add rollout guidance for egress policies

  #662·musaabhasan opened May 6, 2026·

  ·

• Tanker187 patch 7

  #649·Tanker187 opened Mar 17, 2026·

  ·

• Tanker187 patch 2

  #648·Tanker187 opened Mar 14, 2026·

  ·

• Add a link to incidents page

  #647·eromosele-stepsecurity opened Mar 12, 2026Contributor·

  ·

• Update pre-commit hooks to newer versions

  #645·mosfet80 opened Mar 11, 2026·

  ·

• Bump fast-xml-parser from 5.0.9 to 5.3.4

  dependenciesjavascript
  #633·dependabot[bot] opened Jan 30, 2026Bot·

  ·
  1

• Bump github/codeql-action from 3.25.13 to 4.31.9

  dependenciesgithub_actions
  #625·dependabot[bot] opened Dec 16, 2025Bot·

  ·
  1

• Bump codecov/codecov-action from 3.1.4 to 5.5.2

  dependenciesgithub_actions
  #623·dependabot[bot] opened Dec 9, 2025Bot·

  ·
  1

• Add GitHub Actions workflow for NodeJS with Gulp

  #618·Kelleretoro opened Dec 1, 2025·

  ·
  7

• Bump step-security/publish-unit-test-result-action from 2.20.0 to 2.21.1

  dependenciesgithub_actions
  #616·dependabot[bot] opened Nov 27, 2025Bot·

  ·
  1

• Bump actions/checkout from 3 to 6

  dependenciesgithub_actions
  #613·dependabot[bot] opened Nov 20, 2025Bot·

  ·
  1

• Bump js-yaml from 3.14.1 to 3.14.2

  dependenciesjavascript
  #610·dependabot[bot] opened Nov 17, 2025Bot·

  ·
  1

• Bump actions/dependency-review-action from 4.3.2 to 4.8.2

  dependenciesgithub_actions
  #607·dependabot[bot] opened Nov 10, 2025Bot·

  ·
  1

• Bump ossf/scorecard-action from 2.4.0 to 2.4.3

  dependenciesgithub_actions
  #596·dependabot[bot] opened Sep 30, 2025Bot·

  ·
  1

• ci: apply security best practices

  #575·stepsecurity-int[bot] opened Aug 10, 2025Bot·

  ·
  1

• Bump form-data from 2.5.1 to 2.5.5

  dependenciesjavascript
  #568·dependabot[bot] opened Jul 22, 2025Bot·

  ·
  1

• Bump brace-expansion from 1.1.11 to 1.1.12

  dependenciesjavascript
  #557·dependabot[bot] opened Jun 12, 2025Bot·

  ·
  1

• ci: apply security best practices

  #554·stepsecurity-int[bot] opened Jun 5, 2025Bot·

  ·
  2