mirror of
https://github.com/taiki-e/install-action.git
synced 2026-04-21 15:10:27 +00:00
Release 2.73.0
This commit is contained in:
@@ -10,6 +10,8 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
|
||||
|
||||
## [Unreleased]
|
||||
|
||||
## [2.73.0] - 2026-04-05
|
||||
|
||||
- Introduce [dependency cooldown](https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns) when installing with `taiki-e/install-action@<tool_name>`, `tool: <tool_name>@latest`, or `tool: <tool_name>@<omitted_version>` to mitigate the risk of supply chain attacks by default. ([#1666](https://github.com/taiki-e/install-action/pull/1666))
|
||||
|
||||
This action without this cooldown already takes a few hours to a few days for new releases to be reflected (as with other common package managers that verify checksums or signatures), so this should not affect most users.
|
||||
@@ -6145,7 +6147,8 @@ Note: This release is considered a breaking change because installing on version
|
||||
|
||||
Initial release
|
||||
|
||||
[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.72.0...HEAD
|
||||
[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.73.0...HEAD
|
||||
[2.73.0]: https://github.com/taiki-e/install-action/compare/v2.72.0...v2.73.0
|
||||
[2.72.0]: https://github.com/taiki-e/install-action/compare/v2.71.3...v2.72.0
|
||||
[2.71.3]: https://github.com/taiki-e/install-action/compare/v2.71.2...v2.71.3
|
||||
[2.71.2]: https://github.com/taiki-e/install-action/compare/v2.71.1...v2.71.2
|
||||
|
||||
Reference in New Issue
Block a user