diff --git a/CHANGELOG.md b/CHANGELOG.md index d6d3167e..a2e98975 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,8 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com ## [Unreleased] +## [2.73.0] - 2026-04-05 + - Introduce [dependency cooldown](https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns) when installing with `taiki-e/install-action@`, `tool: @latest`, or `tool: @` to mitigate the risk of supply chain attacks by default. ([#1666](https://github.com/taiki-e/install-action/pull/1666)) This action without this cooldown already takes a few hours to a few days for new releases to be reflected (as with other common package managers that verify checksums or signatures), so this should not affect most users. @@ -6145,7 +6147,8 @@ Note: This release is considered a breaking change because installing on version Initial release -[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.72.0...HEAD +[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.73.0...HEAD +[2.73.0]: https://github.com/taiki-e/install-action/compare/v2.72.0...v2.73.0 [2.72.0]: https://github.com/taiki-e/install-action/compare/v2.71.3...v2.72.0 [2.71.3]: https://github.com/taiki-e/install-action/compare/v2.71.2...v2.71.3 [2.71.2]: https://github.com/taiki-e/install-action/compare/v2.71.1...v2.71.2