Skip to content

chore: Cherry-picked changes from upstream - #32

Merged
Raj-StepSecurity merged 5 commits into
mainfrom
auto-cherry-pick
Apr 27, 2026
Merged

chore: Cherry-picked changes from upstream#32
Raj-StepSecurity merged 5 commits into
mainfrom
auto-cherry-pick

Conversation

@github-actions

@github-actions github-actions Bot commented Apr 27, 2026

Copy link
Copy Markdown
Contributor

Cherry-picked changes from upstream.

github-actions Bot added 2 commits April 27, 2026 07:13
@github-actions
APP-1824 - Upgrade jfrog-cli to 2.91.0 (#322)
ba3708a
@github-actions
chore: update to node 24 (#328)
632dddb 
* chore: update to node 24

Signed-off-by: Matthew Greenwald <mdgreenwald@gmail.com>

* ci: ran npm format

Signed-off-by: Matthew Greenwald <mdgreenwald@gmail.com>

* ci: adding permissions to cla.yml

Signed-off-by: Matthew Greenwald <mdgreenwald@gmail.com>

---------

Signed-off-by: Matthew Greenwald <mdgreenwald@gmail.com>
@github-actions

github-actions Bot commented Apr 27, 2026

Copy link
Copy Markdown
Contributor Author

🚀 PR Updated!

The PR has been updated with the latest cherry-picked commits.

@step-security/maintained-actions-dev Please review and approve the changes.

📦 Target Release Version: v5.0.0
📋 Previous Release Version: v4.9.1

⚠️ Completely Skipped Commits Due to only modifying files in: package.json, package-lock.json, yarn.lock, node_modules/, dist/, or .gitignore

  • 86dacb6974c66cc99e7651e1205f6581aaddba9a
  • 1641575d87647fb969c0545f0b6a76873e328b7c

🛑 Workflow Files (Cannot be auto-applied by GitHub Actions):

  • .github/workflows/test.yml from commit d8e2d25a78d00ee41f6c596937da8f8a29c518e8
  • .github/workflows/auto-build-publish.yml from commit 0f6e5a3051724bc6085c79126736b43d40407233
  • .github/workflows/cla.yml from commit 0f6e5a3051724bc6085c79126736b43d40407233
  • .github/workflows/oidc-integration-test.yml from commit 0f6e5a3051724bc6085c79126736b43d40407233
  • .github/workflows/release.yml from commit 0f6e5a3051724bc6085c79126736b43d40407233
  • .github/workflows/test.yml from commit 0f6e5a3051724bc6085c79126736b43d40407233
  • .github/workflows/release.yml from commit b14f2d45ff4f61644304113a5f595c29d85002a8

❌ Conflicting Files:

  • action.yml from commit 0f6e5a3051724bc6085c79126736b43d40407233

@github-actions

github-actions Bot commented Apr 27, 2026

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v4.9.1...v5.0.0

📋 File-by-File Analysis:

.github/workflows/auto-build-publish.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/cla.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 6 additions, 0 deletions)

.github/workflows/oidc-integration-test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 4 additions, 1 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - ❌ No PR patch available (+4 -4)

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+2 -2) | Missing 1 additions | Missing 1 deletions

src/utils.ts

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

📊 Summary:

  • Total files changed upstream: 7
  • Files present in PR: 2/7
  • Files with matching changes: 1/7

❌ Overall Status: 🔴 INCOMPLETE - Missing files or changes

@github-actions

github-actions Bot commented Apr 27, 2026

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v4.9.1...v5.0.0

📋 File-by-File Analysis:

.github/workflows/auto-build-publish.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/cla.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 6 additions, 0 deletions)

.github/workflows/oidc-integration-test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 4 additions, 1 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+4 -4) | Missing 3 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+2 -2) | Missing 1 additions | Missing 1 deletions

src/utils.ts

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

📊 Summary:

  • Total files changed upstream: 7
  • Files present in PR: 3/7
  • Files with matching changes: 1/7

❌ Overall Status: 🔴 INCOMPLETE - Missing files or changes

@github-actions

github-actions Bot commented Apr 27, 2026

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v4.9.1...v5.0.0

📋 File-by-File Analysis:

.github/workflows/auto-build-publish.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/cla.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 6 additions, 0 deletions)

.github/workflows/oidc-integration-test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 4 additions, 1 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+4 -4) | Missing 3 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+2 -2) | Missing 1 additions | Missing 1 deletions

src/utils.ts

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

📊 Summary:

  • Total files changed upstream: 7
  • Files present in PR: 3/7
  • Files with matching changes: 1/7

❌ Overall Status: 🔴 INCOMPLETE - Missing files or changes

amanstep
amanstep reviewed Apr 27, 2026
View reviewed changes
Comment thread action.yml Outdated

@amanstep amanstep Apr 27, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why not upgrade this to node24 as well ?

@Raj-StepSecurity Raj-StepSecurity Apr 27, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

addressed

@github-actions

github-actions Bot commented Apr 27, 2026

Copy link
Copy Markdown
Contributor Author

🔍 Cherry-Pick Verification Report

📦 Upstream Changes: v4.9.1...v5.0.0

📋 File-by-File Analysis:

.github/workflows/auto-build-publish.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/cla.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 6 additions, 0 deletions)

.github/workflows/oidc-integration-test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 1 additions, 1 deletions)

.github/workflows/release.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ❌ No
  • Status: 🔴 Missing - File missing in PR (upstream has 4 additions, 1 deletions)

.github/workflows/test.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ❌ No
  • Status: 🟡 Partial - ❌ Cherry-pick incomplete (+4 -4) | Missing 3 additions | Missing 3 deletions

action.yml

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

src/utils.ts

  • Upstream has changes: ✅ Yes
  • File exists in PR: ✅ Yes
  • Changes match: ✅ Yes
  • Status: 🟢 Perfect - ✅ All changes applied correctly (+2 -2)

📊 Summary:

  • Total files changed upstream: 7
  • Files present in PR: 3/7
  • Files with matching changes: 2/7

❌ Overall Status: 🔴 INCOMPLETE - Missing files or changes

@Raj-StepSecurity
Raj-StepSecurity merged commit e3e737b into main Apr 27, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Raj-StepSecurity Raj-StepSecurity Raj-StepSecurity left review comments
@amanstep amanstep amanstep approved these changes

Assignees

No one assigned

Labels

review-required

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Raj-StepSecurity @amanstep