Skip to content

chore: bump EndBug/add-and-commit from 10 to 11 - #620

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/EndBug/add-and-commit-11
Open

chore: bump EndBug/add-and-commit from 10 to 11#620
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/EndBug/add-and-commit-11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps EndBug/add-and-commit from 10 to 11.

Release notes

Sourced from EndBug/add-and-commit's releases.

v11.0.0

What's Changed

Full Changelog: EndBug/add-and-commit@v10.0.0...v11.0.0

Commits
  • 645ecc0 11.0.0
  • 06e788f fix: neutralize bidi and control chars in action logs (#763)
  • 68ec86a ci: pin actions-tagger and restrict release workflow permissions (#762)
  • f1bb0cc fix: do not report committed=true for empty commit SHA (#757)
  • ebc24bf fix: refuse unexpected gitlinks staged by git add (#761)
  • 75038f8 fix: reject unmatched quotes in matchGitArgs to prevent flag injection (#760)
  • d07c930 fix: reject -F/--file git args that can exfiltrate runner files (#759)
  • 0971289 fix: stop logging full git config (credential leak) (#758)
  • c38a33b fix: verify committed lib/ matches source in CI (#756)
  • b4a0134 fix: prevent git option injection via new_branch (#755)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/EndBug/add-and-commit-11 branch 4 times, most recently from afc0f3d to e859346 Compare August 14, 2026 15:56
Bumps [EndBug/add-and-commit](https://github.com/endbug/add-and-commit) from 10 to 11.
- [Release notes](https://github.com/endbug/add-and-commit/releases)
- [Commits](EndBug/add-and-commit@v10...v11)

---
updated-dependencies:
- dependency-name: EndBug/add-and-commit
  dependency-version: '11'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/EndBug/add-and-commit-11 branch from e859346 to ae93583 Compare August 14, 2026 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants