0.31.0
Release Summary
Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.
Internal: documentation for actions and workflows has been refreshed.
Breaking change(s)
The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.
What's Changed
- docs: update actions and workflows documentation by @hoverkraft-bot[bot] in #424
- fix(checkout)!: set persist-credentials to false by default for security reason by @neilime in #425
- docs: update actions and workflows documentation by @hoverkraft-bot[bot] in #426
- feat: add local-workflow-actions action by @neilime in #427
- docs: update actions and workflows documentation by @hoverkraft-bot[bot] in #430
Full Changelog: 0.30.2...0.31.0