Update contributors-readme-action version #63
Conversation
Signed-off-by: Jorge C. <[email protected]>
There was a problem hiding this comment.
Pull Request Overview
This PR updates the contributors-readme-action GitHub Action from a pinned patch version (v2.5.8) to a floating major version (v2). This change allows the workflow to automatically receive minor and patch updates within version 2.x, ensuring access to bug fixes and new features without manual version bumps.
- Updated action version reference from
v2.5.8tov2
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
|
||
| - name: Update contributors section in README | ||
| uses: akhilmhdh/contributors-readme-action@v2.5.8 | ||
| uses: akhilmhdh/contributors-readme-action@v2 |
There was a problem hiding this comment.
Switching from a pinned version (v2.5.8) to a floating major version (v2) introduces security and stability risks. The workflow will automatically pull the latest v2.x version, which could include breaking changes within minor versions or unvetted code. Consider using a commit SHA for maximum security (e.g., @abc123...) or at minimum pin to a specific minor version (e.g., @v2.5) to balance security with updates.
| uses: akhilmhdh/contributors-readme-action@v2 | |
| uses: akhilmhdh/contributors-readme-action@v2.5.8 |
This pull request updates the GitHub Action used to maintain the contributors section in the README. The action version was changed from a specific patch release (
v2.5.8) to the more general major version (v2), which allows for automatic updates to the latest minor and patch releases within major version 2.