Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: pnpm/pnpm
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v7.1.2
Choose a base ref
...
head repository: pnpm/pnpm
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v7.1.3
Choose a head ref
  • 3 commits
  • 69 files changed
  • 2 contributors

Commits on May 20, 2022

  1. ci: renovate bot setting to pin actions to a full length commit SHA (#…

    …4768)
    
    - https://docs.renovatebot.com/modules/manager/github-actions/#additional-information
    
    - Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
    
    >Pin actions to a full length commit SHA
    
    >Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
    > Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository,
    > as they would need to generate a SHA-1 collision for a valid Git object payload.
    
    - https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
    - https://github.com/renovatebot/.github/blob/b0c3aa85ef2bb242580f20b02b380ca532b4ce17/default.json#L13
    naveensrinivasan authored May 20, 2022
    Configuration menu
    Copy the full SHA
    35a730a View commit details
    Browse the repository at this point in the history

Commits on May 22, 2022

  1. Configuration menu
    Copy the full SHA
    190f0b3 View commit details
    Browse the repository at this point in the history
  2. chore(release): 7.1.3

    zkochan committed May 22, 2022
    Configuration menu
    Copy the full SHA
    24f936b View commit details
    Browse the repository at this point in the history
Loading