Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
50 commits
Select commit Hold shift + click to select a range
640e8a3
fix: apply audit fixes
github-actions[bot] Nov 17, 2025
08d705b
Merge pull request #189 from step-security/yarn-audit-fix
Raj-StepSecurity Nov 19, 2025
775b744
fix: apply audit fixes
github-actions[bot] Nov 24, 2025
143be3f
Merge pull request #193 from step-security/yarn-audit-fix
Raj-StepSecurity Nov 24, 2025
c31de42
docs: update link to glob patterns (#2590)
github-actions[bot] Dec 21, 2025
f569a24
Updated README.md (#2591)
github-actions[bot] Dec 21, 2025
453934f
feat: add any_added to outputs (#2567)
github-actions[bot] Dec 21, 2025
7b0f185
feat: add any_added to outputs (#2567)
github-actions[bot] Dec 21, 2025
3a15bf0
Updated README.md (#2592)
github-actions[bot] Dec 21, 2025
4eb1ee7
test: manual triggered workflows (#2637)
github-actions[bot] Dec 21, 2025
984bb30
Update auto_cherry_pick.yml
Raj-StepSecurity Jan 5, 2026
720a641
Merge pull request #196 from step-security/Raj-StepSecurity-patch-3
Raj-StepSecurity Jan 5, 2026
8a81b1d
chore(deps-dev): bump jest from 30.0.5 to 30.1.3 (#2655)
github-actions[bot] Dec 21, 2025
cde0d14
upgrade: to node24 (#2662)
github-actions[bot] Dec 21, 2025
caa9770
upgrade: to node24 (#2662)
github-actions[bot] Dec 21, 2025
92609d7
fix: apply code build script
github-actions[bot] Dec 21, 2025
c21c8c5
fix: apply code build script
github-actions[bot] Dec 21, 2025
a1156cc
Merge branch 'main' into auto-cherry-pick
Raj-StepSecurity Jan 5, 2026
02a3053
Update auto_cherry_pick.yml
Raj-StepSecurity Jan 6, 2026
a08b0f0
test upgraded to node24
Raj-StepSecurity Jan 12, 2026
60967b8
Merge pull request #195 from step-security/auto-cherry-pick
Raj-StepSecurity Jan 12, 2026
d87454e
fix: apply audit fixes
github-actions[bot] Jan 26, 2026
2537ad5
Merge pull request #197 from step-security/yarn-audit-fix
Raj-StepSecurity Jan 27, 2026
95756e9
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
8d83512
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
62772e5
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
f047164
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
6e36aa0
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
5358c0d
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
2b2ab78
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
315e517
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
8bcf505
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
7acf4e3
feat: add support for excluding symlinks and fix bug with commit not …
github-actions[bot] Feb 24, 2026
792dd6c
Updated README.md (#2771)
github-actions[bot] Feb 24, 2026
54024cf
fix: apply code build script
github-actions[bot] Feb 24, 2026
2884847
fix: apply code build script
github-actions[bot] Feb 24, 2026
d9094ca
conflicated commits cherry-picked
Raj-StepSecurity Feb 24, 2026
5c7f8b3
Merge pull request #199 from step-security/auto-cherry-pick
Raj-StepSecurity Mar 2, 2026
37a098f
fix: apply audit fixes
github-actions[bot] Mar 9, 2026
0bb80d0
Merge pull request #201 from step-security/yarn-audit-fix
Raj-StepSecurity Mar 9, 2026
57a2c40
fix: apply audit fixes
github-actions[bot] Mar 16, 2026
05b2e46
Merge pull request #202 from step-security/yarn-audit-fix
Raj-StepSecurity Mar 16, 2026
0488bac
fix: apply audit fixes
github-actions[bot] Mar 23, 2026
e332b00
Merge pull request #203 from step-security/yarn-audit-fix
Raj-StepSecurity Mar 23, 2026
e85e3f8
fix: apply audit fixes
github-actions[bot] Mar 30, 2026
acfdd74
Merge pull request #204 from step-security/yarn-audit-fix
Raj-StepSecurity Mar 30, 2026
9d26a83
fix: apply audit fixes
github-actions[bot] Apr 6, 2026
2e07db7
Merge pull request #205 from step-security/yarn-audit-fix
Raj-StepSecurity Apr 6, 2026
587012f
Create osv-scanner.toml
Raj-StepSecurity Apr 8, 2026
6fcdc3f
Merge pull request #206 from step-security/Raj-StepSecurity-patch-4
Raj-StepSecurity Apr 8, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 12 additions & 3 deletions .github/workflows/auto_cherry_pick.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,13 @@ on:
description: "Specify a script to run after audit fix"
required: false
default: "yarn run all"
mode:
description: "Run mode: cherry-pick or verify"
required: false
default: "cherry-pick"

pull_request:
types: [labeled, opened, synchronize]

permissions:
contents: write
Expand All @@ -24,11 +31,13 @@ permissions:
issues: write

jobs:
audit-fix:
uses: step-security/reusable-workflows/.github/workflows/auto_cherry_pick.yaml@upstream-Changes-CherryPick
cherry-pick:
if: github.event_name == 'workflow_dispatch' || contains(fromJson(toJson(github.event.pull_request.labels)).*.name, 'review-required')
uses: step-security/reusable-workflows/.github/workflows/auto_cherry_pick.yaml@v1
with:
original-owner: "tj-actions"
repo-name: "changed-files"
base_branch: ${{ inputs.base_branch }}
package_manager: "yarn"
script: ${{ inputs.script || 'yarn run all' }}
script: ${{ inputs.script || 'yarn run all' }}
mode: ${{ github.event_name == 'pull_request' && 'verify' || inputs.mode }}
13 changes: 13 additions & 0 deletions .github/workflows/matrix-example.yml
Original file line number Diff line number Diff line change
Expand Up @@ -53,3 +53,16 @@ jobs:
- name: Test
run: |
echo ${{ matrix.files }}

conditional-job:
name: Run Conditional Job
runs-on: ubuntu-latest
needs: [changed-files]
if: contains(needs.changed-files.outputs.matrix, 'README.md') # Conditional check for README
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Execute Conditional Logic
run: |
echo "README.md has been changed. Running conditional job."

4 changes: 2 additions & 2 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -49,11 +49,11 @@ jobs:
fetch-depth: 0
repository: ${{ github.event.pull_request.head.repo.full_name }}

- name: Use Node.js 20.x
- name: Use Node.js 24.x
uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
with:
cache: 'yarn'
node-version: '20.x'
node-version: '24.x'

- name: Create coverage directory and clover.xml
run: |
Expand Down
2 changes: 1 addition & 1 deletion .nvmrc
Original file line number Diff line number Diff line change
@@ -1 +1 @@
20
24
14 changes: 13 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ Effortlessly track all changed files and directories relative to a target branch
* Between the last remote branch commit and the current HEAD.
* Restricts change detection to a subset of files and directories:
* Provides boolean output indicating changes in specific files.
* Uses [Glob pattern](https://codepen.io/mrmlnc/pen/OXQjMe) matching.
* Uses [Glob pattern](https://en.wikipedia.org/wiki/Glob_\(programming\)) matching.
* Supports Globstar.
* Supports brace expansion.
* Supports negation.
Expand Down Expand Up @@ -386,6 +386,11 @@ To access more examples, navigate to the [Examples](#examples-) section.
# Default: "false"
exclude_submodules: ''

# Exclude symlinks from changed files.
# Type: boolean
# Default: "false"
exclude_symlinks: ''

# Fail when the initial diff
# fails.
# Type: boolean
Expand Down Expand Up @@ -650,6 +655,12 @@ To access more examples, navigate to the [Examples](#examples-) section.
# Default: "false"
skip_initial_fetch: ''

# Do not fail when base
# and head SHAs are identical.
# Type: boolean
# Default: "false"
skip_same_sha: ''

# Tags pattern to ignore.
# Type: string
tags_ignore_pattern: ''
Expand Down Expand Up @@ -736,6 +747,7 @@ To access more examples, navigate to the [Examples](#examples-) section.
| <a name="output_all_modified_files_count"></a>[all\_modified\_files\_count](#output_all_modified_files_count) | string | Returns the number of `all_modified_files` |
| <a name="output_all_old_new_renamed_files"></a>[all\_old\_new\_renamed\_files](#output_all_old_new_renamed_files) | string | Returns only files that are <br>Renamed and lists their old <br>and new names. **NOTE:** This <br>requires setting `include_all_old_new_renamed_files` to `true`. <br>Also, keep in mind that <br>this output is global and <br>wouldn't be nested in outputs <br>generated when the `*_yaml_*` input <br>is used. (R) |
| <a name="output_all_old_new_renamed_files_count"></a>[all\_old\_new\_renamed\_files\_count](#output_all_old_new_renamed_files_count) | string | Returns the number of `all_old_new_renamed_files` |
| <a name="output_any_added"></a>[any\_added](#output_any_added) | string | Returns `true` when any of <br>the filenames provided using the <br>`files*` or `files_ignore*` inputs have been added. |
| <a name="output_any_changed"></a>[any\_changed](#output_any_changed) | string | Returns `true` when any of <br>the filenames provided using the <br>`files*` or `files_ignore*` inputs have changed. This <br>defaults to `true` when no <br>patterns are specified. i.e. *includes a combination of all added, copied, modified and renamed files (ACMR)*. |
| <a name="output_any_deleted"></a>[any\_deleted](#output_any_deleted) | string | Returns `true` when any of <br>the filenames provided using the <br>`files*` or `files_ignore*` inputs have been deleted. <br>This defaults to `true` when <br>no patterns are specified. (D) |
| <a name="output_any_modified"></a>[any\_modified](#output_any_modified) | string | Returns `true` when any of <br>the filenames provided using the <br>`files*` or `files_ignore*` inputs have been modified. <br>This defaults to `true` when <br>no patterns are specified. i.e. <br>*includes a combination of all added, copied, modified, renamed, and deleted files (ACMRD)*. |
Expand Down
12 changes: 11 additions & 1 deletion action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -227,6 +227,14 @@ inputs:
description: "Exclude changes to submodules."
required: false
default: "false"
exclude_symlinks:
description: "Exclude symlinks from changed files."
required: false
default: "false"
skip_same_sha:
description: "Do not fail when base and head SHAs are identical."
required: false
default: "false"
fetch_missing_history_max_retries:
description: "Maximum number of retries to fetch missing history."
required: false
Expand All @@ -250,6 +258,8 @@ outputs:
description: "Returns only files that are Added (A)."
added_files_count:
description: "Returns the number of `added_files`"
any_added:
description: "Returns `true` when any of the filenames provided using the `files*` or `files_ignore*` inputs have been added."
copied_files:
description: "Returns only files that are Copied (C)."
copied_files_count:
Expand Down Expand Up @@ -324,7 +334,7 @@ outputs:
description: "Returns all changed YAML keys when the `files_yaml` input is used. i.e. key that contains any path that has either been added, copied, modified, and renamed (ACMR)"

runs:
using: 'node20'
using: 'node24'
main: 'dist/index.js'

branding:
Expand Down
Loading
Loading