a5be4722a6091c4e20293de271822a5532f23326
35 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
semantic-release-bot
|
67e27a7eb7 |
build(release): 1.11.3 [skip ci]
## [1.11.3](https://github.com/actions/create-github-app-token/compare/v1.11.2...v1.11.3) (2025-02-04) ### Bug Fixes * **deps:** bump the production-dependencies group with 3 updates ([#203](https://github.com/actions/create-github-app-token/issues/203)) ([ |
||
|
semantic-release-bot
|
136412a57a |
build(release): 1.11.2 [skip ci]
## [1.11.2](https://github.com/actions/create-github-app-token/compare/v1.11.1...v1.11.2) (2025-01-30) ### Bug Fixes * **deps:** bump @octokit/request from 9.1.3 to 9.1.4 in the production-dependencies group ([#196](https://github.com/actions/create-github-app-token/issues/196)) ([ |
||
|
semantic-release-bot
|
c1a285145b |
build(release): 1.11.1 [skip ci]
## [1.11.1](https://github.com/actions/create-github-app-token/compare/v1.11.0...v1.11.1) (2024-12-20) ### Bug Fixes * **deps:** bump the production-dependencies group across 1 directory with 3 updates ([#193](https://github.com/actions/create-github-app-token/issues/193)) ([ |
||
|
Parker Brown
|
25cc3bdc27 |
refactor: remove redundant API call (#175)
Combines the two installation requests (org and user) into one because
`/org/{org}` can also be accessed at `/users/{org}`.
---------
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
|
||
|
Peter Evans
|
796b88dc58 |
feat: allow repositories input to be comma or newline-separated (#169)
Resolves https://github.com/actions/create-github-app-token/issues/106 - Fixes the parsing to cope with whitespace in the input string. - Allows the input to be comma or newline-separated. (I've done this for all array-type inputs in my own actions, but I'm happy to remove this if you only want to support comma-separated.) - Added tests for parsing comma and newline-separated inputs. |
||
|
semantic-release-bot
|
3378cda945 |
build(release): 1.10.4 [skip ci]
## [1.10.4](https://github.com/actions/create-github-app-token/compare/v1.10.3...v1.10.4) (2024-09-04) ### Bug Fixes * **deps:** bump the production-dependencies group across 1 directory with 3 updates ([#166](https://github.com/actions/create-github-app-token/issues/166)) ([ |
||
|
dependabot[bot]
|
040c2598aa |
build(deps-dev): bump the development-dependencies group with 4 updates (#150)
Bumps the development-dependencies group with 4 updates: [c8](https://github.com/bcoe/c8), [esbuild](https://github.com/evanw/esbuild), [execa](https://github.com/sindresorhus/execa) and [yaml](https://github.com/eemeli/yaml). Updates `c8` from 9.1.0 to 10.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bcoe/c8/releases">c8's releases</a>.</em></p> <blockquote> <h2>v10.1.2</h2> <h2><a href="https://github.com/bcoe/c8/compare/v10.1.1...v10.1.2">10.1.2</a> (2024-06-13)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> make monocart-coverage-reports an optional with meta defined (<a href=" |
||
|
semantic-release-bot
|
31c86eb3b3 |
build(release): 1.10.3 [skip ci]
## [1.10.3](https://github.com/actions/create-github-app-token/compare/v1.10.2...v1.10.3) (2024-07-01) ### Bug Fixes * **deps:** bump undici from 6.18.2 to 6.19.2 in the production-dependencies group ([#149](https://github.com/actions/create-github-app-token/issues/149)) ([ |
||
|
Wechuli
|
66a7045686 |
fix: do not revoke token if already expired (#147)
Closes #140 The pull request at #95 introduced changes to avoid revoking expired tokens by saving the `expiresAt` value in the state. The change, however, used `core.setOutput` instead of `core.setState` meaning the value is not saved in the state but rather available in the output. ```javascript if (!skipTokenRevoke) { core.saveState("token", authentication.token); core.setOutput("expiresAt", authentication.expiresAt); } ``` This means that when we use the value downstream, it evaluates to an empty string and the following code block is never run: ```javascript const expiresAt = core.getState("expiresAt"); if (expiresAt && tokenExpiresIn(expiresAt) < 0) { core.info("Token expired, skipping token revocation"); return; } ``` This is a tiny PR to correct that typo. |
||
|
semantic-release-bot
|
c8f55efbd4 |
build(release): 1.10.1 [skip ci]
## [1.10.1](https://github.com/actions/create-github-app-token/compare/v1.10.0...v1.10.1) (2024-06-03) ### Bug Fixes * **deps:** bump the production-dependencies group with 2 updates ([#138](https://github.com/actions/create-github-app-token/issues/138)) ([ |
||
|
semantic-release-bot
|
a0de6af839 |
build(release): 1.10.0 [skip ci]
# [1.10.0](https://github.com/actions/create-github-app-token/compare/v1.9.3...v1.10.0) (2024-05-01) ### Features * **`private-key`:** escaped newlines will be replaced ([#132](https://github.com/actions/create-github-app-token/issues/132)) ([ |
||
|
semantic-release-bot
|
7bfa3a4717 |
build(release): 1.9.3 [skip ci]
## [1.9.3](https://github.com/actions/create-github-app-token/compare/v1.9.2...v1.9.3) (2024-04-04) ### Bug Fixes * **deps:** bump undici from 6.10.2 to 6.11.1 ([#125](https://github.com/actions/create-github-app-token/issues/125)) ([ |
||
|
semantic-release-bot
|
6c406e8a24 |
build(release): 1.9.2 [skip ci]
## [1.9.2](https://github.com/actions/create-github-app-token/compare/v1.9.1...v1.9.2) (2024-04-01) ### Bug Fixes * **deps:** bump the production-dependencies group with 1 update ([#123](https://github.com/actions/create-github-app-token/issues/123)) ([ |
||
|
沙漠之子
|
babaff4320 |
feat(outputs): app-slug and installation-id (#105)
It is convenient to use `https://api.github.com/users/$app_slug[bot]` to obtain the corresponding account ID later. Then build `Signed-off-by: $app_slug[bot] <$id+$app_slug[bot]@users.noreply.github.com>`. Currently, there is no Linux environment to build test snapshot files |
||
|
dependabot[bot]
|
f83fb279aa |
fix(deps): bump the production-dependencies group with 3 updates (#107)
Bumps the production-dependencies group with 3 updates: [@octokit/auth-app](https://github.com/octokit/auth-app.js), [@octokit/request](https://github.com/octokit/request.js) and [undici](https://github.com/nodejs/undici). Updates `@octokit/auth-app` from 6.0.3 to 6.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/octokit/auth-app.js/releases"><code>@octokit/auth-app</code>'s releases</a>.</em></p> <blockquote> <h2>v6.0.4</h2> <h2><a href="https://github.com/octokit/auth-app.js/compare/v6.0.3...v6.0.4">6.0.4</a> (2024-02-23)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>README:</strong> usage example (<a href="https://redirect.github.com/octokit/auth-app.js/issues/579">#579</a>) (<a href=" |
||
|
semantic-release-bot
|
e8e39f73bb |
build(release): 1.8.1 [skip ci]
## [1.8.1](https://github.com/actions/create-github-app-token/compare/v1.8.0...v1.8.1) (2024-02-21) ### Bug Fixes * **deps:** bump undici from 6.6.0 to 6.6.1 ([#103](https://github.com/actions/create-github-app-token/issues/103)) ([ |
||
|
semantic-release-bot
|
f4c6bf6752 |
build(release): 1.8.0 [skip ci]
# [1.8.0](https://github.com/actions/create-github-app-token/compare/v1.7.0...v1.8.0) (2024-02-08) ### Features * add proxy support ([#102](https://github.com/actions/create-github-app-token/issues/102)) ([ |
||
|
Parker Brown
|
1f82f7df93 |
feat: add proxy support (#102)
Adds support for the following environment variables: - `https_proxy` - `HTTPS_PROXY` - `http_proxy` - `HTTP_PROXY` - `no_proxy` - `NO_PROXY` |
||
|
Gregor Martynus
|
837e2752e0 |
feat: github-api-url (#88)
closes #77 --------- Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com> |
||
|
semantic-release-bot
|
c4fa18d55c |
build(release): 1.6.4 [skip ci]
## [1.6.4](https://github.com/actions/create-github-app-token/compare/v1.6.3...v1.6.4) (2024-01-19) ### Bug Fixes * **revocation:** avoid revoking expired tokens and fail gracefully ([#95](https://github.com/actions/create-github-app-token/issues/95)) ([ |
||
|
Josh Gross
|
0c014070f9 |
fix(revocation): avoid revoking expired tokens and fail gracefully (#95)
Fixes #72 If an Actions job is long enough, more than an hour can pass between creating and revoking the App token in the post-job clean up step. Since the token itself is used to authenticate with the revoke API, an expired token will fail to be revoked. This PR saves the token expiration in the actions state and uses that in the post step to determine if the token can be revoked. I've also added error handling to the revoke token API call, as it's unlikely that users would want their job to fail if the token can't be revoked. |
||
|
semantic-release-bot
|
f04aa94d10 |
build(release): 1.6.3 [skip ci]
## [1.6.3](https://github.com/actions/create-github-app-token/compare/v1.6.2...v1.6.3) (2024-01-09) ### Bug Fixes * **deps:** bump the production-dependencies group with 2 updates ([#94](https://github.com/actions/create-github-app-token/issues/94)) ([ |
||
|
Bo Anderson
|
495056a515 |
fix: handle clock skew (#87)
GitHub's macOS runners for the past while have had some bad clock drift
which sometimes prevents this action from working with the error:
```console
'Issued at' claim ('iat') must be an Integer representing the time that the assertion was issued
```
`@octokit/auth-app` already has logic to handle this so we can defer to
that code.
|
||
|
semantic-release-bot
|
46e4a501e1 |
build(release): 1.6.1 [skip ci]
## [1.6.1](https://github.com/actions/create-github-app-token/compare/v1.6.0...v1.6.1) (2023-12-01) ### Bug Fixes * **deps:** bump dependencies([#84](https://github.com/actions/create-github-app-token/issues/84)) ([ |
||
|
semantic-release-bot
|
e995b4e40a |
build(release): 1.6.0 [skip ci]
# [1.6.0](https://github.com/actions/create-github-app-token/compare/v1.5.1...v1.6.0) (2023-11-16) ### Features * add retry ([#79](https://github.com/actions/create-github-app-token/issues/79)) ([ |
||
|
semantic-release-bot
|
eaddb9eb7e |
build(release): 1.5.1 [skip ci]
## [1.5.1](https://github.com/actions/create-github-app-token/compare/v1.5.0...v1.5.1) (2023-11-01) ### Bug Fixes * **deps:** bump the production-dependencies group with 1 update ([#68](https://github.com/actions/create-github-app-token/issues/68)) ([ |
||
|
Clay Miller
|
7b1d2aef87 |
feat: use dash notation for inputs (deprecates underscore notation) (#59)
Fixes #57 This PR implements the 3-step plan proposed by @gr2m in https://github.com/actions/create-github-app-token/issues/57#issuecomment-1751272252: > 1. Support both input types > 2. Log a deprecation warning for the old notation > 3. Add a test for deprecations Although this PR supports both input formats simultaneously, I opted _not_ to document the old format in the updated README. That’s a decision I’m happy to revisit, if y’all would prefer to have documentation for both the old and new formats. |
||
|
Clay Miller
|
9ec88c41ee |
feat: Add a skip_token_revoke input for configuring token revocation (#54)
Fixes https://github.com/actions/create-github-app-token/issues/55 Currently, `actions/create-github-app-token` always/unconditionally revokes the installation access token in a `post` step, at the completion of the current job. This prevents tokens from being used in other jobs. This PR makes this behavior configurable: - When the `skip-token-revoke` input is not specified (i.e. by default), the token is revoked in a `post` step (i.e. the current behavior). - When the `skip-token-revoke` input is set to a truthy value (e.g. `"true"`[^1]), the token is not revoked in a `post` step. This PR adds a test for the `skip-token-revoke: "true"` case. This is configurable in other app token actions, e.g. [tibdex/github-app-token]( |
||
|
semantic-release-bot
|
d400084c45 |
build(release): 1.3.0 [skip ci]
# [1.3.0](https://github.com/actions/create-github-app-token/compare/v1.2.2...v1.3.0) (2023-10-04) ### Features * support tokens scoped to multiple repositories within organization ([#46](https://github.com/actions/create-github-app-token/issues/46)) ([ |
||
|
Tim Reimherr
|
20fd86373f |
feat: support tokens scoped to multiple repositories within organization (#46)
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com> Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com> |
||
|
semantic-release-bot
|
5804f049e1 |
build(release): 1.2.2 [skip ci]
## [1.2.2](https://github.com/actions/create-github-app-token/compare/v1.2.1...v1.2.2) (2023-10-02) ### Bug Fixes * **deps:** bump the production-dependencies group with 3 updates ([#51](https://github.com/actions/create-github-app-token/issues/51)) ([ |
||
|
semantic-release-bot
|
49ce228ea7 |
build(release): 1.2.1 [skip ci]
## [1.2.1](https://github.com/actions/create-github-app-token/compare/v1.2.0...v1.2.1) (2023-08-30) ### Bug Fixes * **GHES:** respect `GITHUB_API_URL` when creating installation access token ([#38](https://github.com/actions/create-github-app-token/issues/38)) ([ |
||
|
semantic-release-bot
|
c72844caa4 |
build(release): 1.2.0 [skip ci]
# [1.2.0](https://github.com/actions/create-github-app-token/compare/v1.1.5...v1.2.0) (2023-08-29) ### Features * add GitHub Enterprise Server (GHES) support ([#36](https://github.com/actions/create-github-app-token/issues/36)) ([ |
||
|
semantic-release-bot
|
35d8ea9fdb |
build(release): 1.1.4 [skip ci]
## [1.1.4](https://github.com/actions/create-github-app-token/compare/v1.1.3...v1.1.4) (2023-08-28) ### Bug Fixes * **release:** build `dist/` before release ([#33](https://github.com/actions/create-github-app-token/issues/33)) ([ |
||
|
Gregor Martynus
|
f45685208f |
feat: initial version (#1)
Some checks failed
/ demo (push) Has been cancelled
Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com> Co-authored-by: Gregor Martynus <gr2m@users.noreply.github.com> |