[pull] master from GoogleCloudPlatform:master#428
Merged
Conversation
…o tag folders/projects managed inside the stage. (#4028) * Subtle changes to enable use of tags with dynamic values created in 0-org-setup stage to tag folders/projects managed inside the stage. * Fixing README.md after changes in variables.tf * Adding an option to bring tags created outside of FAST code and use them to tag projects/folders in the stages * Modifying outputs so that externally managed tags are incorporated into 0-org-setup tag_vars output variable * Fixing linting * Fixing default.schema.md file * Reverting the change merging tags brought in the stage's context to the output tag_vars variable
* Pin GitHub Actions to secure commit SHAs Pin all remote GitHub Actions used in workflows and custom actions to their respective exact commit SHAs. This resolves security findings related to unpinned action references (unpinned-uses) flagged by zizmor. Additionally, some workflows were updated to include 'persist-credentials: false' for 'actions/checkout' to prevent potential credential leaks. Modified files: - .github/actions/fabric-tests/action.yml - .github/workflows/daily-tag.yml - .github/workflows/labeler.yml - .github/workflows/linting.yml - .github/workflows/pr-review.yml - .github/workflows/release.yml - .github/workflows/tests.yml TAG=agy CONV=4fc95682-3649-414b-9123-67a769272df4 * Ignore zizmor dangerous-triggers warning for PR review workflow Add inline ignore comment to suppress the 'dangerous-triggers' warning for the 'pull_request_target' trigger in pr-review.yml. This warning is a mitigated false positive because the workflow is gated by an 'automated-review' label check, requiring a maintainer to trigger it, and it only processes the diff without executing untrusted code. TAG=agy CONV=4fc95682-3649-414b-9123-67a769272df4
Bumps [body-parser](https://github.com/expressjs/body-parser) to 2.3.0 and updates ancestor dependency [@google-cloud/functions-framework](https://github.com/GoogleCloudPlatform/functions-framework-nodejs). These dependencies need to be updated together. Updates `body-parser` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.0...v2.3.0) Updates `@google-cloud/functions-framework` from 4.0.1 to 5.0.2 - [Release notes](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/releases) - [Changelog](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/blob/main/CHANGELOG.md) - [Commits](GoogleCloudPlatform/functions-framework-nodejs@v4.0.1...v5.0.2) --- updated-dependencies: - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: indirect - dependency-name: "@google-cloud/functions-framework" dependency-version: 5.0.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )