[commons-jci] branch master updated: [StepSecurity] ci: Harden GitHub Actions #39

[ggregory]

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jci.git


The following commit(s) were added to refs/heads/master by this push:
     new a8c4261  [StepSecurity] ci: Harden GitHub Actions #39
a8c4261 is described below

commit a8c4261f2c6199f3976ff63ad47d55372b7feb7e
Author: Gary Gregory <garydgreg...@gmail.com>
AuthorDate: Sat Jun 24 15:11:51 2023 -0400

    [StepSecurity] ci: Harden GitHub Actions #39
---
 src/changes/changes.xml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 0eb3949..204816c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -67,14 +67,17 @@ The <action> type attribute can be add,update,fix,remove.
     <release version="2.0" date="202Y-MM-DD" description="Major release (Java 
8).">
       <!--  FIX -->
       <action type="fix" dev="ggregory" due-to="Gary Gregory">
-        EclipseJavaCompilerSettings.toNativeVersion(String) now throws 
IllegalArgumentException instead of RuntimeException.
+         EclipseJavaCompilerSettings.toNativeVersion(String) now throws 
IllegalArgumentException instead of RuntimeException.
       </action>
       <action type="fix" dev="ggregory" due-to="Gary Gregory">
-       GroovyJavaCompiler.compile() now throws IllegalArgumentException 
instead of RuntimeException.
+        GroovyJavaCompiler.compile() now throws IllegalArgumentException 
instead of RuntimeException.
       </action>
       <action type="fix" dev="ggregory" due-to="Gary Gregory">
-       Jsr199JavaCompiler.compile() now throws IllegalStateException instead 
of RuntimeException when there is no compiler available.
+        Jsr199JavaCompiler.compile() now throws IllegalStateException instead 
of RuntimeException when there is no compiler available.
       </action>
+      <action dev="ggregory" type="fix" due-to="step-security-bot, Gary 
Gregory">
+        [StepSecurity] ci: Harden GitHub Actions #39.
+      </action>            
       <!-- UPDATE -->
       <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">
         Bump commons-io from 2.2 to 2.13.0 #11.