From f39f06d9f157b13c069bc2c2f393e0cab08b0fe4 Mon Sep 17 00:00:00 2001 From: Kenneth Hsu Date: Fri, 28 Mar 2025 10:53:21 -0700 Subject: [PATCH] Update tj-actions/changed-files to address security vulnerability A security vulnerability that allowed remote attackers to discover secrets existed between March 14 and March 15, 2025. We did not appear to have any dependent builds run during that timeframe. https://github.com/advisories/GHSA-mrrh-fwg8-r2c3 --- .github/workflows/data_tests_changed_files.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/data_tests_changed_files.yml b/.github/workflows/data_tests_changed_files.yml index 40d1a8c..8cc57f6 100644 --- a/.github/workflows/data_tests_changed_files.yml +++ b/.github/workflows/data_tests_changed_files.yml @@ -40,7 +40,7 @@ jobs: - name: Get changed *.csv files id: changed-files - uses: tj-actions/changed-files@v45 + uses: tj-actions/changed-files@v46 with: path: data files: |