actions/toolkit
2
0
Fork 0
mirror of https://github.com/actions/toolkit.git synced 2026-08-12 00:00:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Bump minor version, update test plan

Browse Source
This commit is contained in:
Jason Ginchereau
2026-06-19 09:34:38 -10:00
parent 6e8379ea7a
commit bb827dbfd4
4 changed files with 110 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/cache/RELEASES.md
Vendored
+4
View File
@@ -1,5 +1,9 @@
# @actions/cache Releases
## 6.2.0
- Add opt-in cache-archive path validation during restore via `DownloadOptions.pathValidation` (`'off' | 'warn' | 'error'`). When enabled, downloaded archives are streamed through an in-process `node-tar` validator before extraction; entries (and link targets) that escape the declared cache `paths` are reported as warnings or rejected with a `CacheIntegrityError`. In `'error'` mode on a clean archive, system `tar` extraction is additionally restricted to the validator-approved members, and parser-differential defenses (length-correct PAX re-parsing, unsafe-character / glob-metacharacter / unknown-PAX-key rejection) guard against listing-vs-extraction bypasses.
## 6.1.0
- Handle cache write error due to read-only token: detect the `cache write denied:` prefix on cache reservation failures and surface it as a `core.warning` (without failing the run).