Dashboard › publish › Distillation
5fe6f704-829f-4626-a728-d54beb27322d["lore_tm_v1_MkSVsPcaMH3314fQiOgbA8puiFBd_I3gO6u54r1gaI8","lore_tm_v1_goC_bbED8KSbCe6u2aCwtYfbuS--mNftiRzTh5mPJik","lore_tm_v1_mcV5MW5YTK093HxQXxbXyolXsdZkfx-EEyy2GlqDnKI"]
src/publish/post-result.js imports processEndState from ../modules/process-end-state, obtains context from github.context, creates octokit with github.getOctokit(getGitHubToken()), parses required process.env.PUBLISH_ARGS with JSON.parse, takes status from process.argv.slice(2)[0], and calls processEndState({ context, octokit, inputs, status }) without awaiting it or attaching explicit error handling.actions/checkout commit titled backport fixes to releases-v6 (#2527) changed src/input-helper.ts, dist/index.js, and input-helper tests; the commit author was Aiqiao Yan and its reported additions count was 154. (meaning Jul 16, 2026)actions/checkout input-helper change reads ref through core.getInput('ref', {trimWhitespace: false}) and creates asciiTrimmedRef with .replace(/^[\t\n\v\f\r ]+|[\t\n\v\f\r ]+$/g, ''), trimming only ASCII tab, line feed, vertical tab, form feed, carriage return, and space rather than all JavaScript whitespace.actions/checkout input-helper tests mock default @actions/core getInput behavior with String.prototype.trim() unless {trimWhitespace: false} is supplied; tests cover a leading U+FEFF BOM on a SHA-256-looking ref, ASCII-whitespace-surrounded SHA handling, and default self-checkout behavior for a fork pull_request_target.actions/checkout fork-checkout guard now defines isDefaultCheckout = isWorkflowRepository && !core.getInput('ref') and invokes unsafePrCheckoutHelper.assertSafePrCheckout(...) only when !isDefaultCheckout; rationale in the source says default self-checkout resolves to the trusted ref/commit supplied by GitHub, so guarding is needed only for a customized repository or ref.actions/checkout commit 3d3c42e5aac5ba805825da76410c181273ba90b1, authored by Aiqiao Yan (aiqiaoy) and committed by GitHub (web-flow), is titled prep v7.0.1 release (#2531) and includes Potential fix for pull request finding; it is verified, has parent 28802689a136bfcdb721715abd713740beecbe07, and reports 19 total changes: 16 additions and 3 deletions across CHANGELOG.md, package-lock.json, and package.json. (meaning Jul 17, 2026)actions/checkout commit 3d3c42e5aac5ba805825da76410c181273ba90b1 updates the version from 7.0.0 to 7.0.1 in both package.json and the root/package entries of package-lock.json.actions/checkout v7.0.1 changelog lists, in order: 1. github/codeql-action 3→4 via PR #2475; 2. actions/setup-node 4→6 via PR #2477; 3. docker/build-push-action 6.5.0→7.2.0 via PR #2478; 4. docker/login-action 3.3.0→4.2.0 via PR #2479; 5. actions/checkout 6→7 via PR #2488; 6. actions/upload-artifact 4→7 via PR #2476; 7. ESLint 9 via PR #2474; 8. the minor-actions-dependencies group with 2 updates via PR #2499; 9. skip the unsafe-PR check for default input via PR #2518; 10. trim only ASCII whitespace for a branch via PR #2521; 11. escape values passed to --unset via PR #2530.