Merge branch 'main' into sec

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

HISTORY.md

@@ -1,70 +1,20 @@
 # Changelog
 
-## [v35.7.7-sec](https://github.com/tj-actions/changed-files/tree/v35.7.7-sec) (2023-03-28)
+## [v35.7.2](https://github.com/tj-actions/changed-files/tree/v35.7.2) (2023-03-17)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.7...v35.7.7-sec)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35...v35.7.2)
 
-**Closed issues:**
+## [v35](https://github.com/tj-actions/changed-files/tree/v35) (2023-03-17)
 
-- Dependency Dashboard [\#27](https://github.com/tj-actions/changed-files/issues/27)
-
-## [v35.7.7](https://github.com/tj-actions/changed-files/tree/v35.7.7) (2023-03-28)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35...v35.7.7)
-
-## [v35](https://github.com/tj-actions/changed-files/tree/v35) (2023-03-28)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.6-sec...v35)
-
-**Fixed bugs:**
-
-- \[BUG\] invalid format delimiter 'ghadelimiter\_1a075742-5378-49bd-baa8-36495976815c' not found before end of file [\#1046](https://github.com/tj-actions/changed-files/issues/1046)
-
-**Merged pull requests:**
-
-- chore\(deps\): update tj-actions/glob action to v16.13 \(main\) [\#1048](https://github.com/tj-actions/changed-files/pull/1048) ([renovate[bot]](https://github.com/apps/renovate))
-- chore: update README.md [\#1047](https://github.com/tj-actions/changed-files/pull/1047) ([jackton1](https://github.com/jackton1))
-- Upgraded to v35.7.6 [\#1045](https://github.com/tj-actions/changed-files/pull/1045) ([jackton1](https://github.com/jackton1))
-- Upgraded to v35.7.4 [\#1044](https://github.com/tj-actions/changed-files/pull/1044) ([jackton1](https://github.com/jackton1))
-- Upgraded to v35.7.3 [\#1043](https://github.com/tj-actions/changed-files/pull/1043) ([jackton1](https://github.com/jackton1))
-
-## [v35.7.6-sec](https://github.com/tj-actions/changed-files/tree/v35.7.6-sec) (2023-03-22)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.6...v35.7.6-sec)
-
-## [v35.7.6](https://github.com/tj-actions/changed-files/tree/v35.7.6) (2023-03-22)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.5...v35.7.6)
-
-## [v35.7.5](https://github.com/tj-actions/changed-files/tree/v35.7.5) (2023-03-22)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.4...v35.7.5)
-
-## [v35.7.4](https://github.com/tj-actions/changed-files/tree/v35.7.4) (2023-03-22)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.3...v35.7.4)
-
-## [v35.7.3](https://github.com/tj-actions/changed-files/tree/v35.7.3) (2023-03-22)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.2...v35.7.3)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.1-sec...v35)
 
 **Fixed bugs:**
 
 - \[BUG\] all\_old\_new\_renamed\_files Gets all files renamed files from history [\#1030](https://github.com/tj-actions/changed-files/issues/1030)
 
-**Merged pull requests:**
+**Closed issues:**
 
-- chore: add create sec tag job [\#1042](https://github.com/tj-actions/changed-files/pull/1042) ([jackton1](https://github.com/jackton1))
-- chore: update sec-auto-merge.yml [\#1041](https://github.com/tj-actions/changed-files/pull/1041) ([jackton1](https://github.com/jackton1))
-- fix: bug with returning old and new rename files [\#1040](https://github.com/tj-actions/changed-files/pull/1040) ([jackton1](https://github.com/jackton1))
-- chore\(deps\): update tj-actions/json2file action to v1.4.0 \(main\) [\#1038](https://github.com/tj-actions/changed-files/pull/1038) ([renovate[bot]](https://github.com/apps/renovate))
-- chore: add sec auto merge action [\#1037](https://github.com/tj-actions/changed-files/pull/1037) ([jackton1](https://github.com/jackton1))
-- chore\(deps\): update tj-actions/verify-changed-files action to v14 \(main\) [\#1034](https://github.com/tj-actions/changed-files/pull/1034) ([renovate[bot]](https://github.com/apps/renovate))
-- Upgraded to v35.7.2 [\#1033](https://github.com/tj-actions/changed-files/pull/1033) ([jackton1](https://github.com/jackton1))
-
-## [v35.7.2](https://github.com/tj-actions/changed-files/tree/v35.7.2) (2023-03-17)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35-sec...v35.7.2)
+- Dependency Dashboard [\#27](https://github.com/tj-actions/changed-files/issues/27)
 
 **Merged pull requests:**
 
@@ -73,13 +23,13 @@
 - chore\(deps\): update peter-evans/create-pull-request action to v4.2.4 [\#1028](https://github.com/tj-actions/changed-files/pull/1028) ([renovate[bot]](https://github.com/apps/renovate))
 - Upgraded to v35.7.1 [\#1027](https://github.com/tj-actions/changed-files/pull/1027) ([jackton1](https://github.com/jackton1))
 
-## [v35-sec](https://github.com/tj-actions/changed-files/tree/v35-sec) (2023-03-14)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.1-sec...v35-sec)
-
 ## [v35.7.1-sec](https://github.com/tj-actions/changed-files/tree/v35.7.1-sec) (2023-03-14)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.1...v35.7.1-sec)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35-sec...v35.7.1-sec)
+
+## [v35-sec](https://github.com/tj-actions/changed-files/tree/v35-sec) (2023-03-14)
+
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v35.7.1...v35-sec)
 
 ## [v35.7.1](https://github.com/tj-actions/changed-files/tree/v35.7.1) (2023-03-14)
 
@@ -957,7 +907,7 @@
 
 ## [v34.0.0](https://github.com/tj-actions/changed-files/tree/v34.0.0) (2022-10-25)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v33.0.0...v34.0.0)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v33...v34.0.0)
 
 **Fixed bugs:**
 
@@ -970,13 +920,13 @@
 - feat: add support for fetching more history [\#709](https://github.com/tj-actions/changed-files/pull/709) ([jackton1](https://github.com/jackton1))
 - Upgraded to v33.0.0 [\#707](https://github.com/tj-actions/changed-files/pull/707) ([jackton1](https://github.com/jackton1))
 
-## [v33.0.0](https://github.com/tj-actions/changed-files/tree/v33.0.0) (2022-10-21)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v33...v33.0.0)
-
 ## [v33](https://github.com/tj-actions/changed-files/tree/v33) (2022-10-21)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v32.1.2...v33)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v33.0.0...v33)
+
+## [v33.0.0](https://github.com/tj-actions/changed-files/tree/v33.0.0) (2022-10-21)
+
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v32.1.2...v33.0.0)
 
 **Closed issues:**
 
@@ -1114,7 +1064,7 @@
 
 ## [v31.0.0](https://github.com/tj-actions/changed-files/tree/v31.0.0) (2022-09-25)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v30.0.0...v31.0.0)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v30...v31.0.0)
 
 **Merged pull requests:**
 
@@ -1127,13 +1077,13 @@
 - chore: update broken link [\#642](https://github.com/tj-actions/changed-files/pull/642) ([jackton1](https://github.com/jackton1))
 - Upgraded to v30.0.0 [\#641](https://github.com/tj-actions/changed-files/pull/641) ([jackton1](https://github.com/jackton1))
 
-## [v30.0.0](https://github.com/tj-actions/changed-files/tree/v30.0.0) (2022-09-24)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v30...v30.0.0)
-
 ## [v30](https://github.com/tj-actions/changed-files/tree/v30) (2022-09-24)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v29.0.9...v30)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v30.0.0...v30)
+
+## [v30.0.0](https://github.com/tj-actions/changed-files/tree/v30.0.0) (2022-09-24)
+
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v29.0.9...v30.0.0)
 
 **Fixed bugs:**
 
@@ -2193,7 +2143,7 @@
 
 ## [v1.2.1](https://github.com/tj-actions/changed-files/tree/v1.2.1) (2021-11-08)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v1.2.0...v1.2.1)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v11.5...v1.2.1)
 
 **Implemented enhancements:**
 
@@ -2207,13 +2157,13 @@
 - Update actions/checkout action to v2.4.0 [\#243](https://github.com/tj-actions/changed-files/pull/243) ([renovate[bot]](https://github.com/apps/renovate))
 - Upgraded to v11.5 [\#241](https://github.com/tj-actions/changed-files/pull/241) ([jackton1](https://github.com/jackton1))
 
-## [v1.2.0](https://github.com/tj-actions/changed-files/tree/v1.2.0) (2021-10-30)
-
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v11.5...v1.2.0)
-
 ## [v11.5](https://github.com/tj-actions/changed-files/tree/v11.5) (2021-10-30)
 
-[Full Changelog](https://github.com/tj-actions/changed-files/compare/v11.4...v11.5)
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v1.2.0...v11.5)
+
+## [v1.2.0](https://github.com/tj-actions/changed-files/tree/v1.2.0) (2021-10-30)
+
+[Full Changelog](https://github.com/tj-actions/changed-files/compare/v11.4...v1.2.0)
 
 **Merged pull requests:**
 

README.md

@@ -234,9 +234,7 @@ In addition to the standard versioning scheme, this action also uses the `v[majo
 The format of the version string is as follows:
 
 major: is a major release number that indicates significant changes or new features that may not be backward compatible.
-
 minor: is a minor release number that indicates minor changes or new features that are backward compatible.
-
 patch : is a patch release number that indicates bug fixes or other small changes that are backward compatible.
 
 `-sec` is a suffix that indicates a security-hardened version that implements additional security measures.
@@ -318,28 +316,6 @@ See [outputs](#outputs) for a list of all available outputs.
 
 </details>
 
-<details>
-<summary>Get all changed files and write the outputs to a txt file</summary>
-
-```yaml
-...
-
-   - name: Get changed files and write the outputs to a txt file
-     id: changed-files-write-output-files-txt
-     uses: ./
-     with:
-       write_output_files: true
-
-    - name: Verify the contents of the .github/outputs/added_files.txt file
-      run: |
-        cat .github/outputs/added_files.txt
-...
-```
-
-See [action.yml](action.yml#L264) for a list of all available keys.
-
-</details>
-
 <details>
 <summary>Get all changed files and write the outputs to a json file</summary>
 
@@ -353,9 +329,31 @@ See [action.yml](action.yml#L264) for a list of all available keys.
        json: true
        write_output_files: true
 
-    - name: Verify the contents of the .github/outputs/added_files.json file
+    - name: Verify the contents of the .github/added_files.json file
       run: |
-        cat .github/outputs/added_files.json
+        cat .github/added_files.json
+...
+```
+
+See [action.yml](action.yml#L264) for a list of all available keys.
+
+</details>
+
+<details>
+<summary>Get all changed files and write the outputs to a txt file</summary>
+
+```yaml
+...
+
+   - name: Get changed files and write the outputs to a txt file
+     id: changed-files-write-output-files-txt
+     uses: ./
+     with:
+       write_output_files: true
+
+    - name: Verify the contents of the .github/added_files.txt file
+      run: |
+        cat .github/added_files.txt
 ...
 ```
 

action.yml

@@ -208,7 +208,7 @@ runs:
         INPUT_FETCH_DEPTH: ${{ inputs.fetch_depth }}
         INPUT_SINCE_LAST_REMOTE_COMMIT: ${{ inputs.since_last_remote_commit }}
     - name: Glob match
-      uses: tj-actions/glob@v16.14
+      uses: tj-actions/glob@fe0bac2f371d720eeb46b5e4afd13ab34305db35 # v16.12
       id: glob
       with:
         files: ${{ inputs.files }}
@@ -255,7 +255,7 @@ runs:
         INPUT_HAS_CUSTOM_PATTERNS: ${{ steps.glob.outputs.has-custom-patterns }}
         INPUT_JSON_RAW_FORMAT: ${{ inputs.json_raw_format }}
     - name: Generate output files
-      uses: tj-actions/json2file@v1.4.0
+      uses: tj-actions/json2file@c56bc641b77b7b29451be35949e452fcadadf0d0 # v1.4.0
       if: inputs.write_output_files == 'true'
       with:
         outputs: ${{ toJSON(steps.changed-files.outputs) }}