updating release info

replacing exec with execFile for security
testing commit
2022-12-07 18:49:57 +00:00 · 2022-12-07 18:19:23 +00:00 · 2022-12-07 18:11:37 +00:00
5 changed files with 17239 additions and 1353 deletions
@@ -28,7 +28,7 @@ jobs:
    - name: Set Node.js 12.x
      uses: actions/setup-node@v1
      with:
-        node-version: 16.x
+        node-version: 12.x

    - name: npm install
      run: npm install
@@ -1,5 +1,7 @@
 # @actions/io Releases

+### 1.1.3
+- [Fixed a security bug where we used child_proccess.exec instead of execFile for windows](https://github.com/actions/toolkit/pull/1255)
 ### 1.1.2
 - Update `lockfileVersion` to `v2` in `package-lock.json [#1020](https://github.com/actions/toolkit/pull/1020) 

@@ -1,12 +1,12 @@
 {
  "name": "@actions/io",
-  "version": "1.1.3",
+  "version": "1.1.2",
  "lockfileVersion": 2,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/io",
-      "version": "1.1.3",
+      "version": "1.1.2",
      "license": "MIT"
    }
  }
@@ -4,7 +4,6 @@ import * as path from 'path'
 import {promisify} from 'util'
 import * as ioUtil from './io-util'

-const exec = promisify(childProcess.exec)
 const execFile = promisify(childProcess.execFile)

 /**
Author	SHA1	Message	Date
Vallie Joseph	19d5d6138b	updating release info	2022-12-07 18:49:57 +00:00
Vallie Joseph	aee8700cae	replacing exec with execFile for security	2022-12-07 18:19:23 +00:00
Vallie Joseph	b56e7fcd67	testing commit	2022-12-07 18:11:37 +00:00