Skip to content

Commit e340396

Browse files
authored
Update RELEASES
1 parent 8a67110 commit e340396

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

RELEASES.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,12 @@
2525

2626
## Changelog
2727

28+
### 5.0.4
29+
30+
- Bump `minimatch` to v3.1.5 (fixes ReDoS via globstar patterns)
31+
- Bump `undici` to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
32+
- Bump `fast-xml-parser` to v5.5.6
33+
2834
### 5.0.3
2935

3036
- Bump `@actions/cache` to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

0 commit comments

Comments
 (0)