Gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-08-08 11:17:37 +00:00

Files

T

silverwind 00a637295e fix(actions): evaluate each ${{ }} part on its own (#38754 ) (#38797 )

Backport of https://github.com/go-gitea/gitea/pull/38754

Every `${{ }}` part was spliced as raw text into a synthesized
`format('...', <raw>)` call and re-parsed, so unbalanced parentheses
restructured the whole expression:

```yaml
run-name: ${{ 1) && (2 }}          # panicked, aborting workflow parsing for the push
if: ${{ 1 }} ${{ 0) && (0 }}       # silently skipped the job
runs-on: ${{ nosuchcontext.x }}    # silently queued the job against the label ""
```

One scanner shaped like GitHub's template reader now splits every value
and each part is evaluated on its own, so nothing builds an expression
out of text. A part that fails is an error instead of an empty string.

`expressionCallsFunction` is self-contained here, since this branch has
no `expressionsMatch` to build it on. That makes
`github.com/rhysd/actionlint` a direct dependency, which it already is
on `main`.

2026-08-06 23:28:48 +00:00

jobparser

fix(actions): evaluate each ${{ }} part on its own (#38754 ) (#38797 )

2026-08-06 23:28:48 +00:00

workflowpattern

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873 )

2026-05-26 15:49:31 -07:00

artifacts_test.go

fix(actions): make artifact signature payloads unambiguous (#37707 )

2026-05-20 16:34:27 +00:00

artifacts.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873 )