* feat: Upgrade Alpine base image to version 3.24.1
* chore: Update supported versions and their statuses
* chore: Update README with new versions and action updates
Updated the README to reflect changes in Alpine and Rsync versions, and updated the action versions from v8 to v9.
* chore: Update Alpine version in README.md
* feat: Update base image to Alpine 3.23.4
Alpine 3.23.4 fixes the following:
musl
CVE-2026-6042
CVE-2026-40200
openssl
CVE-2026-31790
CVE-2026-28387
CVE-2026-28388
CVE-2026-28389
CVE-2026-28390
CVE-2026-31789
* chore: Update supported versions in SECURITY.md
* chore: Update README for Alpine and version changes
* chore: Update copyright years in LICENSE file
Updated copyright years for Joshua Piper and Burnett01.
* chore(deps): bump alpine from 3.23.0 to 3.23.2
Bumps alpine from 3.23.0 to 3.23.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.23.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
* chore(docs): update Alpine version to 3.23.2 in README and SECURITY files
* chore(docs): update current version to 8.0.3 in README
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix: only attempt to create dir if not yet exists
On self-hosted runners it can happen that an action (docker container) is cached. This leads to the script trying to create the .ssh dir despite it already existing. The action then fails.
* fix: only attempt to create file if it doesn't exist yet
On self-hosted runners it can happen that an action (docker container) is cached, resulting in aborting this script because the know_hosts file already exists.
This if clause fixes it.
Setting permissions is intentionally outside the if clause because in all cases we want to reset perms.
* fix: reverting printf in favor of echo
Like in commit 2c22263 we are using echo again instead of printf because some runners can't function properly with it.
* chore: 8.0.2
* chore: readme changes
* feat: latest Alpine 3.23.0
* feat: latest Rsync 3.4.1-r1
* feat: integrate [rsync-docker](https://github.com/JoshPiper/rsync-docker/) 3rd party into this action as 1st party code (no more dependency, better audit, single source of truth)
- backported:
- agent-start
- agent-stop
- agent-askpass
- agent-add
- hosts-add
- hosts-clear
- new added:
- ssh-init
- hosts-init
- improved:
- stricter permissions on .ssh/ folder (700) and known_hosts (600)
- use set -eu in all scipts
* feat: new ``strict_host_keys`` option to enable support for strict host key verification. Default: false (to keep backward compatibility)
* feat: new ``debug`` option to see the commands executed (-x) by this action
* feat: this action is now scanned for vulnerabilities by Snyk
* feat; this action is now scanned by CodeQL for Q/A
* feat: this action now performs CI tasks such as Validation, Linting and Unit Tests
* fix: various shell syntax for robustness
* fix: use printf and redirect output to non-stdout instead of echo in sensitive code locations
* refactor: use $HOME instead of tilde ~ for robustness
* feat: cross-platform support
* chore: Deprecate 7.0.2
* chore: EOL 7.0.0 & 7.0.1
* update base image drinternet/rsync:v1.3.0
* Base Image updates: alpine 3.14.1 latest
* use v5.1 in examples
* support for v5.x
* mention Alpine version
Burnett01