chore: EOL of version 7.0.2 and 7.1.0

2026-09-19 21:25:22 +08:00 · 2026-05-23 19:41:31 +02:00 · 2026-05-23 19:38:37 +02:00 · 2026-05-23 19:36:57 +02:00 · 2026-04-17 18:50:35 +02:00 · 2026-02-04 20:48:49 +01:00
9 changed files with 120 additions and 74 deletions
@@ -0,0 +1 @@
+github: [burnett01]
@@ -1,4 +1,4 @@
-FROM alpine:3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 AS base
+FROM alpine:3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 AS base

 RUN apk update && apk add --no-cache --upgrade rsync openssh openssl busybox

@@ -1,8 +1,8 @@
 MIT License

 Copyright (c) 2019-2022 Contention
-Copyright (c) 2019-2025 Joshua Piper (Dr Internet)
-Copyright (c) 2019-2025 Burnett01
+Copyright (c) 2019-2026 Joshua Piper (Dr Internet)
+Copyright (c) 2019-2026 Burnett01

 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -10,13 +10,48 @@ This cross-platform GitHub Action deploys files in [`path`](#inputs) (relative t

 Use this action in a CD workflow which leaves deployable code in `GITHUB_WORKSPACE`, such [actions/checkout](https://github.com/actions/checkout).

-The base-image of this action is very small and based on **Alpine 3.23.0** (no cache) which results in fast deployments.
+The base-image of this action is very small and based on **Alpine 3.23.4** (no cache) which results in fast deployments.

-Alpine version: [3.23.0](https://www.alpinelinux.org/posts/Alpine-3.23.0-released.html)
+Alpine version: [3.23.4](https://www.alpinelinux.org/posts/Alpine-3.20.10-3.21.7-3.22.4-3.23.4-released.html)
 Rsync version: [3.4.1-r1](https://download.samba.org/pub/rsync/NEWS#3.4.1)

+## Current Version: v8 (8.0.5)
+
+### Release channels:
+
+| Version | Purpose          | Immutable  | 
+| ------- | ------------------ | ------------------ | 
+| ``v8`` (recommended)  |  latest MAJOR (pointer to 8.MINOR.PATCH) | no |
+| 8.0.5  | latest MAJOR+MINOR+PATCH | yes |
+
+Check [SECURITY.md](SECURITY.md) for support cycles.
 ---

+## How it works
+
+```yml
+name: DEPLOY
+on:
+  push:
+    branches:
+    - master
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v6
+    - name: rsync deployments
+      uses: burnett01/rsync-deployments@v8
+      with:
+        switches: -avzr --delete
+        path: src/
+        remote_path: ${{ secrets.REMOTE_PATH }} # ex: /var/www/html/
+        remote_host: ${{ secrets.REMOTE_HOST }} # ex: example.com
+        remote_port: ${{ secrets.REMOTE_PORT }} # ex: 22
+        remote_user: ${{ secrets.REMOTE_USER }} # ex: ubuntu
+        remote_key: ${{ secrets.REMOTE_PRIVATE_KEY }}
+```
+
 ## Inputs

 - `debug`* - Whether to enable debug output. ("true" / "false") - Default: "false"
@@ -53,20 +88,10 @@ This action needs secret variables for the ssh private key of your key pair. The

 For simplicity, we are using `REMOTE_*` as the secret variables throughout the examples.

-## Current Version: v8 (8.0.1)
-
-### Release channels:
-
-| Version | Purpose          | Immutable  | 
-| ------- | ------------------ | ------------------ | 
-| ``v8``  |  latest release (pointer to 8.x.x) | no, points to latest MINOR,PATCH |
-| 8.0.1  | latest major release | yes |
-| 7.1.0   | previous release | yes |
-
-Check [SECURITY.md](SECURITY.md) for support cycles.
-
 ## Example usage

+For better **security** always use secrets for remote_host, remote_port, remote_user and remote_path inputs.
+
 Simple:

 ```yml
@@ -86,13 +111,14 @@ jobs:
      with:
        switches: -avzr --delete
        path: src/
-        remote_path: /var/www/html/
-        remote_host: example.com
-        remote_user: debian
+        remote_path: ${{ secrets.REMOTE_PATH }} # ex: /var/www/html/
+        remote_host: ${{ secrets.REMOTE_HOST }} # ex: example.com
+        remote_port: ${{ secrets.REMOTE_PORT }} # ex: 22
+        remote_user: ${{ secrets.REMOTE_USER }} # ex: ubuntu
        remote_key: ${{ secrets.REMOTE_PRIVATE_KEY }}
 ```

-Advanced:
+Advanced (with filters etc):

 ```yml
 jobs:
@@ -105,30 +131,10 @@ jobs:
      with:
        switches: -avzr --delete --exclude="" --include="" --filter=""
        path: src/
-        remote_path: /var/www/html/
-        remote_host: example.com
-        remote_port: 5555
-        remote_user: debian
-        remote_key: ${{ secrets.REMOTE_PRIVATE_KEY }}
-```
-
-For better **security**, I suggest you create additional secrets for remote_host, remote_port, remote_user and remote_path inputs.
-
-```yml
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v6
-    - name: rsync deployments
-      uses: burnett01/rsync-deployments@v8
-      with:
-        switches: -avzr --delete
-        path: src/
-        remote_path: ${{ secrets.REMOTE_PATH }}
-        remote_host: ${{ secrets.REMOTE_HOST }}
-        remote_port: ${{ secrets.REMOTE_PORT }}
-        remote_user: ${{ secrets.REMOTE_USER }}
+        remote_path: ${{ secrets.REMOTE_PATH }} # ex: /var/www/html/
+        remote_host: ${{ secrets.REMOTE_HOST }} # ex: example.com
+        remote_port: ${{ secrets.REMOTE_PORT }} # ex: 22
+        remote_user: ${{ secrets.REMOTE_USER }} # ex: ubuntu
        remote_key: ${{ secrets.REMOTE_PRIVATE_KEY }}
 ```

@@ -145,10 +151,10 @@ jobs:
      with:
        switches: -avzr --delete
        path: src/
-        remote_path: ${{ secrets.REMOTE_PATH }}
-        remote_host: ${{ secrets.REMOTE_HOST }}
-        remote_port: ${{ secrets.REMOTE_PORT }}
-        remote_user: ${{ secrets.REMOTE_USER }}
+        remote_path: ${{ secrets.REMOTE_PATH }} # ex: /var/www/html/
+        remote_host: ${{ secrets.REMOTE_HOST }} # ex: example.com
+        remote_port: ${{ secrets.REMOTE_PORT }} # ex: 22
+        remote_user: ${{ secrets.REMOTE_USER }} # ex: ubuntu
        remote_key: ${{ secrets.REMOTE_PRIVATE_KEY }}
        remote_key_pass: ${{ secrets.REMOTE_PRIVATE_KEY_PASS }}
 ```
@@ -172,10 +178,10 @@ jobs:
        switches: -avzr --delete
        legacy_allow_rsa_hostkeys: "true"
        path: src/
-        remote_path: ${{ secrets.REMOTE_PATH }}
-        remote_host: ${{ secrets.REMOTE_HOST }}
-        remote_port: ${{ secrets.REMOTE_PORT }}
-        remote_user: ${{ secrets.REMOTE_USER }}
+        remote_path: ${{ secrets.REMOTE_PATH }} # ex: /var/www/html/
+        remote_host: ${{ secrets.REMOTE_HOST }} # ex: example.com
+        remote_port: ${{ secrets.REMOTE_PORT }} # ex: 22
+        remote_user: ${{ secrets.REMOTE_USER }} # ex: ubuntu
        remote_key: ${{ secrets.REMOTE_PRIVATE_KEY }}
 ```

@@ -277,14 +283,44 @@ sudo apk add rsync

 ## Versions

-## Version 7.1.0
+## Version 8.0.4
+
+Check here: 
+
+- https://github.com/Burnett01/rsync-deployments/tree/8.0.4  (alpine 3.23.3)
+
+## Version 8.0.3
+
+Check here: 
+
+- https://github.com/Burnett01/rsync-deployments/tree/8.0.3  (alpine 3.23.2)
+
+## Version 8.0.2
+
+Check here: 
+
+- https://github.com/Burnett01/rsync-deployments/tree/8.0.2  (alpine 3.23.0)
+
+## Version 8.0.1 (EOL)
+
+Check here: 
+
+- https://github.com/Burnett01/rsync-deployments/tree/8.0.1  (alpine 3.23.0)
+
+## Version 8.0.0 (EOL due to regression -> fixed via 8.0.1 & 8.0.2)
+
+Check here: 
+
+- https://github.com/Burnett01/rsync-deployments/tree/8.0.0  (alpine 3.23.0)
+
+## Version 7.1.0 (EOL)

 Check here: 

 - https://github.com/Burnett01/rsync-deployments/tree/7.1.0  (alpine 3.22.1)
  

-## Version 7.0.2 (DEPRECATED)
+## Version 7.0.2 (EOL)

 Check here: 

@@ -358,7 +394,7 @@ Please note that version 1.0 has reached end of life state.
 ## Acknowledgements

 + This project is a fork of [Contention/rsync-deployments](https://github.com/Contention/rsync-deployments)
-+ Base image [JoshPiper/rsync-docker](https://github.com/JoshPiper/rsync-docker)
+ docker-rsync [JoshPiper/rsync-docker](https://github.com/JoshPiper/rsync-docker)

 ---

@@ -6,20 +6,24 @@ The Docker image and code quality are regularly checked for vulnerabilities and

 The following versions are currently being supported with security updates:

-| Version | Supported          | Rsync version          | Alpine version          |
-| ------- | ------------------ | ------------------ | ------------------ |
-| 8.0.1  | :white_check_mark: | >= 3.4.1-r1 | 3.23.0 |
-| 8.0.0  | :x: EOL (due to regression #90) | >= 3.4.1-r1 | 3.23.0 |
-| 7.1.0  | :white_check_mark: | >= 3.4.1-r0 | 3.22.1 |
-| 7.0.2   | :warning: DEPRECATED | >= 3.4.0-r0 | 3.22.1 |
-| 7.0.1   | :x: EOL | < 3.4.0 | 3.22.1 |
-| 7.0.0   | :x: EOL | < 3.4.0| 3.19.1 |
-| 6.x   | :x: EOL |< 3.4.0| 3.17.2 |
-| 5.x   | :x: EOL |< 3.4.0| 3.11 - 3.14.1 - 3.15 - 3.16 - 3.17.2 |
-| 4.x   | :x: EOL |< 3.4.0| 3.11 |
-| 3.0   | :x: EOL |< 3.4.0| N/A |
-| 2.0   | :x: EOL               |< 3.4.0| Ubuntu |
-| 1.0   | :x: EOL               |< 3.4.0| Ubuntu |
+| Version | Supported          | Rsync version          | Alpine version          | Support Until  |
+| ------- | ------------------ | ------------------ | ------------------ | ------------------ | 
+| (``v8``) 8.0.5  | :white_check_mark: | >= 3.4.1-r1 | 3.23.4 | LTS (2026-*) |
+| 8.0.4  | :white_check_mark: | >= 3.4.1-r1 | 3.23.3 | LTS (2026) |
+| 8.0.3  | :white_check_mark: | >= 3.4.1-r1 | 3.23.2 | LTS (2026) |
+| 8.0.2  | :white_check_mark: | >= 3.4.1-r1 | 3.23.0 | LTS (2026) |
+| 8.0.1  | :x: EOL | >= 3.4.1-r1 | 3.23.0 | † Apr, 1st 2026 |
+| 8.0.0  | :x: EOL (due to regression #90) | >= 3.4.1-r1 | 3.23.0 | † Dec, 6th 2025 |
+| 7.1.0  | :x: EOL | >= 3.4.1-r0 | 3.22.1 | † June, 1st 2026 ([deprecation notice](https://github.com/Burnett01/rsync-deployments/discussions/96)) |
+| 7.0.2   | :x: EOL | >= 3.4.0-r0 | 3.22.1 | † June, 1st 2026 ([deprecation notice](https://github.com/Burnett01/rsync-deployments/discussions/96)) |
+| 7.0.1   | :x: EOL | < 3.4.0 | 3.22.1 | † Dec, 6th 2025 |
+| 7.0.0   | :x: EOL | < 3.4.0| 3.19.1 | † Dec, 6th 2025 |
+| 6.x   | :x: EOL |< 3.4.0| 3.17.2 | † 2024 |
+| 5.x   | :x: EOL |< 3.4.0| 3.11 - 3.14.1 - 3.15 - 3.16 - 3.17.2 | † 2024 |
+| 4.x   | :x: EOL |< 3.4.0| 3.11 |  † |
+| 3.0   | :x: EOL |< 3.4.0| N/A | † |
+| 2.0   | :x: EOL               |< 3.4.0| Ubuntu | † |
+| 1.0   | :x: EOL               |< 3.4.0| Ubuntu | † |

 ### Terminology

@@ -1,5 +1,5 @@
 name: 'Rsync Deployments Action'
-description: 'GitHub Action for deploying code via rsync over ssh'
+description: 'GitHub Action for deploying code via rsync over ssh securely - used by 5k+ workflows!'
 author: 'Burnett01'
 inputs:
  switches:
@@ -2,4 +2,4 @@

 set -eu

-printf '%s\n' "$@" >> $HOME/.ssh/known_hosts
+echo "$@" >> $HOME/.ssh/known_hosts
@@ -2,5 +2,8 @@

 set -eu

-touch $HOME/.ssh/known_hosts
+if [ ! -f "$HOME/.ssh/known_hosts" ]; then
+    touch $HOME/.ssh/known_hosts
+fi
+
 chmod 600 $HOME/.ssh/known_hosts
@@ -2,4 +2,6 @@

 set -eu

-mkdir -m 700 $HOME/.ssh
+if [ ! -d "$HOME/.ssh" ]; then
+    mkdir -m 700 $HOME/.ssh
+fi
Author	SHA1	Message	Date
Burnett01	ce5f41df10	chore: EOL of version 7.0.2 and 7.1.0	2026-05-23 19:41:31 +02:00
Burnett01	2f1450c0da	chore: EOL of version 7.0.2 and 7.1.0	2026-05-23 19:38:37 +02:00
Burnett01	09d0f6ee87	chore: EOL of version 7.0.2 and 7.1.0	2026-05-23 19:36:57 +02:00
Burnett01	66257cad6b	Release/8.0.5 (#101 ) * feat: Update base image to Alpine 3.23.4 Alpine 3.23.4 fixes the following: musl CVE-2026-6042 CVE-2026-40200 openssl CVE-2026-31790 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-31789 * chore: Update supported versions in SECURITY.md * chore: Update README for Alpine and version changes * chore: Update copyright years in LICENSE file Updated copyright years for Joshua Piper and Burnett01.	2026-04-17 18:50:35 +02:00
Steven	27212fc826	chore(readme): Version upgrade to 8.0.4	2026-02-04 20:48:49 +01:00
Steven	dc0d5d44c4	Release/8.0.4 (#100 ) * chore(deps): bump alpine from 3.23.2 to 3.23.3 (#99) Bumps alpine from 3.23.2 to 3.23.3. --- updated-dependencies: - dependency-name: alpine dependency-version: 3.23.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat(action): Version 8.0.4 (alpine upgrade 3.23.3) --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-04 20:38:53 +01:00
Steven	cccc35d762	chore(action): update description to match modern facts	2026-01-15 23:15:06 +01:00
Steven	2ad5f95a8a	chore(funding): create funding yaml	2026-01-15 23:12:32 +01:00
Steven	115573f97b	chore(readme): mention deprecation of 7.0.2 too	2026-01-15 22:59:55 +01:00
Steven	7659d600d8	feat(release): 8.0.3 (v8) - bump alpine from 3.23.0 to 3.23.2 (#97 ) (#98 ) * chore(deps): bump alpine from 3.23.0 to 3.23.2 Bumps alpine from 3.23.0 to 3.23.2. --- updated-dependencies: - dependency-name: alpine dependency-version: 3.23.2 dependency-type: direct:production update-type: version-update:semver-patch ... * chore(docs): update Alpine version to 3.23.2 in README and SECURITY files * chore(docs): update current version to 8.0.3 in README --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-01-02 21:55:43 +01:00
Steven	81be6cf6d7	chore: add deprecation notice, move release channels to top	2025-12-09 21:22:31 +01:00
Steven	178d2ea600	chore: deprecation notice	2025-12-09 14:45:28 +01:00
Steven	241aa321a8	chore: add support cycles	2025-12-07 14:02:36 +01:00
Steven	80e4fa792e	chore: update readme - advise users to always use secrets - simplified examples - other adjustments	2025-12-07 13:51:46 +01:00
Steven	0c902521b8	Release/8.0.2 (#93 ) * fix: only attempt to create dir if not yet exists On self-hosted runners it can happen that an action (docker container) is cached. This leads to the script trying to create the .ssh dir despite it already existing. The action then fails. * fix: only attempt to create file if it doesn't exist yet On self-hosted runners it can happen that an action (docker container) is cached, resulting in aborting this script because the know_hosts file already exists. This if clause fixes it. Setting permissions is intentionally outside the if clause because in all cases we want to reset perms. * fix: reverting printf in favor of echo Like in commit `2c22263` we are using echo again instead of printf because some runners can't function properly with it. * chore: 8.0.2 * chore: readme changes	2025-12-07 12:59:02 +01:00