ReleaseMicrosoftMicrosoftpublished Mar 10, 2026seen Jun 26

microsoft/apm-action v1.2.0

microsoft/apm-action

Open original ↗

Captured source

source ↗
published Mar 10, 2026seen Jun 26captured 2whttp 200method plain

v1.2.0

Repository: microsoft/apm-action

Tag: v1.2.0

Published: 2026-03-10T21:56:13Z

Prerelease: no

Release notes:

What's Changed

Bug Fixes

  • Fix `clearPrimitives` path boundary — Anchor traversal guard to working-directory instead of GITHUB_WORKSPACE, unblocking tools like gh-aw that use isolated workspaces outside the runner checkout (#8)
  • Fix ncc static-analysis mangling — Replace path.resolve() with path.join() for subpath construction to prevent @vercel/ncc from rewriting paths into garbage concatenations (#8)
  • Use @v1 in README examples (#7)

Improvements

  • Robust traversal guard — Use path.relative() instead of startsWith() prefix check, handling edge cases like root directories (#9)
  • Test hygiene — Wrap env var mutations in try/finally for guaranteed cleanup (#9)
  • Add copilot as primary target name in docs and action.yml (#7)

Full Changelog: https://github.com/microsoft/apm-action/compare/v1.1.0...v1.2.0

What's Changed

  • docs: add 'copilot' as primary target name in docs and action.yml by @danielmeppiel in https://github.com/microsoft/apm-action/pull/7
  • fix: anchor clearPrimitives boundary to working-directory, not GITHUB_WORKSPACE by @danielmeppiel in https://github.com/microsoft/apm-action/pull/8
  • refactor: use path.relative for traversal guard, wrap env mutation in try/finally by @danielmeppiel in https://github.com/microsoft/apm-action/pull/9

Full Changelog: https://github.com/microsoft/apm-action/compare/v1.1.0...v1.2.0