microsoft/apm-action v1.2.0
microsoft/apm-action
Captured source
source ↗published Mar 10, 2026seen Jun 26captured 2whttp 200method plain
v1.2.0
Repository: microsoft/apm-action
Tag: v1.2.0
Published: 2026-03-10T21:56:13Z
Prerelease: no
Release notes:
What's Changed
Bug Fixes
- Fix `clearPrimitives` path boundary — Anchor traversal guard to
working-directoryinstead ofGITHUB_WORKSPACE, unblocking tools like gh-aw that use isolated workspaces outside the runner checkout (#8) - Fix ncc static-analysis mangling — Replace
path.resolve()withpath.join()for subpath construction to prevent@vercel/nccfrom rewriting paths into garbage concatenations (#8) - Use
@v1in README examples (#7)
Improvements
- Robust traversal guard — Use
path.relative()instead ofstartsWith()prefix check, handling edge cases like root directories (#9) - Test hygiene — Wrap env var mutations in
try/finallyfor guaranteed cleanup (#9) - Add
copilotas primary target name in docs and action.yml (#7)
Full Changelog: https://github.com/microsoft/apm-action/compare/v1.1.0...v1.2.0
What's Changed
- docs: add 'copilot' as primary target name in docs and action.yml by @danielmeppiel in https://github.com/microsoft/apm-action/pull/7
- fix: anchor clearPrimitives boundary to working-directory, not GITHUB_WORKSPACE by @danielmeppiel in https://github.com/microsoft/apm-action/pull/8
- refactor: use path.relative for traversal guard, wrap env mutation in try/finally by @danielmeppiel in https://github.com/microsoft/apm-action/pull/9
Full Changelog: https://github.com/microsoft/apm-action/compare/v1.1.0...v1.2.0