From ca68274ec382300d8912bd8bbabc45d6a7690b41 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=93scar=20San=20Jos=C3=A9?= Date: Mon, 20 Apr 2026 12:43:25 +0200 Subject: [PATCH] Add changelog --- .../change-notes/2026-04-20-unpinned-tag-composite-actions.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 actions/ql/src/change-notes/2026-04-20-unpinned-tag-composite-actions.md diff --git a/actions/ql/src/change-notes/2026-04-20-unpinned-tag-composite-actions.md b/actions/ql/src/change-notes/2026-04-20-unpinned-tag-composite-actions.md new file mode 100644 index 00000000000..7e00965a17c --- /dev/null +++ b/actions/ql/src/change-notes/2026-04-20-unpinned-tag-composite-actions.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* The `actions/unpinned-tag` query now analyzes composite action metadata (`action.yml`/`action.yaml` files) in addition to workflow files, providing more comprehensive detection of unpinned action references across the entire Actions ecosystem. \ No newline at end of file