@take-out/scripts 0.4.11 → 0.4.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@take-out/scripts",
3
- "version": "0.4.11",
3
+ "version": "0.4.12",
4
4
  "type": "module",
5
5
  "main": "./src/cmd.ts",
6
6
  "sideEffects": false,
@@ -29,8 +29,8 @@
29
29
  },
30
30
  "dependencies": {
31
31
  "@clack/prompts": "^0.8.2",
32
- "@take-out/helpers": "0.4.11",
33
- "@take-out/run": "0.4.11",
32
+ "@take-out/helpers": "0.4.12",
33
+ "@take-out/run": "0.4.12",
34
34
  "picocolors": "^1.1.1"
35
35
  }
36
36
  }
package/src/env-update.ts CHANGED
@@ -216,8 +216,12 @@ await cmd`sync environment variables from src/env.ts to matching files`
216
216
  const val = dep || defaultValue
217
217
 
218
218
  if (isGithubActions) {
219
+ // deps-derived versions track package.json — emit a literal so a
220
+ // stale repo secret can never shadow them (a stale ZERO_VERSION
221
+ // secret once pinned an old zero-cache protocol against a newer
222
+ // client). matches the .env codegen below, which already does this.
219
223
  return dep
220
- ? `${indent}${key}: \${{ secrets.${key} || '${dep}' }}`
224
+ ? `${indent}${key}: '${dep}'`
221
225
  : `${indent}${key}: \${{ secrets.${key} }}`
222
226
  }
223
227