Andrei Gherzan 3efe6589e8 ci: replace tj-actions/changed-files with a local action ...

Drop the dependency on tj-actions/changed-files and replace it with a local
composite action. Especially given it was compromised in the past - see
CVE-2025-30066.

The action diffs HEAD^1..HEAD of the PR merge commit that actions/checkout
checks out by default. It fails if HEAD is not a merge commit, so a change to
the checkout ref can't silently diff the wrong range.

With this in place, both of the workflows can share a consistent list of paths.

Signed-off-by: Andrei Gherzan <andrei@gherzan.com>

2026-10-19 04:47:42 +01:00

..

action.yml

ci: replace tj-actions/changed-files with a local action

2026-10-19 04:47:42 +01:00