security: disable tj-actions/changed-files

Author: benmccann

.github/workflows/preview-release.yml

@@ -19,26 +19,27 @@ jobs:
           node-version: 20
           cache: pnpm
 
-      - name: Run changed-files
-        id: changed-files
-        uses: tj-actions/changed-files@v44
-        with:
-          separator: ' '
-          dir_names: 'true'
-          dir_names_max_depth: '2' # truncates the path to packages/package-name
-          files: |
-            packages/**
+# Disabled due to https://github.com/tj-actions/changed-files/issues/2463
+#      - name: Run changed-files
+#        id: changed-files
+#        uses: tj-actions/changed-files@v44
+#        with:
+#          separator: ' '
+#          dir_names: 'true'
+#          dir_names_max_depth: '2' # truncates the path to packages/package-name
+#          files: |
+#            packages/**
 
       - name: install dependencies
         run: pnpm install
 
       - name: build
         run: pnpm build
 
-      - name: publish preview
-        if: ${{ steps.changed-files.outputs.all_changed_files_count > 0 }}
-        env:
-          CHANGED_DIRS: ${{ steps.changed-files.outputs.all_changed_files }}
-        # run: |
-        #   node scripts/get-deps-to-publish.js
-        run: pnpm dlx [email protected] publish --pnpm './packages/*'
+#      - name: publish preview
+#        if: ${{ steps.changed-files.outputs.all_changed_files_count > 0 }}
+#        env:
+#          CHANGED_DIRS: ${{ steps.changed-files.outputs.all_changed_files }}
+#        # run: |
+#        #   node scripts/get-deps-to-publish.js
+#        run: pnpm dlx [email protected] publish --pnpm './packages/*'