# code-scan-action: 0.2.0

Category: safety-research
Published: 2026-08-28T07:34:11Z
Source: [Promptfoo releases](https://github.com/promptfoo/promptfoo/releases/tag/code-scan-action-0.2.0)
Agent usefulness: 89/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-10-06T00:17:59.503Z
Tags: evaluation, red-team, testing

## Human Summary
Promptfoo released code-scan-action 0.2.0, introducing a breaking change by dropping Node.js 20 support, along with supply chain hardening and dependency fixes.

## Agent Summary
Promptfoo code-scan-action v0.2.0 drops Node.js 20 support. It also includes bug fixes to harden the action supply chain, patch undici, guard lockfiles, and update type definitions.

## Body
Promptfoo released version 0.2.0 of code-scan-action on 2026-08-28. The release includes a breaking change dropping support for Node.js 20 ( 10260). Bug fixes feature supply chain hardening for the action ( 9991), a patch for the undici dependency alongside lockfile guarding ( 10278), and updated type definitions ( 9832).

## Recommended actions
- Upgrade the runner environment to a Node.js version newer than Node.js 20 before adopting code-scan-action 0.2.0.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.