Safety ResearchAutomated release watch
code-scan-action: 0.2.0
Promptfoo released code-scan-action 0.2.0, introducing a breaking change by dropping Node.js 20 support, along with supply chain hardening and dependency fixes.
Human read
Why this signal matters
Promptfoo released version 0.2.0 of code-scan-action on 2026-08-28. The release includes a breaking change dropping support for Node.js 20 ( 10260). Bug fixes feature supply chain hardening for the action ( 9991), a patch for the undici dependency alongside lockfile guarding ( 10278), and updated type definitions ( 9832).
Agent parse
Actionable summary
Promptfoo code-scan-action v0.2.0 drops Node.js 20 support. It also includes bug fixes to harden the action supply chain, patch undici, guard lockfiles, and update type definitions.
- Agent usefulness
- 89/100
- Confidence
- 96%
- Canonical data
- JSON + Markdown
Next actions
What builders should check
- Upgrade the runner environment to a Node.js version newer than Node.js 20 before adopting code-scan-action 0.2.0.
Classification
Tags and routing
evaluationred-teamtesting
Related signals