🏁 Script executed:

#!/bin/bash
# Description: Verify the release-plz/action commit SHA corresponds to v0.5

# Fetch the v0.5 tag and verify the commit SHA
echo "Checking if commit e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 exists and matches v0.5..."
gh api repos/release-plz/action/commits/e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 --jq '{sha: .sha, commit_message: .commit.message, author_date: .commit.author.date}'

echo -e "\nFetching v0.5 tag information..."
gh api repos/release-plz/action/git/ref/tags/v0.5 --jq '{ref: .ref, sha: .object.sha}'

echo -e "\nChecking for security advisories..."
gh api graphql -f query='
{
  repository(owner: "release-plz", name: "action") {
    vulnerabilityAlerts(first: 5) {
      nodes {
        securityVulnerability {
          advisory {
            summary
            severity
            publishedAt
          }
        }
      }
    }
  }
}'

Repository: jdx/demand

Length of output: 595

🌐 Web query:

release-plz/action v0.5 changelog or commit e879257

💡 Result:

I can’t reliably identify the changelog entry for commit e879257 in release-plz/action v0.5, because none of the web results I found contain that commit hash (e879257) or map it to a specific release (v0.5.x) / changelog section in the action repository. What I can confirm from authoritative sources: 1) The official repository release feed exists at https://github.com/release-plz/action/releases, and it lists many “What’s Changed” items per tag, but the search results shown here don’t surface an entry for e879257 specifically. 2) release-plz/action’s latest recorded release (as surfaced in the results) is v0.5.128 (2026-03-07), but that still doesn’t connect to e879257. If you can provide either (a) the full commit SHA for e879257 (7 hex is ambiguous), or (b) the specific v0.5.x tag that contains that commit, I can pinpoint the exact changelog lines for that change. As-is, any attempt to attribute “e879257” to a particular v0.5 changelog would be guesswork.

Citations:

• 1: https://github.com/release-plz/action/releases
• 2: https://github.com/release-plz/action
• 3: release-plz/action@db75300...476794e
• 4: https://release-plz.dev/docs/github/quickstart
• 5: https://github.com/release-plz/release-plz/