vv4.0.0

[wallentx]

https://github.com/Azure/setup-kubectl/releases/tag/vv4.0.0

Can you make a tag and release without the extra v?

I think this is supposed to be v4.0.1? https://github.com/Azure/setup-kubectl/compare/3e0aec4d80787158d308d7b364cb1b702e7feb7f..0c5e050edfed71b2b50731ab044d42489d51c129

[esacteksab]

Update on this?

[varunsh-coder]

The tag name vv4.0.0 and the associated release raise concerns, as the same pull request was already released last year under the v4.0.0 tag. Could you please confirm that this release is legitimate, contains no malicious code, and has not been compromised?
@davidgamero @Vidya2606

[davidgamero]

thank you for reporting this issue, the second-release is a result of migrating to automated changelog-driven releases as others metioned

the tag name should have been v4.0.1 and is being addressed in #167 with a new release to correct this

the changelog syntax differed from the previous workflow-driven syntax where a v prefix was required. this led to a duplicate v prefix on the tag.

[varunsh-coder]

@davidgamero another issue is that the released code uses

"ncc": "^0.3.6"

0c5e050
whereas the package.json uses

setup-kubectl/package.json

Line 28 in d2d46d8

"@vercel/ncc": "^0.38.3",

[ejaifeobuks]

@varunsh-coder the issue is now fixed