set-env and add-path are now disabled for security reasons

[ggrossetie]

Using the latest version published (v6), I get the following errors:

Error: Unable to process command '::set-env name=PYENV_ROOT::/opt/hostedtoolcache/pyenv_root/1.2.18/x64' successfully.
Error: The `set-env` command is disabled. Please upgrade to using Environment Files or opt into unsecure command execution by setting the `ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For more information see: github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands

export PYENV_ROOT="/opt/hostedtoolcache/pyenv_root/1.2.18/x64"
Error: Unable to process command '::add-path::/opt/hostedtoolcache/pyenv_root/1.2.18/x64/bin' successfully.
Error: The `add-path` command is disabled. Please upgrade to using Environment Files or opt into unsecure command execution by setting the `ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For more information see: github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands

Error: Unable to process command '::add-path::/opt/hostedtoolcache/pyenv_root/1.2.18/x64/shims' successfully.
Error: The `add-path` command is disabled. Please upgrade to using Environment Files or opt into unsecure command execution by setting the `ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For more information see: github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands

Is there a workaround, apart from setting ACTIONS_ALLOW_UNSECURE_COMMANDS?

[ggrossetie]

Action authors who are using the toolkit should update the @actions/core package to v1.2.6 or greater to get the updated addPath and exportVariable functions.

I can see that we are already using 1.2.6 on master, so this is probably just a matter of releasing a new version.

pyenv-action/package.json

Line 31 in eb4209e

"@actions/core": "1.2.6",

[tripleee]

Are the instructions in https://github.com/marketplace/actions/pyenv-build incomplete still? I get these errors when trying this out for the first time.

[tdonovic]

Same here. The docs seem to say they are removing the commands too, so not sure if this can even be fixed long term https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/