Changelog for poutine
v0.18.0 π
We're delighted to roll out poutine
v0.18.0! This release is packed adds some cool new rule and small enhancements.
Major New Rule ππ
- π‘οΈ New Confused Deputy Auto-Merge Rule: Introduced a new security rule to detect potential Confused Deputy vulnerabilities related to auto-merge workflows, contributed by @fproulx-boostsecurity. (#304)
- Checkout the rule's documentation
- And read the blog article to learn more about this vulnerability class.
Improvements π§
- β¨ CLI and Config File
include
Option: You can now specify aninclude
option in both the CLI and configuration file for more granular control over scanned paths, introduced by @Talgarr. (#289) - π Support for Large Ubuntu and Windows Runners: Added capability to utilize larger GitHub-hosted runners for Ubuntu and Windows, enhancing CI flexibility, by @Talgarr. (#293)
- βοΈ GitHub Actions Strategy Matrix Parsing: Enhanced parsing capabilities for GitHub Actions strategy matrices, implemented by @SUSTAPLE117. This PR also includes various dependency updates. (#301)
- π οΈ Core Refactoring: Significant refactoring of internal components for improved maintainability and performance, by @Talgarr. (#291)
- π§© Enhanced Extensibility: Exported additional fields to simplify the development of extensions and integrations with
poutine
, thanks to @Talgarr. (#292) - π’ Clearer Git Ref Error Reporting: Implemented more specific error messages when a Git reference is unreachable, improving debuggability, by @SUSTAPLE117. (#302)
- π README Typo Correction: Fixed a typo in the README documentation (
--scm-base-uri
to--scm-base-url
), thanks to @natcl. (#303)
Dependency Updates β¬οΈ
GitHub Actions
- Updated
actions/dependency-review-action
from4.5.0
to4.6.0
. (#294) - Updated
sigstore/cosign-installer
from3.7.0
to3.8.2
. (#295) - Updated
actions/upload-artifact
from4.6.0
to4.6.2
. (#296) - Updated
actions/setup-go
from5.3.0
to5.4.0
. (#297) - Updated
github/codeql-action
from3.28.13
to3.28.16
. (#298)
New Contributors π
- Welcome @natcl, who made their first contribution by fixing a typo in our README (#303)! We appreciate your attention to detail!
Full Changelog π
For a detailed view of all changes, see the full changelog.