v2.0.0

   🚨 Breaking Changes

• Require node 22.12 or newer  -  by @azat-io (bcb1e)
• Share update policy between cli and programmatic api  -  by @azat-io (131fa)
• Check the commit behind a tag before writing an update  -  by @azat-io (9bc15)

   🚀 Features

• Replace picocolors with an internal colors module  -  by @azat-io (b9da1)
• Replace nanospinner with an internal spinner  -  by @azat-io (24149)
• Replace enquirer with an internal prompt  -  by @azat-io (4f083)
• Skip updates pinned by a workflow lockfile  -  by @azat-io (a6914)

   🐞 Bug Fixes

• Pre-select safe updates and close the prompt on cancel  -  by @azat-io (34c19)
• Hold back sha pins without a version comment in minor and patch modes  -  by @azat-io (1a8e1)
• Keep commas inside regex patterns and reject an empty minimum age  -  by @azat-io (cb785)
• Keep glued prerelease numbers on the tag version  -  by @azat-io (d49c7)
• Follow same-repo composite actions of repositories with dots in the name  -  by @azat-io (9c1af)
• Drop the trailing space left after a removed version comment  -  by @azat-io (28168)
• Update anchored action references and follow yaml aliases  -  by @azat-io (b13d9)
• Fill in action references in the json report  -  by @azat-io (eb303)
• Keep updates in scan order after reading ignore comments  -  by @azat-io (61dcf)
• Accept tags containing @ in reusable workflow references  -  by @azat-io (187b1)
• Ignore digits in the tag family name when comparing versions  -  by @azat-io (188a6)
• Report actions whose repository was not found  -  by @azat-io (c446c)
• Hold back moved tags of sha pins without the cool-down  -  by @azat-io (30c6e)

    View changes on GitHub