v3.0.0

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @crazy-max in #99

Full Changelog: v2.2.0...v3.0.0

v2.2.0

• bump @actions/http-client from 2.0.1 to 2.1.1 in #65 #88
• bump chalk from 5.2.0 to 5.3.0 in #80
• bump http-cache-semantics from 4.1.0 to 4.1.1 in #58
• bump semver from 7.3.8 to 7.5.2 in #79
• bump word-wrap from 1.2.3 to 1.2.5 in #94
• chore: update yarn to 3.5.1 by @crazy-max in #75

Full Changelog: v2.1.0...v2.2.0

v2.1.0

• Check latest and tagged releases using releases-json by @crazy-max (#56)
• ci: generate trivy-releases.json by @crazy-max (#54 #55)
• Update to Yarn 3.2.4 by @crazy-max (#50)
• Update dev dependencies by @crazy-max (#51)
• Bump semver from 7.3.7 to 7.3.8 (#49)
• Bump json5 from 2.2.1 to 2.2.3 (#53)
• Bump chalk from 5.1.2 to 5.2.0 (#52)

Full Changelog: v2.0.0...v2.1.0

v2.0.0

• Node 16 as default runtime by @crazy-max (#46)
  • This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.
• Remove workaround for setOutput by @crazy-max (#48)
• Update dev dependencies by @crazy-max (#47)
• Bump chalk from 4.1.2 to 5.1.2 (#45)

Full Changelog: v1.3.0...v2.0.0

v1.3.0

• Remove custom SARIF template by @crazy-max (#25)
• Update dev dependencies and workflow by @crazy-max (#24)
• Adds token permissions and security notes by @BretFisher (#28)
• Bump @actions/core from 1.6.0 to 1.10.0 (#42 #44)
• Bump @actions/exec from 1.1.0 to 1.1.1 (#16)
• Bump @actions/http-client from 1.0.11 to 2.0.1 (#39)
• Bump @actions/tool-cache from 1.7.1 to 2.0.1 (#17 #38)
• Bump minimist from 1.2.5 to 1.2.6 (#20)
• Bump semver from 7.3.5 to 7.3.7 (#23)

Full Changelog: v1.2.2...v1.3.0

v1.2.2

• Fix process env for scan exec command (#13)

v1.2.1

• Fix threshold (#12)
• Note about timeout: context deadline exceeded error

v1.2.0

• Update sarif tpl (#8)

v1.1.0

• Rename project

v1.0.2

• Check sarif result (#2)