Skip to content

v1.6.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Apr 00:39
· 139 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.6.1
28bfb84
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Bug Fixes

  • fix: GitHub collector now works in monorepo/workspace subdirectory scans (#281) — The github collector previously failed silently when scanning subdirectories (e.g. individual Cargo workspace members) because they have no .git directory. It now uses opts.GitRoot to resolve the remote from the repo root, matching the pattern used by all other git-aware collectors. Also adds a git CLI fallback when go-git cannot open repos with extensions.worktreeConfig=true (common with git worktrees).

Dependencies

  • bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 (#285)
  • bump the go-minor-patch group with 5 updates (#280, #282)
  • bump actions/setup-go from 6.3.0 to 6.4.0 (#286)
  • bump anchore/sbom-action from 0.23.1 to 0.24.0 (#284)
  • bump github/codeql-action from 4.32.6 to 4.35.1 (#279, #283, #288)
  • bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#287)

New Contributor

  • @TheFermiSea made their first contribution in #281 — thanks for fixing GitHub collector support for Cargo workspaces! 🎉

Full Changelog: v1.6.0...v1.6.1

Contributors

TheFermiSea
Assets 18
Loading