v2.0.0

Rewritten in Go.

⚠️ Breaking Changes

• The github-actions-cli Python package is no longer maintained; v1.2.5 is its last release. Use the
  gh actions-update GitHub CLI extension, or the standalone gh-actions-update binary from the releases page
• Removed the analyze-orgs command
• Log messages are hidden by default: -v shows progress messages, -vv debug details
• GH_TOKEN takes precedence over GITHUB_TOKEN, as in the GitHub CLI
• Local workflow paths are shown relative to the repository root (.github/workflows/ci.yml)
• The commit message option is --commit-msg (the old -commit-msg spelling still works)

🚀 Features

• --update and --commit-msg work without spelling out update-actions: gh actions-update --update
• Latest releases are looked up in parallel, and each action repository is queried only once
• Works from any directory inside a local clone, not only its root
• list-actions accepts a workflow file name: gh actions-update list-actions ci.yml
• Actions are listed in the order they appear in the workflow
• --version option
• Prebuilt binaries for FreeBSD, 32-bit Linux (x86 and ARM), 32-bit Windows and Windows on ARM

🐛 Bug Fixes

• fix: An action pinned to the commit SHA of its latest release was reported as outdated
• fix: Updating actions/checkout@v4 could also rewrite actions/checkout@v4.1.0 in the same workflow (to @v5.0.0.1.0)
• fix: --update rewrote or committed every workflow, including those without updates
• fix: A workflow that isn't valid YAML no longer aborts the scan; it is skipped with a warning

Full Changelog: v1.2.5...v2.0.0

v1.2.5

🚀 Features

• Distribute as a precompiled GitHub CLI extension: gh extension install dsoftwareinc/gh-actions-update
• Fall back to GH_TOKEN and then gh auth token when GITHUB_TOKEN is not set
• Add python -m gha_cli entry point

🐛 Bug Fixes

• fix: --major-only wrote the full version (e.g. v7.0.1) into the first workflow using an action instead of the major tag (v7)
• fix: An action pinned to a commit SHA was only flagged as outdated the first time it appeared; later workflows using it showed no update
• fix: A SHA pin that doesn't exist in the action's repository no longer crashes the scan

Full Changelog: v1.2.4...v1.2.5

v1.2.4

v1.2.4

🐛 Bug Fixes

• fix: Support action names with sub-paths (e.g. actions/upload-artifact/merge) #8
• fix: UnicodeDecodeError reading workflow files on Windows — always open with UTF-8 encoding #5
• fix: UnboundLocalError when a repository has no releases
• fix: PyGitHub deprecation warning — use Auth.Token instead of login_or_token

🧪 Tests

• Add test suite with pytest and pytest-mock

Full Changelog: v1.2.3...v1.2.4

v1.2.3

What's Changed

• Migrate to uv

🐛 Bug Fixes

• fix: Comparison can be timezone aware

New Contributors

• @eco-JoshuaJackson made their first contribution in #10

Full Changelog: v1.2.2...v1.2.3

v1.2.2

🐛 Bug Fixes

• fix: Update versions
• fix: error when repository is not found'

Full Changelog: v1.2.1...v1.2.2

v1.2.1

🚀 Features

• Support for updating major action versions only with --major-only flag.

🐛 Bug Fixes

• fix: Workflow path is enumerated, but does not exist any longer by @amotl in #4

Full Changelog: v1.1.1...v1.2.1

v1.1.1

🚀 Features

• Format output string to be more readable.
• Scan and analyze GitHub organizations and repositories.

v1.0.1

🚀 Features

• Support default action to list actions requiring update without updating.
• Update GitHub actions to their latest release tag on local repo or remote repo.

Full Changelog: https://github.com/dsoftwareinc/github-actions-cli/commits/v1.0.1