gh-actions-lock 0.1.6

What's Changed

• Add SHA-pinned Dependency Review workflow by @nodeselector in #83
• Re-verify locked pins on the default run, and surface verify failures by @nodeselector in #85
• Switch to public package mirror by @nodeselector in #89
• Update warning message to 'Technical Preview' by @Steve-Glass in #90
• Support self-referencing $/ uses: syntax in the pin tool by @nodeselector in #84
• Add --relock to bump moved branch and version refs by @nodeselector in #88
• Prune deleted workflows from the lockfile on a full scan by @nodeselector in #87
• Make local-action migration default-on with a --no-migrate-local-actions opt-out by @nodeselector in #92
• Don't count about-to-be-pinned workflows as failed by @nodeselector in #86
• Skip branch scans for symbolic action refs by @nodeselector in #93
• Support hosted Dependabot through REST-only GitHub API access by @nodeselector in #94
• Support sequential release candidate tags by @nodeselector in #95
• Require manually pushed release tags by @nodeselector in #97

New Contributors

• @Steve-Glass made their first contribution in #90

Full Changelog: https://github.com/github/gh-actions-lock/commits/v0.1.6