v0.6.4

🔧 Maintenance 🔧

• CI(actions): Bump lfreleng-actions/grype-scan-action from 0.2.0 to 0.4.0 @dependabot[bot] (#118)
• CI(actions): Bump lfreleng-actions/sbom-action from 0.3.0 to 0.4.0 @dependabot[bot] (#117)

Links

• Submit bugs/feature requests

v0.6.3

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#100)
• CI(actions): Bump lfreleng-actions/repository-metadata-action from 0.3.1 to 0.3.2 @dependabot[bot] (#101)
• CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#102)
• CI(actions): Bump release-drafter/release-drafter from 7.8.0 to 7.10.0 @dependabot[bot] (#103)
• CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#104)
• CI(actions): Bump lfreleng-actions/sbom-action from 0.2.0 to 0.3.0 @dependabot[bot] (#105)
• CI(actions): Bump actions/download-artifact from 8.0.1 to 8.0.2 @dependabot[bot] (#106)
• CI(actions): Bump lfreleng-actions/go-test-action from 0.1.1 to 0.1.2 @dependabot[bot] (#107)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#108)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#109)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.3 to 0.10.4 @dependabot[bot] (#110)
• CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.3 to 0.10.0 @dependabot[bot] (#111)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#112)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#114)
• Chore: Bump harden-runner allow-list to v0.17.2 @lf-releng-code-monkey-bot[bot] (#115)
• Chore: Drop Go 1.25 from examples and CI @ModeSevenIndustrialSolutions (#116)

🎓 Code Quality 🎓

• CI: Move Scorecard to security-workflows lane @ModeSevenIndustrialSolutions (#113)

Links

• Submit bugs/feature requests

v0.6.2

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#94)
• CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.8.0 @dependabot[bot] (#95)
• CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.1.0 to 1.1.2 @dependabot[bot] (#96)
• CI(actions): Bump lfreleng-actions/grype-scan-action from 0.1.0 to 0.2.0 @dependabot[bot] (#97)
• Chore: Modernise attestation and verify commands @ModeSevenIndustrialSolutions (#99)

Links

• Submit bugs/feature requests

v0.6.1

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#66)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#82)
• CI(actions): Bump lfreleng-actions/go-test-action from 0.1.0 to 0.1.1 @dependabot[bot] (#83)
• CI(actions): Bump lfreleng-actions/grype-scan-action from 0.0.2 to 0.1.0 @dependabot[bot] (#84)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#85)
• Docs: Add repository AGENTS.md stub @ModeSevenIndustrialSolutions (#86)
• CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.0 to 0.8.2 @dependabot[bot] (#87)
• CI(actions): Bump lfreleng-actions/sbom-action from 0.0.2 to 0.1.0 @dependabot[bot] (#88)
• CI(actions): Bump lfreleng-actions/tag-validate-action from 1.1.6 to 1.1.7 @dependabot[bot] (#89)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#90)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#91)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#92)

🎓 Code Quality 🎓

• CI: Adopt the self-repository reference syntax @ModeSevenIndustrialSolutions (#81)
• CI(actions): Bump action and allow-list pins @ModeSevenIndustrialSolutions (#93)

Links

• Submit bugs/feature requests

v0.6.0

✨ New Features ✨

• Feat(cbom): Add informational CBOM generation job @ModeSevenIndustrialSolutions (#80)

🔧 Maintenance 🔧

• CI(actions): Bump lfreleng-actions/go-audit-action from 0.0.1 to 0.0.2 @dependabot[bot] (#75)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.2.2 to 0.3.1 @dependabot[bot] (#76)
• CI(actions): Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#77)
• CI(actions): Bump lfreleng-actions/go-build-action from 0.0.1 to 0.0.2 @dependabot[bot] (#78)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.1 @dependabot[bot] (#79)

Links

• Submit bugs/feature requests

v0.5.1

🔧 Maintenance 🔧

• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.11.1 to 0.12.1 @dependabot[bot] (#69)
• CI(actions): Bump lfreleng-actions/tag-validate-action from 1.1.4 to 1.1.6 @dependabot[bot] (#70)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.2.0 to 0.2.2 @dependabot[bot] (#71)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.0 to 0.2.2 @dependabot[bot] (#72)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#73)

🎓 Code Quality 🎓

• CI: Bump allow-list pin and quieten repeat summaries @ModeSevenIndustrialSolutions (#74)

Links

• Submit bugs/feature requests

v0.5.0

✨ New Features ✨

• Feat: Audit examples/ with actionlint and zizmor @ModeSevenIndustrialSolutions (#64)
• Feat: Add grype_enabled input to skip the scan @ModeSevenIndustrialSolutions (#67)

🔧 Maintenance 🔧

• CI(actions): Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#54)
• CI(actions): Bump lfreleng-actions/draft-release-promote-action from 0.1.4 to 0.1.5 @dependabot[bot] (#55)
• CI(actions): Bump lfreleng-actions/release-assets-action from 0.1.1 to 0.1.3 @dependabot[bot] (#56)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.0.4 to 0.2.0 @dependabot[bot] (#57)
• CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.0.2 to 1.1.0 @dependabot[bot] (#58)
• CI(actions): Bump lfreleng-actions/repository-metadata-action from 0.2.6 to 0.3.1 @dependabot[bot] (#59)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.4 to 0.2.0 @dependabot[bot] (#60)
• CI(actions): Bump lfreleng-actions/tag-validate-action from 1.1.2 to 1.1.4 @dependabot[bot] (#61)
• CI(actions): Bump lfreleng-actions/sbom-action from 0.0.1 to 0.0.2 @dependabot[bot] (#62)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.11.1 @dependabot[bot] (#63)
• Chore: Replace LICENSE symlink with regular file @ModeSevenIndustrialSolutions (#65)

🎓 Code Quality 🎓

• CI: Remove issues read permission from scan jobs @ModeSevenIndustrialSolutions (#68)

Links

• Submit bugs/feature requests

v0.4.4

🔧 Maintenance 🔧

• Chore: Bump harden-runner allow-list to v0.16.0 @ModeSevenIndustrialSolutions (#53)

Links

• Submit bugs/feature requests

v0.4.3

🐛 Bug Fixes 🐛

• Fix: Name the repository on every Gerrit checkout @ModeSevenIndustrialSolutions (#47)

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#35)
• Refactor: Call the shared cache-clearing workflow @ModeSevenIndustrialSolutions (#33)
• Refactor: Call the shared release workflow @ModeSevenIndustrialSolutions (#34)
• CI(actions): Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#38)
• CI(actions): Bump lfreleng-actions/repository-metadata-action from 0.2.5 to 0.2.6 @dependabot[bot] (#39)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#40)
• CI(actions): Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#41)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.3 to 0.0.4 @dependabot[bot] (#42)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.9.1 to 0.10.1 @dependabot[bot] (#44)
• CI(actions): Bump lfreleng-actions/build-metadata-action from 0.6.1 to 0.8.0 @dependabot[bot] (#45)
• CI(actions): Bump actions/attest-build-provenance from 4.1.1 to 4.2.2 @dependabot[bot] (#43)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#46)
• Chore: Bump the allow-list pin to v0.15.0 @ModeSevenIndustrialSolutions (#48)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#50)

🎓 Code Quality 🎓

• CI: Replace inline Grype scan with shared action @ModeSevenIndustrialSolutions (#51)
• CI(actions): Bump grype-scan-action to v0.0.2 @ModeSevenIndustrialSolutions (#52)

Links

• Submit bugs/feature requests

v0.4.2

🔧 Maintenance 🔧

• CI(actions): Bump lfreleng-actions/build-metadata-action from 0.6.0 to 0.6.1 @dependabot[bot] (#26)
• CI(actions): Bump lfreleng-actions/repository-metadata-action from 0.2.3 to 0.2.5 @dependabot[bot] (#27)
• CI(actions): Bump actions/checkout from 7.0.0 to 7.0.1 @dependabot[bot] (#28)
• CI(actions): Bump lfreleng-actions/tag-validate-action from 1.0.4 to 1.1.2 @dependabot[bot] (#29)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.8.0 to 0.9.1 @dependabot[bot] (#30)
• CI(actions): Bump release-drafter/release-drafter from 7.5.1 to 7.6.0 @dependabot[bot] (#31)
• Chore: Bump harden-runner allow-list to v0.12.2 @ModeSevenIndustrialSolutions (#32)

Links

• Submit bugs/feature requests