v0.6.2

🐛 Bug Fixes 🐛

• Fix: Retry the Grype install with backoff @lf-releng-code-monkey-bot[bot] (#63)

Links

• Submit bugs/feature requests

v0.6.1

🐛 Bug Fixes 🐛

• Fix(validate): Escape rejected values in the log @lf-releng-code-monkey-bot[bot] (#61)

🔧 Maintenance 🔧

• Chore: Drop Python 3.10 support @lf-releng-code-monkey-bot[bot] (#59)

Links

• Submit bugs/feature requests

v0.6.0

✨ New Features ✨

• Feat: Add a validate-only mode @lf-releng-code-monkey-bot[bot] (#57)

Links

• Submit bugs/feature requests

v0.5.1

🐛 Bug Fixes 🐛

• Fix(only-fixed): Require a published fix version @lf-releng-code-monkey-bot[bot] (#54)

🔧 Maintenance 🔧

• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#52)

🎓 Code Quality 🎓

• CI: Bump harden-runner-block-action to v0.15.0 @lf-releng-code-monkey-bot[bot] (#51)

Links

• Submit bugs/feature requests

v0.5.0

✨ New Features ✨

• Feat(gating): Add a remediation window @lf-releng-code-monkey-bot[bot] (#47)

🔧 Maintenance 🔧

• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#40)
• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#41)
• CI(actions): Bump step-security/harden-runner from 2.22.1 to 2.22.2 @dependabot[bot] (#43)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.13.1 to 0.14.0 @dependabot[bot] (#44)
• CI(actions): Bump lfreleng-actions/security-workflows/.github/workflows/openssf-scorecard.yaml from 0.9.4 to 0.9.5 @dependabot[bot] (#42)
• Chore: Drop the executable bit from helpers @ModeSevenIndustrialSolutions (#46)

🎓 Code Quality 🎓

• CI: Move Scorecard to security-workflows lane @ModeSevenIndustrialSolutions (#39)
• CI: Bump pinned workflow actions to latest @lf-releng-code-monkey-bot[bot] (#49)

Links

• Submit bugs/feature requests

v0.4.0

✨ New Features ✨

• Feat(provenance): Classify cargo-cyclonedx graphs @ModeSevenIndustrialSolutions (#38)

Links

• Submit bugs/feature requests

v0.3.0

✨ New Features ✨

• Feat(gating): Gate only what the project declared @ModeSevenIndustrialSolutions (#25)

🔧 Maintenance 🔧

• Docs: Add repository AGENTS.md stub @ModeSevenIndustrialSolutions (#28)
• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#30)
• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#32)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#33)
• CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 @dependabot[bot] (#34)
• CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#35)
• CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#36)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#37)

🎓 Code Quality 🎓

• CI(lint): Enforce basedpyright across all code @ModeSevenIndustrialSolutions (#29)

Links

• Submit bugs/feature requests

v0.2.0

✨ New Features ✨

• Feat(gating): Gate only when dependencies change @ModeSevenIndustrialSolutions (#24)

🔧 Maintenance 🔧

• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#20)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#21)
• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#23)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#26)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#27)

🎓 Code Quality 🎓

• CI(lint): Adopt self-repository syntax and template linting @ModeSevenIndustrialSolutions (#22)

Links

• Submit bugs/feature requests

v0.1.0

✨ New Features ✨

• Feat: Own the Grype DB cache with a rotating key @ModeSevenIndustrialSolutions (#14)

🔧 Maintenance 🔧

• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.11.1 @dependabot[bot] (#5)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.0.4 to 0.1.0 @dependabot[bot] (#6)
• CI(actions): Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#7)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#9)
• Chore: Replace LICENSE symlink with regular file @ModeSevenIndustrialSolutions (#8)
• CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.11.1 to 0.12.1 @dependabot[bot] (#12)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#11)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#13)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#15)
• CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#16)
• CI(actions): Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#17)
• CI(actions): Bump anchore/scan-action/download-grype from 7.4.0 to 7.4.2 @dependabot[bot] (#18)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#19)

Links

• Submit bugs/feature requests

v0.0.2

🐛 Bug Fixes 🐛

• Fix(bypass): Anchor approval to labelled title @ModeSevenIndustrialSolutions (#4)

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#2)

Links

• Submit bugs/feature requests