v0.12.1

🔧 Maintenance 🔧

• Refactor(config): Extract the supplemental merge step @ModeSevenIndustrialSolutions (#59)

Links

• Submit bugs/feature requests

v0.12.0

✨ New Features ✨

• Feat: Support a supplemental per-org allow-list @ModeSevenIndustrialSolutions (#50)

Links

• Submit bugs/feature requests

Release v0.11.1

Automated release for v0.11.1

v0.4.0

✨ New Features ✨

• Feat: Disable GitHub CLI telemetry by default @ModeSevenIndustrialSolutions (#58)

Links

• Submit bugs/feature requests

v0.3.0

✨ New Features ✨

• Feat: Add sole-org fallback for config resolution @ModeSevenIndustrialSolutions (#45)

🐛 Bug Fixes 🐛

• Fix: resolve zizmor auditor persona findings @ModeSevenIndustrialSolutions (#29)

🔧 Maintenance 🔧

• CI(actions): Bump release-drafter/release-drafter from 7.3.1 to 7.4.0 @dependabot[bot] (#20)
• CI(actions): Bump lfreleng-actions/draft-release-promote-action from 0.1.3 to 0.1.4 @dependabot[bot] (#23)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.5.0 to 0.6.0 @dependabot[bot] (#22)
• CI(actions): Bump actions/checkout from 6.0.3 to 7.0.0 @dependabot[bot] (#21)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#24)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.6.0 to 0.7.0 @dependabot[bot] (#25)
• CI(actions): Bump lfreleng-actions/tag-validate-action from 1.0.2 to 1.0.4 @dependabot[bot] (#26)
• CI(actions): Bump actions/setup-python from 6.2.0 to 6.3.0 @dependabot[bot] (#27)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#28)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#30)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.7.2 to 0.7.4 @dependabot[bot] (#32)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#33)
• CI(actions): Bump step-security/harden-runner from 2.19.4 to 2.20.0 @dependabot[bot] (#31)
• Chore: Disable pre-commit.ci autofix PRs @ModeSevenIndustrialSolutions (#37)
• CI(actions): Bump actions/setup-python from 6.3.0 to 7.0.0 @dependabot[bot] (#38)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.7.4 to 0.9.1 @dependabot[bot] (#39)
• CI(actions): Bump actions/checkout from 7.0.0 to 7.0.1 @dependabot[bot] (#40)
• CI(actions): Bump release-drafter/release-drafter from 7.5.1 to 7.6.0 @dependabot[bot] (#41)
• CI(actions): Bump lfreleng-actions/tag-validate-action from 1.0.4 to 1.1.2 @dependabot[bot] (#42)
• Chore: Pin ruff rule selection @ModeSevenIndustrialSolutions (#43)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#36)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#49)
• Refactor: Call the shared release workflow @ModeSevenIndustrialSolutions (#48)
• Chore: Remove the cache-clearing workflow @ModeSevenIndustrialSolutions (#47)
• CI(actions): Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#52)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#53)
• CI(actions): Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#54)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.9.1 to 0.10.1 @dependabot[bot] (#55)
• Refactor: Clear aislop code-quality findings @ModeSevenIndustrialSolutions (#56)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#57)

🎓 Code Quality 🎓

• CI(integration): Exempt self-test from SHA-pin check @ModeSevenIndustrialSolutions (#34)
• Test: prove allow-list format is output-invariant @ModeSevenIndustrialSolutions (#35)
• CI: Clarify shared resolver drift reporting @ModeSevenIndustrialSolutions (#46)

Links

• Submit bugs/feature requests

v0.2.1

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#10)
• CI(actions): Bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#12)
• CI(actions): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#11)
• Chore: remove redundant workflow copies @ModeSevenIndustrialSolutions (#14)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#15)
• CI(actions): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#17)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.3.4 to 0.5.0 @dependabot[bot] (#16)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#18)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#19)

🎓 Code Quality 🎓

• CI(actions): Bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#12)
• CI(actions): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#11)
• CI(integration): Exempt self-test from pin audits @ModeSevenIndustrialSolutions (#13)
• CI(actions): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#17)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.3.4 to 0.5.0 @dependabot[bot] (#16)

Links

• Submit bugs/feature requests

v0.2.0

✨ New Features ✨

• Feat: Add git-pinnable config allow-list source @ModeSevenIndustrialSolutions (#9)

Links

• Submit bugs/feature requests

v0.1.0

✨ New Features ✨

• Feat: Implement allow-list loader as Node.js action @ModeSevenIndustrialSolutions (#7)

🔧 Maintenance 🔧

• CI(actions): Bump step-security/harden-runner from 2.19.1 to 2.19.2 @dependabot[bot] (#4)
• CI(actions): Bump release-drafter/release-drafter from 7.2.1 to 7.3.0 @dependabot[bot] (#3)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-verify-github-actions.yaml from 0.3.3 to 0.3.4 @dependabot[bot] (#2)
• CI(actions): Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.3.3 to 0.3.4 @dependabot[bot] (#1)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#6)
• CI(actions): Bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#8)

Links

• Submit bugs/feature requests