Releases: lfreleng-actions/security-workflows
Releases · lfreleng-actions/security-workflows
Release list
v0.6.1
Immutable
release. Only release title and notes can be modified.
🎓 Code Quality 🎓
- CI: Bump allow-list pin and quieten repeat summaries @ModeSevenIndustrialSolutions (#91)
Links
v0.6.0
Immutable
release. Only release title and notes can be modified.
✨ New Features ✨
- Feat: Expose lane outputs and assert on them @ModeSevenIndustrialSolutions (#82)
Links
v0.5.3
Immutable
release. Only release title and notes can be modified.
🔧 Maintenance 🔧
- CI(actions): Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8 @dependabot[bot] (#83)
- CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.0.5 to 0.2.1 @dependabot[bot] (#88)
- CI(actions): Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 @dependabot[bot] (#86)
- CI(actions): Bump github/codeql-action/init from 4.37.7 to 4.37.8 @dependabot[bot] (#85)
- CI(actions): Bump lfreleng-actions/maven-xml-settings-action from 0.1.0 to 0.1.1 @dependabot[bot] (#84)
- CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.5 to 0.2.1 @dependabot[bot] (#87)
Links
v0.5.2
Immutable
release. Only release title and notes can be modified.
🐛 Bug Fixes 🐛
- Fix: Honour go.mod toolchain and wire Sonar coverage @ModeSevenIndustrialSolutions (#76)
🔧 Maintenance 🔧
- Chore: Replace LICENSE symlink with regular file @ModeSevenIndustrialSolutions (#78)
- Chore: Bump maven-build-action to v0.4.2 @askb (#81)
Links
v0.5.1
Immutable
release. Only release title and notes can be modified.
v0.5.0
Immutable
release. Only release title and notes can be modified.
✨ New Features ✨
- Feat: Audit examples/ with actionlint and zizmor @ModeSevenIndustrialSolutions (#71)
🐛 Bug Fixes 🐛
- Fix: Close CLM checkout gap and record audit evidence @ModeSevenIndustrialSolutions (#73)
Links
v0.4.0
Immutable
release. Only release title and notes can be modified.
✨ New Features ✨
Links
v0.3.1
Immutable
release. Only release title and notes can be modified.
🐛 Bug Fixes 🐛
🔧 Maintenance 🔧
- Chore: pre-commit autoupdate @pre-commit-ci[bot] (#52)
- CI(actions): Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#62)
- CI(actions): Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 @dependabot[bot] (#63)
- CI(actions): Bump github/codeql-action/init from 4.37.6 to 4.37.7 @dependabot[bot] (#64)
- CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.3.0 @dependabot[bot] (#65)
- CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.0.4 to 0.0.5 @dependabot[bot] (#66)
- CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.4 to 0.0.5 @dependabot[bot] (#67)
- CI(actions): Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 @dependabot[bot] (#68)
- Chore: Bump harden-runner allow-list to v0.16.0 @ModeSevenIndustrialSolutions (#69)
Links
v0.3.0
Immutable
release. Only release title and notes can be modified.
✨ New Features ✨
- Feat: Add a Go build_type to the Sonatype Lifecycle lane @keanjapesan (#38)
🐛 Bug Fixes 🐛
- Fix: Name the repository on every Gerrit checkout @ModeSevenIndustrialSolutions (#46)
🔧 Maintenance 🔧
- CI(actions): Bump lfreleng-actions/gradle-build-action from 0.5.0 to 0.6.0 @dependabot[bot] (#25)
- CI(actions): Bump github/codeql-action/analyze from 4.37.0 to 4.37.3 @dependabot[bot] (#26)
- CI(actions): Bump lfreleng-actions/build-metadata-action from 0.7.0 to 0.7.1 @dependabot[bot] (#27)
- CI(actions): Bump github/codeql-action/init from 4.37.0 to 4.37.3 @dependabot[bot] (#28)
- CI(actions): Bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.3 @dependabot[bot] (#29)
- Chore: pre-commit autoupdate @pre-commit-ci[bot] (#30)
- CI(actions): Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#31)
- CI(actions): Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 @dependabot[bot] (#32)
- CI(actions): Bump github/codeql-action/init from 4.37.3 to 4.37.6 @dependabot[bot] (#33)
- CI(actions): Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 @dependabot[bot] (#34)
- CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.3 to 0.0.4 @dependabot[bot] (#36)
- CI(actions): Bump lfreleng-actions/build-metadata-action from 0.7.1 to 0.8.0 @dependabot[bot] (#37)
- CI(actions): Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#35)
- Chore: pre-commit autoupdate @pre-commit-ci[bot] (#45)
- Chore: Bump the allow-list pin to v0.14.0 @ModeSevenIndustrialSolutions (#47)
Links
v0.2.1
Immutable
release. Only release title and notes can be modified.
🐛 Bug Fixes 🐛
- Fix: Make the egress policy inputs take effect @ModeSevenIndustrialSolutions (#24)
🔧 Maintenance 🔧
- Refactor: Call the shared cache-clearing workflow @ModeSevenIndustrialSolutions (#19)
- Refactor: Call the shared release workflow @ModeSevenIndustrialSolutions (#23)