v0.10.45

New Checks:

• LicenseGroupsCheck: validate the licenses metadata/license-mapping.conf (@arthurzam)

New Features:

• pkgcheck scan licenses: the licenses directory is now a proper scan target with its own licenses scope (@arthurzam, #712)
• pkgcheck scan: take job tokens from the jobserver in MAKEFLAGS, so a scan run by a build shares its pool of jobs rather than assuming the machine is idle; one check always runs untokened, and the rest start as tokens turn up, capped by --jobs and by how much work is waiting (@arthurzam)
• pkgcheck scan --commits: the git checks now run in parallel with all the others, instead of alone on the main process once the rest had finished (@arthurzam)
• New GithubReporter, emitting results as GitHub Actions workflow commands so they render as error/warning/notice annotations on the run summary and inline in pull request diffs (@arthurzam)

Fixes:

• pkgcheck scan: fail the scan when a worker process dies from a signal (@arthurzam, https://bugs.gentoo.org/982440)
• pkgcheck scan --commits <ref>: the ref is now honoured throughout. A bare ref is read as <ref>..HEAD rather than as that single commit, and the git checks parse the range that was scanned instead of always using the remote (@arthurzam)
• pkgcheck scan --commits: compare against the merge base instead of the remote tip, so packages changed on the remote after branching are no longer scanned along with your own commits (@arthurzam)
• pkgcheck scan --commits/--staged: a ref shaped like a git option is no longer parsed as one, e.g. --commits=--output=file made git truncate that file (@arthurzam)
• pkgcheck scan --commits: metadata/md5-cache is no longer stashed. The scan rewrites it, which made git stash pop fail and leave the stashed work behind (@arthurzam)