Skip to content

v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@qartik qartik released this 05 Oct 13:20
v0.3.0
0d1545d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new

  • Add --pin to upgrade action references to full 40-character commit SHAs with exact release version comments.
  • Automatically upgrade existing SHA pins whose comments begin with a stable semver version, preserving pins, surrounding comments, and YAML formatting.
  • Select the highest eligible stable exact release for pins, honor --cooldown-days without downgrading, and resolve lightweight and annotated tags to commits.

Bare SHA pins remain skipped. Existing exact-version pins advance only to newer releases; repointing the same tag does not refresh a pin.

Maintenance

  • Update golang.org/x/term and golang.org/x/sys. Building from source now requires Go 1.26 or newer.
  • Add an MIT license, security policy, Dependabot configuration, and CI concurrency controls.

Changes

  • feat: pin actions to exact release commits (#13)
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.46.0 (#12)
  • chore: add project community baseline (#11)

Full changelog: v0.2.3...v0.3.0

Assets 5
Loading