v0.2.0

Changelog

• c21feed Add a security policy
• c9c9caa Bump actions/checkout from 6.0.2 to 7.0.1
• 89bc4b5 Bump actions/create-github-app-token from 3.1.1 to 3.2.0
• d541125 Bump actions/setup-go from 6.4.0 to 7.0.0
• 4d91838 Bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2
• b462198 Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
• 7f35827 Bump ossf/scorecard-action from 2.4.3 to 2.4.4
• f98823d Bump x/text past the advisories it dragged into the graph
• 5d9c00b Drive the p2 table build from the manifest via rio plan
• 8d8329a Fuzz the parsers that read untrusted input
• ba86ee6 Group the action families Dependabot keeps splitting apart
• 16dbb93 Keep merge commits out of the generated release notes
• 00457e2 Lead the README with the same badge row scat carries
• b843331 Lead the README with what rio is, not with the p2 case
• 796ec1f Let the groupId be the whole bundle symbolic name
• f58bc6a Move both attestation actions to v4 together
• 74253a9 Move every codeql-action step to 4.37.9 in one go
• 1503535 Refuse malformed tool input with a message, not a traceback
• e57894b Run CodeQL on every commit instead of only Go changes
• dd4e6ab Search the Maven qualifiers an OSGi version cannot express
• 1aef25a fix adding signings

v0.1.1

Changelog

• dd60371 Merge pull request #16 from rebaze/15-cask-quarantine
• 91eb2ea Strip com.apple.quarantine in the generated cask

v0.1.0

Changelog

• a364947 Act on the review: discovery, manifest, index, installer and README
• 3d88c69 Add end-to-end tests and extend CI
• f53a53c Bring Tycho's Maven-shaped p2 purls into scope
• 0573b4c Create colors.md
• e8d52fc Create details.md
• 216f9da Create long.md
• f22cb2e Enforce the no-network promise and make the shellcheck step self-installing
• ee76074 Fix a stale typed view, gate scope and an absolute path in the index
• 091d04f Give the CodeQL and Scorecard jobs actions: read
• da218c5 Give the CodeQL and Scorecard jobs contents: read
• 571d07b Harden the DependencyTrack upload example and give it a test suite
• 5782354 Implement rio normalize end to end
• fdb3dc9 Implement §6.3's absent-purl case and validate resolved coordinates
• 444f341 Initial commit
• c1e7efb Initial commit: rio CLI scaffold
• 84cea29 Make the installer test suite pass on Linux as well as macOS
• 67366df Merge pull request #11 from rebaze/4-normalize
• 1e25342 Move the supporting tools into tools/ and document them there
• ac49d50 Run the SHA-1 stage by default instead of hiding it behind --search
• b6fdca4 Scaffold rio normalize: layout, deps, CycloneDX document layer
• cea24e1 Support nesting uploaded projects under a parent in DependencyTrack
• 1b8590b Treat an offline cache miss as unknown rather than absent
• eb87a75 Update README.md
• 598641b Update README.md
• b1078b0 Update README.md
• 4c742f7 Update README.md
• b9f2e86 Update colors.md
• b7053ba Update details.md
• aae0c21 Update long.md
• c8d9e9c Use com.example rather than a customer name in docs and fixtures
• f5cbc3d helper tool creating BSN to GAV mapping for eclipse
• d57b7ec init
• 2de2047 samples