·
15 commits
to main
since this release
Changelog
- c21feed Add a security policy
- c9c9caa Bump actions/checkout from 6.0.2 to 7.0.1
- 89bc4b5 Bump actions/create-github-app-token from 3.1.1 to 3.2.0
- d541125 Bump actions/setup-go from 6.4.0 to 7.0.0
- 4d91838 Bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2
- b462198 Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
- 7f35827 Bump ossf/scorecard-action from 2.4.3 to 2.4.4
- f98823d Bump x/text past the advisories it dragged into the graph
- 5d9c00b Drive the p2 table build from the manifest via rio plan
- 8d8329a Fuzz the parsers that read untrusted input
- ba86ee6 Group the action families Dependabot keeps splitting apart
- 16dbb93 Keep merge commits out of the generated release notes
- 00457e2 Lead the README with the same badge row scat carries
- b843331 Lead the README with what rio is, not with the p2 case
- 796ec1f Let the groupId be the whole bundle symbolic name
- f58bc6a Move both attestation actions to v4 together
- 74253a9 Move every codeql-action step to 4.37.9 in one go
- 1503535 Refuse malformed tool input with a message, not a traceback
- e57894b Run CodeQL on every commit instead of only Go changes
- dd4e6ab Search the Maven qualifiers an OSGi version cannot express
- 1aef25a fix adding signings