v1.1.1

1.1.1 (2026-06-26)

Bug Fixes

• retry major-tag move to survive transient 422 after release merge (#24) (59d6199)

v1.1.0

1.1.0 (2026-06-26)

Features

• add composite actions (privacy-scan, komodo-deploy) (#14) (fe2bcde)
• add gitleaks + privacy-scan reusables and pre-commit hook (#13) (2843cba)
• add pip-audit + trivy reusable workflows (#18) (a9e3134)
• add release-please + zero-cooldown automerge for shared reusables (#19) (69f6b8b)
• add reusable cleanup-ghcr workflow (#15) (1d7cdf2)
• enable transitiveRemediation for Renovate (fd8b7c7)
• extract reusable workflows + actions automerge in preset (#12) (fd888e6)

Bug Fixes

• add Node.js 24.x setup to Dependabot validate workflow (#9) (c56440a)
• disable gitleaks PR comments to keep least-privilege (#16) (fce34f0)
• grant gitleaks pull-requests: read for PR commit scan (#17) (46bccad)
• parse release version from PRS json; tag-move via API (no checkout) (#23) (6bab1e3)
• prevent script injection via validate-command input (#5) (c2f695e)
• use PAT for release-please so its PR triggers the required check (#21) (f7aa8b5)