2.0.1

What's Changed

Bug Fixes

• Increase the get-build-number v1→v2 migration seed buffer from 1000 to 10000 so newly claimed numbers do not collide with historical v1 Artifactory build-info (#351, PREQ-8673)
• Guard remaining steps.secrets.outputs.vault JSON lookups so empty Vault output does not cause post-job JToken parse errors (#347, BUILD-11835)
• Make .actions symlink setup idempotent on Windows so nested composite actions no longer fail with cannot overwrite directory (#344, BUILD-12536)

Documentation

• Document BUILD_NUMBER reuse across actions that wrap get-build-number (#346, BUILD-11805)
• Remove the obsolete Cirrus-to-GitHub migration guide (#349, BUILD-12282)

Internal & Chores

• Upgrade this repo's pre-commit CI to gh-action_pre-commit@v2 (#345, BUILD-12282)

Full Changelog: 2.0.0...2.0.1

2.0.0

Caution

Breaking change. get-build-number, config-maven, config-pip, and config-uv now require:

    permissions:
      contents: write

What's Changed

Bug Fixes

• (#336, PREQ-7781) Fixed a race condition where concurrent workflow runs (e.g. several GitHub Stacked PRs opened at once) could be assigned the same build number. Claiming now uses atomic Git references (refs/build-number/<N>) instead of a non-atomic repository-property.
  The manual BUILD_NUMBER output/env passthrough between jobs some workflows used as a cross-job reuse workaround is no longer necessary.
  See the Git References section of the README for the full reference table, and Inspecting current refs for how to check the current build number or a workflow run's claimed number directly via git ls-remote.
  See also the xtranet/Platform/BUILD_NUMBER - GitHub page.

Internal & Chores

• (#337, BUILD-12243) Moved verify-sca to the sonar-xs runner.

---

Migration

Update every caller's permissions: block: contents: read → contents: write. This includes get-build-number, config-maven,
config-pip, and config-uv.

Remove any manual BUILD_NUMBER output/env passthrough between jobs, as the new atomic Git reference mechanism handles this automatically.

Remove any parent workflow's get-build-number step if it was only used to pass a synchronized build number to child workflows.

Full Changelog: 1.8.9...2.0.0

1.8.9

What's Changed

Improvements

• config-pip: Export ARTIFACTORY_URL, ARTIFACTORY_USERNAME, and ARTIFACTORY_ACCESS_TOKEN as environment variables, so callers no longer need to retrieve their own Artifactory tokens to route pip/Pipfile installs through Repox. (PREQ-7838 — #333 by @alex-meseldzija-sonarsource)

Documentation

• config-pip: Fix README usage example order — config-pip must run before actions/setup-python, otherwise setup-python's internal pip install --upgrade pip step hits public PyPI directly before pip is routed through Repox. (PREQ-7805 — #334 by @julien-carsique-sonarsource)

New Contributors

• @alex-meseldzija-sonarsource made their first contribution in #333

Full Changelog: 1.8.8...1.8.9

1.8.8

What's Changed

Bug Fixes

• Route Develocity Gradle plugin resolution through Repox when use-develocity: true, fixing SSL/PKIX failures against plugins.gradle.org (#332, BUILD-12123)

Improvements

• Run config-pip before pre-commit so pip upgrades resolve via Repox instead of pypi.org (#332, BUILD-12123)

Documentation

• Remove outdated runner recommendation from the README (#331, PREQ-7671)

Full Changelog: 1.8.7...1.8.8

1.8.7

What's Changed

Bug Fixes

• PREQ-7525: Accept plain-text success from multiRepoPromote by @tomverin in #330

Fixes a regression in 1.8.6 where multi-repo promote jobs failed even after a successful Artifactory promotion, because the plugin returns plain text (Promoted …) rather than JSON.

Full Changelog: 1.8.6...1.8.7

1.8.6

What's Changed

Bug Fixes

• PREQ-7501: Bump jfrog-cli to 2.115.0 across remaining actions by @tomverin in #327
• PREQ-7525 Fail promote job when multi-repo promotion API call returns an error by @henryju in #329
• PREQ-7452 Maven build: normalize Windows backslash paths when pushing artifacts by @mary-georgiou in #326

New Contributors

• @mary-georgiou made their first contribution in #326

Full Changelog: 1.8.5...1.8.6

1.8.5

Bug Fixes

• BUILD-11536: Prefer Vault token over workflow GH_TOKEN in get-build-number #323
• BUILD-12007: Bump jfrog-cli in config-uv to 2.115.0 for jf uv support #325

Full Changelog: 1.8.4...1.8.5

1.8.4

What's Changed

Bug Fixes

• Validate BUILD_NUMBER before exporting it in get-build-number, closing a gap where a cache hit or an externally-provided BUILD_NUMBER env var could carry a corrupted or empty value straight through unchecked (#319, PREQ-7260)

New Contributors

• @Tim-Pohlmann made their first contribution in #319

Full Changelog: 1.8.3...1.8.4

1.8.3

What's Changed

⚡ Improvements

• config-poetry: Reach 100% code coverage in the test suite (test-only change, no behavior impact). (BUILD-11718 — #318 by @hedinasr)

🐛 Bug Fixes

• config-uv: Fix mise local config restore when callers set a non-default working-directory — cleanup now runs at the workspace root instead of inside the working directory, so rm mise.local.toml no longer fails. (PREQ-7293 — #321 by @hedinasr)

Full Changelog: 1.8.2...1.8.3

1.8.2

What's Changed

Improvements

• Update GitHub actions by @renovate[bot] in #282

  Package	Type	Update	Change
  SonarSource/gh-action_cache	action	minor	v1.6.0 → v1.7.2
  SonarSource/unified-dogfooding-actions	action	minor	1.0.0 → 1.1.0
  SonarSource/vault-action-wrapper	action	minor	3.5.0 → 3.6.1
  actions/attest-build-provenance	action	patch	v4.1.0 → v4.1.1
  actions/cache	action	minor	v5.0.5 → v5.1.0
  actions/checkout	action	patch	v6.0.2 → v6.0.3
  gradle/actions	action	minor	v6.1.0 → v6.2.0
  jdx/mise-action	action	minor	v4.0.1 → v4.2.0

• Update 6 pre-commit hooks in .pre-commit-config.yaml, bumped by hand via pre-commit autoupdate --freeze

  Package	Type	Update	Change
  pre-commit/pre-commit-hooks	pre-commit-hook	major	v4.6.0 → v6.0.0
  adrienverge/yamllint	pre-commit-hook	minor	v1.35.1 → v1.38.0
  python-jsonschema/check-jsonschema	pre-commit-hook	minor	0.28.6 → 0.37.4
  igorshubovych/markdownlint-cli	pre-commit-hook	minor	v0.41.0 → v0.49.0
  renovatebot/pre-commit-hooks	pre-commit-hook	minor	43.76.3 → 43.252.5
  rhysd/actionlint	pre-commit-hook	minor	v1.7.1 → v1.7.12

• Update GitHub actions (major) by @renovate[bot] in #313

  Package	Type	Update	Change
  actions/cache	action	major	v5.1.0 → v6.1.0
  actions/checkout	action	major	v6.0.3 → v7.0.0

• Update dependency mise to 2026.6.14 by @renovate[bot] in #266

Full Changelog: 1.8.1...1.8.2