v0.8.0

Update PRs now share one body layout: the same table and lockfile section for every kind. Also: failure-path tests no longer add annotations to CI runs, and saveExact moved from .npmrc to pnpm-workspace.yaml.

Features

• Make update PR bodies say the same things the same way by @valuecodes in #28

Other

• Keep failure-path tests from adding annotations to CI runs by @valuecodes in #27
• Move saveExact from .npmrc to pnpm-workspace.yaml by @valuecodes in #29

Full Changelog: v0.7.0...v0.8.0

v0.7.0

Both workflows' logic now lives in TypeScript under src/, run by Node.js as is and checked by oxlint and knip. The catalog pick that turned 26.6.5 into 26.14.13 is fixed, CI scans the git history for committed secrets with gitleaks, and the trust boundary around the scripts checkout is documented and checked before the token steps.

Features

• Move the dashboard's steps to TypeScript and add oxlint and knip by @valuecodes in #22
• Move the update steps and the audit job to TypeScript by @valuecodes in #24
• Scan this repo's git history for committed secrets with gitleaks by @valuecodes in #25
• Document the trust boundary and check the scripts checkout before the token steps by @valuecodes in #26

Fixes

• Fix the catalog pick that turned 26.6.5 into 26.14.13 by @valuecodes in #23

Full Changelog: v0.6.2...v0.7.0

v0.6.2

The run summary now explains why a lockfile resolution failed, and the resolve diagnostics mask JSON and bare token shapes.

Features

• Diagnose failed lockfile resolutions in the run summary by @valuecodes in #20

Fixes

• Mask JSON and bare token shapes in the resolve diagnostics by @valuecodes in #21

Full Changelog: v0.6.1...v0.6.2

v0.6.1

Documentation-only release: the docs now name the version file instead of repeating the exact version, and explain that bot-opened update PRs run CI once someone approves them.

What's Changed

Other

• Name the version file in docs instead of the exact version by @valuecodes in #18
• Say bot-opened update PRs run CI once approved by @valuecodes in #19

Full Changelog: v0.6.0...v0.6.1

v0.6.0

This release adds a reusable workflow that opens update PRs in caller repos.

Features

• Add a reusable workflow that opens update PRs by @valuecodes in #17

Full Changelog: v0.5.0...v0.6.0

v0.5.0

The maintenance dashboard now states each fact once and names the cause of its state in the issue title.

Features

• Say each dashboard fact once and name the cause in the title by @valuecodes in #16

Full Changelog: v0.4.0...v0.5.0

v0.4.0

The maintenance dashboard gains a supply chain section, and it now runs in this repo's CI with its state shown in the issue title.

Features

• Add a supply chain section to the maintenance dashboard by @valuecodes in #14
• Run the dashboard in CI and show its state in the issue title by @valuecodes in #15

Full Changelog: v0.3.3...v0.4.0

v0.3.3

The maintenance dashboard issue now opens with a summary table and alerts.

Features

• Add a summary table and alerts to the maintenance dashboard issue by @valuecodes in #13

Full Changelog: v0.3.2...v0.3.3

v0.3.2

The maintenance dashboard issue now links back to this repo.

Features

• Link the maintenance dashboard issue to this repo by @valuecodes in #12

Full Changelog: v0.3.1...v0.3.2

v0.3.1

Runs actionlint and zizmor as separate jobs in the reusable workflow-lint workflow. Callers' checks are renamed from workflow-lint / workflow-lint to workflow-lint / actionlint and workflow-lint / zizmor; update any required-check settings that name the old check.

Other

• Run actionlint and zizmor as separate jobs in workflow-lint by @valuecodes in #11

Full Changelog: v0.3.0...v0.3.1