Releases: wangxpych/lockfile-review
Release list
v0.1.1
Maintenance release for the GitHub Action runtime and repository automation.\n\nChanges:\n- Update the Docker Action runtime from Alpine 3.22 to Alpine 3.24.\n- Update official workflows to actions/checkout@v7 and actions/setup-go@v7.\n- Recommend the maintained wangxpych/lockfile-review@v0 tag in usage examples.\n\nThe lockfile review rules and CLI interface are unchanged.
v0.1.0
First public release of lockfile-review.\n\nHighlights:\n- Review pnpm v9 dependency intent without installing packages.\n- Detect unrelated lockfile changes and unexpected downgrades.\n- Detect package.json/root importer drift and semantic-only YAML churn.\n- Use as a Docker GitHub Action or a cross-platform single-file CLI.\n- Declare expected targets for lockfile-only security updates.\n\nSee the README and changelog for usage and current scope.