v5.5.6

What's Changed

Dependency Updates

26 changes

• build(deps): bump fedora from 42 to 43 (#556) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.5.1 to 5.5.2 (#559) @dependabot[bot]
• build(deps): bump github/codeql-action from 4.31.2 to 4.31.7 (#558) @dependabot[bot]
• build(deps): bump actions/checkout from 5.0.0 to 6.0.1 (#557) @dependabot[bot]
• build(deps): bump test/test_helper/bats-assert from f1e9280 to 697471b (#555) @dependabot[bot]
• build(deps): bump test/bats from 832b216 to 33ae886 (#554) @dependabot[bot]
• build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler from 3.2.3 to 3.2.4 (#552) @dependabot[bot]
• build(deps): bump super-linter/super-linter from 8.2.1 to 8.3.0 (#550) @dependabot[bot]
• build(deps): bump super-linter/super-linter from 8.2.0 to 8.2.1 (#549) @dependabot[bot]
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#548) @dependabot[bot]
• build(deps): bump test/test_helper/bats-assert from 3be0fb7 to f1e9280 (#546) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.30.0 to 4.31.2 (#547) @dependabot[bot]
• build(deps): bump test/bats from 855844b to 832b216 (#545) @dependabot[bot]
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#544) @dependabot[bot]
• build(deps): bump super-linter/super-linter from 7.4.0 to 8.2.0 (#541) @dependabot[bot]
• build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler from 3.2.2 to 3.2.3 (#539) @dependabot[bot]
• build(deps): bump actions/labeler from 5.0.0 to 6.0.1 (#540) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#542) @dependabot[bot]
• build(deps): bump docker/login-action from 3.5.0 to 3.6.0 (#543) @dependabot[bot]
• build(deps): bump test/test_helper/bats-file from 0f24d00 to c0bb8ef (#531) @dependabot[bot]
• build(deps): bump test/test_helper/bats-support from 0ad082d to 0954abb (#532) @dependabot[bot]
• build(deps): bump test/test_helper/bats-assert from 912a988 to 3be0fb7 (#533) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.29.2 to 3.30.0 (#534) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 (#535) @dependabot[bot]
• build(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#536) @dependabot[bot]
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#538) @dependabot[bot]

Full Changelog: v5.5.5...v5.5.6

v5.5.5

What's Changed

Bug Fixes

• Use csgrep to embed context before csdiff comparison (#527) @jamacku

Dependency Updates

15 changes

• deps: update csutils to 3.5.5 (#528) @jamacku
• build(deps): bump fedora from ee88ab8 to 6beec36 (#521) @dependabot[bot]
• build(deps): bump test/test_helper/bats-support from d007fc1 to 0ad082d (#519) @dependabot[bot]
• build(deps): bump test/test_helper/bats-file from c0e3a26 to 0f24d00 (#518) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 (#524) @dependabot[bot]
• build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler from 3.2.1 to 3.2.2 (#520) @dependabot[bot]
• build(deps): bump test/test_helper/bats-assert from b93143a to 912a988 (#522) @dependabot[bot]
• build(deps): bump test/bats from 5ec2d81 to 855844b (#523) @dependabot[bot]
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#525) @dependabot[bot]
• build(deps): bump test/bats from fed179f to 5ec2d81 (#512) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.4.2 to 5.4.3 (#517) @dependabot[bot]
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#516) @dependabot[bot]
• build(deps): bump docker/build-push-action from 6.16.0 to 6.18.0 (#515) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 (#514) @dependabot[bot]
• build(deps): bump super-linter/super-linter from 7.3.0 to 7.4.0 (#513) @dependabot[bot]

Full Changelog: v5.5.4...v5.5.5

v5.5.4

What's Changed

Documentation

• Update workflow example 🌟 (#490) @jamacku

Other changes

• fix: Make defects log valid for full scan (#511) @soemiran

Dependency Updates

22 changes

• build(deps): bump test/bats from 3172a45 to fed179f (#509) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 (#508) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 (#507) @dependabot[bot]
• build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 (#506) @dependabot[bot]
• build(deps): bump fedora from 41 to 42 (#505) @dependabot[bot]
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 (#497) @dependabot[bot]
• build(deps): bump docker/login-action from 3.3.0 to 3.4.0 (#498) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.13 (#499) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.3.1 to 5.4.0 (#500) @dependabot[bot]
• build(deps): bump test/bats from 7ca23b1 to 3172a45 (#501) @dependabot[bot]
• build(deps): bump test/test_helper/bats-support from 9bf10e8 to d007fc1 (#502) @dependabot[bot]
• build(deps): bump test/test_helper/bats-file from 0cd35d3 to c0e3a26 (#503) @dependabot[bot]
• build(deps): bump test/test_helper/bats-assert from e2d855b to b93143a (#504) @dependabot[bot]
• build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (#495) @dependabot[bot]
• build(deps): bump docker/build-push-action from 6.13.0 to 6.15.0 (#494) @dependabot[bot]
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#493) @dependabot[bot]
• build(deps): bump super-linter/super-linter from 7.2.1 to 7.3.0 (#492) @dependabot[bot]
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 (#491) @dependabot[bot]
• build(deps): bump codecov/codecov-action from 5.0.7 to 5.3.1 (#486) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 (#487) @dependabot[bot]
• build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.9.0 (#488) @dependabot[bot]
• build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler from 3.2.0 to 3.2.1 (#489) @dependabot[bot]

Full Changelog: v5.5.3...v5.5.4

v5.5.3

What's Changed

Bug Fixes

• Don't fail when base branch is out of date ⛔ (#484) @jamacku

Documentation

• Update example configuration to run only on upstream repository (#483) @jamacku

Dependency Updates

8 changes

• build(deps): bump test/test_helper/bats-file from 7d839ca to 0cd35d3 (#474) @dependabot[bot]
• build(deps): bump test/bats from 3cad1df to 7ca23b1 (#475) @dependabot[bot]
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 (#476) @dependabot[bot]
• build(deps): bump docker/build-push-action from 6.9.0 to 6.13.0 (#477) @dependabot[bot]
• build(deps): bump release-drafter/release-drafter from 6.0.0 to 6.1.0 (#478) @dependabot[bot]
• build(deps): bump super-linter/super-linter from 7.1.0 to 7.2.1 (#479) @dependabot[bot]
• build(deps): bump github/codeql-action from 3.27.5 to 3.28.8 (#480) @dependabot[bot]
• build(deps): bump fedora from 9cfb3a7 to 3ec60eb (#481) @dependabot[bot]

Full Changelog: v5.5.2...v5.5.3

v5.5.2

What's Changed

Bug Fixes

• fix: check if base sha exists (#482) @jamacku

Full Changelog: v5.5.1...v5.5.2

v5.5.1

What's Changed

Bug Fixes

• Include git-lfs in the image to avoid issues with projects using it

Maintenance

• Improve debugging even more 🕵️ (#472) @jamacku

Full Changelog: v5.5.0...v5.5.1

v5.5.0

What's Changed

New

• Remove hardcoded github.com references in the code (#469) @barzaka12
• feat: fail when running in a shallow git repository 🦒 (#468) @jamacku
• feat: Make SARIF file more compact to allow for more findings to be uploaded to GitHub 🐘 (#467) @jamacku
• Use Fedora 41 as base image & update ShellCheck to 0.10.0 (#466) @jamacku

Maintenance

• feat: improve debugging (#471) @jamacku
• update csdiff to 3.5.0 & update fedora container (#452) @jamacku

Dependency Updates

18 changes

• build(deps): bump fedora from d0207db to 3ec60eb (#459) @dependabot
• build(deps): bump test/test_helper/bats-file from 048aa4c to 7d839ca (#464) @dependabot
• build(deps): bump test/bats from b640ec3 to 3cad1df (#465) @dependabot
• build(deps): bump actions/checkout from 4.2.0 to 4.2.2 (#454) @dependabot
• build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 (#455) @dependabot
• build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.1 (#458) @dependabot
• build(deps): bump test/bats from 89a7fae to b640ec3 (#461) @dependabot
• build(deps): bump github/codeql-action from 3.26.10 to 3.27.5 (#462) @dependabot
• build(deps): bump codecov/codecov-action from 4.5.0 to 5.0.7 (#463) @dependabot
• build(deps): bump test/bats from 190c7c9 to 89a7fae (#448) @dependabot
• build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (#451) @dependabot
• build(deps): bump docker/build-push-action from 6.7.0 to 6.9.0 (#450) @dependabot
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.10 (#449) @dependabot
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 (#445) @dependabot
• build(deps): bump docker/build-push-action from 6.5.0 to 6.7.0 (#444) @dependabot
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0 (#443) @dependabot
• build(deps): bump super-linter/super-linter from 6.8.0 to 7.1.0 (#442) @dependabot
• build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.6.1 (#441) @dependabot

Full Changelog: v5.4.0...v5.5.0

v5.4.0

What's Changed

New

• Support merge_group event natively (#433) @masaru-iritani

Automation and CI changes

• Update Differential ShellCheck workflow (#440) @jamacku
• Run differential ShellCheck on merge_group (#434) @masaru-iritani

Dependency Updates

• build(deps): bump super-linter/super-linter from 6.7.0 to 6.8.0 (#439) @dependabot
• build(deps): bump docker/login-action from 3.2.0 to 3.3.0 (#438) @dependabot
• build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 (#437) @dependabot
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 (#436) @dependabot
• build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 (#435) @dependabot

Full Changelog: v5.3.1...v5.4.0

v5.3.1

What's Changed

Bug Fixes

• Don't throw away untracked files when run locally 📟 (#409) @jamacku

Documentation

• Update token permissions documentation 🗝️ (#418) @jamacku

Dependency Updates

18 changes

• build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 (#431) @dependabot
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 (#430) @dependabot
• deps: update csdiff to v3.4.0 (#429) @jamacku
• build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (#424) @dependabot
• build(deps): bump docker/build-push-action from 5.3.0 to 6.4.0 (#425) @dependabot
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 (#426) @dependabot
• build(deps): bump super-linter/super-linter from 6.6.0 to 6.7.0 (#427) @dependabot
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 (#428) @dependabot
• build(deps): bump docker/login-action from 3.1.0 to 3.2.0 (#412) @dependabot
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 (#419) @dependabot
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.11 (#420) @dependabot
• build(deps): bump codecov/codecov-action from 4.3.0 to 4.5.0 (#421) @dependabot
• build(deps): bump super-linter/super-linter from 6.5.1 to 6.6.0 (#422) @dependabot
• build(deps): bump test/bats from 902578d to 190c7c9 (#423) @dependabot
• build(deps): bump actions/checkout from 4.1.4 to 4.1.6 (#414) @dependabot
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#415) @dependabot
• build(deps): bump super-linter/super-linter from 6.4.1 to 6.5.1 (#416) @dependabot
• build(deps): bump test/bats from a751f3d to 902578d (#411) @dependabot

Full Changelog: v5.3.0...v5.3.1

v5.3.0

What's Changed

New

• Update to csdiff 3.3.0 🐾 (#408) @jamacku
• Add support for different display engines (csgrep, sarif-fmt) 🚀 (#406) @jamacku

Maintenance

• Add support functions for future CLI ⚡ (#405) @jamacku

Other changes

• Add mention about sarif-tools - conversion tool 🐢 (#404) @jamacku

Full Changelog: v5.2.0...v5.3.0