Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

poutine 0.11.0 #174581

Merged
Merged

Conversation

fproulx-boostsecurity
Copy link
Contributor

Created with brew bump-formula-pr.

release notes
# Changelog for `poutine` v0.11.0 🚀

New Features 🌟

  • GitHub Actions Security: Added detection for the usage of GitHub Actions debug variables. (#88)
  • Vulnerability Scanning: Introduced provider-level vulnerability scanning. A draft version of Gitlab on-premise / GitHub Enterprise CVE checks. (#90)
  • GitHub Pages Documentation: Launched Hugo geekdoc theme and added rendering and deployment for GitHub Pages documentation. Documentation can be found at https://boostsecurityio.github.io/poutine/ (#91, #92)

Improvements 🔧

  • Enhanced --scm-base-url option to be more robust, more lenient to different formats. (#95)
  • Updated GitHub Action workflow configurations for improved path handling. (#96)
  • Improved documentation links to point to GitHub Pages and updated README. (#97, #103)
  • Enhanced enumeration in GetOrgRepos for more accurate GitHub organization repository listings. (#118)

Fixes 🛠️

  • Improved version range detection in CVE database. (#116)
  • Fixed issues with debug_enabled flag on steps and improved error handling. (#117)
  • Various improvements to Git error handling, including trimming whitespace and redacting tokens in errors. (#120, #121)

Dependency Updates ⬆️

  • Multiple dependencies have been updated to their latest versions, improving security and stability:
    • Actions and GitHub Integrations: Updated actions/create-github-app-token, actions/setup-go, goreleaser/goreleaser-action, github/codeql-action, and more. (PRs #104 to #108)
    • Go Libraries: Updated github.com/rs/zerolog, github.com/package-url/packageurl-go, github.com/hashicorp/go-version, github.com/schollz/progressbar/v3, github.com/open-policy-agent/opa, and others. (PRs #109 to #113, #111)

Contributions 🤝

  • Welcome to new contributors @ledo01 and @rgmz for their first contributions! (#95, #103)

Full Changelog 📜

For a detailed diff, see the full changelog.

@github-actions github-actions bot added go Go use is a significant feature of the PR or issue bump-formula-pr PR was created using `brew bump-formula-pr` labels Jun 14, 2024
autobump: add poutine

Signed-off-by: Rui Chen <[email protected]>
@github-actions github-actions bot added automerge-skip `brew pr-automerge` will skip this pull request autobump labels Jun 14, 2024
@chenrui333 chenrui333 removed the automerge-skip `brew pr-automerge` will skip this pull request label Jun 14, 2024
Copy link
Contributor

@github-actions github-actions bot added the CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. label Jun 14, 2024
@BrewTestBot BrewTestBot added this pull request to the merge queue Jun 14, 2024
Merged via the queue into Homebrew:master with commit 657f00b Jun 14, 2024
14 checks passed
@fproulx-boostsecurity fproulx-boostsecurity deleted the bump-poutine-0.11.0 branch June 25, 2024 20:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
autobump bump-formula-pr PR was created using `brew bump-formula-pr` CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. go Go use is a significant feature of the PR or issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants