v3.3.2

Compare Source

What's Changed

• Fixed readme with new segment timeout values by @​kotewar in https://github.com/actions/cache/pull/1133
• Readme fixes by @​kotewar in https://github.com/actions/cache/pull/1134
• Updated description of the lookup-only input for main action by @​kotewar in https://github.com/actions/cache/pull/1130
• Change two new actions mention as quoted text by @​bishal-pdMSFT in https://github.com/actions/cache/pull/1131
• Update Cross-OS Caching tips by @​pdotl in https://github.com/actions/cache/pull/1122
• Bazel example (Take #​2️⃣) by @​vorburger in https://github.com/actions/cache/pull/1132
• Remove actions to add new PRs and issues to a project board by @​jorendorff in https://github.com/actions/cache/pull/1187
• Consume latest toolkit and fix dangling promise bug by @​chkimes in https://github.com/actions/cache/pull/1217
• Bump action version to 3.3.2 by @​bethanyj28 in https://github.com/actions/cache/pull/1236

New Contributors

• @​vorburger made their first contribution in https://github.com/actions/cache/pull/1132
• @​jorendorff made their first contribution in https://github.com/actions/cache/pull/1187
• @​chkimes made their first contribution in https://github.com/actions/cache/pull/1217
• @​bethanyj28 made their first contribution in https://github.com/actions/cache/pull/1236

Full Changelog: actions/cache@v3...v3.3.2

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v4.7.1

Compare Source

What's Changed

• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in https://github.com/actions/setup-python/pull/702
• Add range validation for toml files by @​dmitry-shibanov in https://github.com/actions/setup-python/pull/726

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

Compare Source

In scope of this release, the support for reading python version from pyproject.toml was added (https://github.com/actions/setup-python/pull/669).

      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version-file: pyproject.toml

Besides, it includes such changes as:

• Bump tough-cookie and @​azure/ms-rest-js by @​dependabot in https://github.com/actions/setup-python/pull/697
• Bump semver from 7.3.8 to 7.5.2 by @​dependabot in https://github.com/actions/setup-python/pull/692
• Fix typos found by codespell by @​DimitriPapadopoulos in https://github.com/actions/setup-python/pull/650

New Contributors

• @​dariocurr made their first contribution in https://github.com/actions/setup-python/pull/669
• @​DimitriPapadopoulos made their first contribution in https://github.com/actions/setup-python/pull/650

Full Changelog: actions/setup-python@v4...v4.7.0

v3.1.3

Compare Source

What's Changed

• chore(github): remove trailing whitespaces by @​ljmf00 in https://github.com/actions/upload-artifact/pull/313
• Bump @​actions/artifact version to v1.1.2 by @​bethanyj28 in https://github.com/actions/upload-artifact/pull/436

Full Changelog: actions/upload-artifact@v3...v3.1.3

v5.3.0

Compare Source

Features

• Use Node.js 20 in action (#​240) (4c0d5a2)

v0.12.0

Compare Source

What's Changed

• chore(deps): Update trivy to v0.43.1 by @​simar7 in https://github.com/aquasecurity/trivy-action/pull/243
• ci: add workflow to bump trivy by @​nikpivkin in https://github.com/aquasecurity/trivy-action/pull/245
• Update README.md to change the example to the new default brach name … by @​jdsmithit in https://github.com/aquasecurity/trivy-action/pull/234
• feat(trivy): Bump to v0.45.0 by @​simar7 in https://github.com/aquasecurity/trivy-action/pull/256

New Contributors

• @​nikpivkin made their first contribution in https://github.com/aquasecurity/trivy-action/pull/245
• @​jdsmithit made their first contribution in https://github.com/aquasecurity/trivy-action/pull/234

Full Changelog: aquasecurity/trivy-action@0.11.2...0.12.0

v0.11.2

Compare Source

Full Changelog: aquasecurity/trivy-action@0.11.1...0.11.2

v0.11.1

Compare Source

What's Changed

• bump trivy to v0.42.1 by @​danielchabr in https://github.com/aquasecurity/trivy-action/pull/240

Full Changelog: aquasecurity/trivy-action@0.11.0...0.11.1

v0.11.0

Compare Source

What's Changed

• Include args when using trivy config file by @​hermanwh in https://github.com/aquasecurity/trivy-action/pull/231
• bump trivy to v0.42.0 by @​danielchabr in https://github.com/aquasecurity/trivy-action/pull/237
• Enhance GitHub Dependency Snapshot upload by @​abriko in https://github.com/aquasecurity/trivy-action/pull/233
• feat: add exit-code parameter to sarif format by @​rogercoll in https://github.com/aquasecurity/trivy-action/pull/213

New Contributors

• @​hermanwh made their first contribution in https://github.com/aquasecurity/trivy-action/pull/231
• @​danielchabr made their first contribution in https://github.com/aquasecurity/trivy-action/pull/237
• @​abriko made their first contribution in https://github.com/aquasecurity/trivy-action/pull/233
• @​rogercoll made their first contribution in https://github.com/aquasecurity/trivy-action/pull/213

Full Changelog: aquasecurity/trivy-action@0.10.0...0.11.0

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 by @​crazy-max in https://github.com/docker/build-push-action/pull/880

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/build-push-action/pull/811 https://github.com/docker/build-push-action/pull/838 https://github.com/docker/build-push-action/pull/855 https://github.com/docker/build-push-action/pull/860 https://github.com/docker/build-push-action/pull/875
• e2e: quay.io by @​crazy-max in https://github.com/docker/build-push-action/pull/799 https://github.com/docker/build-push-action/pull/805
• e2e: local harbor and nexus by @​crazy-max in https://github.com/docker/build-push-action/pull/800
• e2e: add artifactory container registry to test against by @​jedevc in https://github.com/docker/build-push-action/pull/804
• e2e: add distribution tests by @​jedevc in https://github.com/docker/build-push-action/pull/814 https://github.com/docker/build-push-action/pull/815

Full Changelog: docker/build-push-action@v4.0.0...v4.1.0

v2.10.0

Compare Source

What's Changed

• Bump @​docker/actions-toolkit from 0.7.1 to 0.10.0 by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/258
• Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/setup-buildx-action/pull/253

Full Changelog: docker/setup-buildx-action@v2.9.1...v2.10.0

v2.9.1

Compare Source

• Bump @​docker/actions-toolkit from 0.7.0 to 0.7.1 in https://github.com/docker/setup-buildx-action/pull/248
  • Fixes an issue where building Buildx does not match the local platform (https://github.com/docker/actions-toolkit/pull/135)

Full Changelog: docker/setup-buildx-action@v2.9.0...v2.9.1

v2.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.6.0 to 0.7.0 in https://github.com/docker/setup-buildx-action/pull/246
  • Adds support to cache Buildx binary to hosted tool cache and GHA cache backend

Full Changelog: docker/setup-buildx-action@v2.8.0...v2.9.0

v2.8.0

Compare Source

• Only set specific flags for drivers supporting them by @​nicks in https://github.com/docker/setup-buildx-action/pull/241
• Bump @​docker/actions-toolkit from 0.5.0 to 0.6.0 in https://github.com/docker/setup-buildx-action/pull/242

Full Changelog: docker/setup-buildx-action@v2.7.0...v2.8.0

v2.7.0

Compare Source

• Bump @​docker/actions-toolkit from 0.3.0 to 0.5.0 in https://github.com/docker/setup-buildx-action/pull/237 https://github.com/docker/setup-buildx-action/pull/238

Full Changelog: docker/setup-buildx-action@v2.6.0...v2.7.0

v2.6.0

Compare Source

• Set node name for k8s driver when appending nodes by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/219
• Bump @​docker/actions-toolkit from 0.1.0-beta.18 to 0.3.0 in https://github.com/docker/setup-buildx-action/pull/220 https://github.com/docker/setup-buildx-action/pull/229 https://github.com/docker/setup-buildx-action/pull/231 https://github.com/docker/setup-buildx-action/pull/236

Full Changelog: docker/setup-buildx-action@v2.5.0...v2.6.0

v2.2.7

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (1d65299)

v2.2.6

Compare Source

Miscellaneous Chores

• deps: update docker.io/nginxinc/nginx-unprivileged:1.25.2 docker digest to fe07657 (a37be67)

v2.2.5

Compare Source

Miscellaneous Chores

• deps: update github/codeql-action action to v2.21.9 (9a68e0d)

v2.2.4

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (#​353) (cb70b4b)

v2.2.3

Compare Source

Miscellaneous Chores

• deps: update docker.io/nginxinc/nginx-unprivileged:1.25.2 docker digest to 436017b (5823d58)

v2.2.2

Compare Source

Bug Fixes

• changelog generation breaks if no annotations are defined (#​351) (a67e1e7)

v2.2.1

Compare Source

Miscellaneous Chores

• deps: update github-actions (#​343) (9504517)

v2.2.0

Compare Source

Features

• added helm schema-gen plugin (#​350) (20d8600)

v2.1.33

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (#​349) (9b7f6cc)

v2.1.32

Compare Source

Miscellaneous Chores

• deps: update docker.io/nginxinc/nginx-unprivileged:1.25.2 docker digest to acdde1b (bdc0fed)

v2.1.31

Compare Source

Miscellaneous Chores

• deps: update github-actions (#​344) (8300979)

v2.1.30

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (cb687f1)

v2.1.29

Compare Source

Miscellaneous Chores

• deps: update docker.io/nginxinc/nginx-unprivileged:1.25.2 docker digest to 23f009b (ccb8beb)

v2.0.9

Compare Source

Miscellaneous Chores

• deps: update dependency hl7/fhir-ig-publisher to v1.4.2 (963733e)

v2.0.8

Compare Source

Miscellaneous Chores

• deps: update github-actions (dd82fc4)

v2.0.7

Compare Source

CI/CD

• fix tag for semantic release (94eff77)

Miscellaneous Chores

• deps: update docker.io/library/eclipse-temurin:11-jre docker digest to fa8625d (9b0d4a4)

v2.0.6

Compare Source

Miscellaneous Chores

• deps: update github-actions (f3d1d61)

v2.0.5

Compare Source

Miscellaneous Chores

• deps: update docker.io/library/eclipse-temurin:11-jre docker digest to 996b126 (102fbed)

v2.22.0

Compare Source

v2.21.9

Compare Source

v2.21.8

Compare Source

v2.21.7

Compare Source

v2.21.6

Compare Source

v2.21.5

Compare Source

v2.21.4

Compare Source

v2.21.3

Compare Source

v2.21.2

Compare Source

v2.21.1

Compare Source

v2.21.0

Compare Source

v2.20.4

Compare Source

v2.20.3

Compare Source

v2.20.2

Compare Source

v2.20.1

Compare Source

v2.20.0

Compare Source

v3.7.12

Compare Source

Bug Fixes

• bump release-please from 15.12.0 to 15.13.0 (#​813) (01b3219)

v3.7.11

Compare Source

Bug Fixes

• bump release-please from 15.11.0 to 15.12.0 (#​790) (21e064e)

v3.7.10

Compare Source

Bug Fixes

• bump release-please from 15.10.4 to 15.11.0 (#​778) (18e5fcf)

v1.1.0

Compare Source

The action now adds the path of the failed wrapper Jar as a failed-wrapper Step output parameter.
This makes the value available for reporting in later Steps/Jobs.

v1.8.0

Compare Source

What's Changed

• #​54 ignore the occasional post delete cluster by @​jerry153fish in https://github.com/helm/kind-action/pull/79
• bump kind to v0.20.0 and script cleanup by @​cpanato in https://github.com/helm/kind-action/pull/88

New Contributors

• @​jerry153fish made their first contribution in https://github.com/helm/kind-action/pull/79

Full Changelog: helm/kind-action@v1.7.0...v1.8.0

v2.3.0

Compare Source

v3.1.2

Compare Source

What's Changed

• Fix build and push step Readme missing id by @​hbenali in https://github.com/sigstore/cosign-installer/pull/138
• bump cosign to v2.2.0 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/142

New Contributors

• @​hbenali made their first contribution in https://github.com/sigstore/cosign-installer/pull/138

Full Changelog: sigstore/cosign-installer@v3...v3.1.2

v3.1.1

Compare Source

What's Changed

• default cosign to v2.1.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/137

Full Changelog: sigstore/cosign-installer@v3.1.0...v3.1.1

v3.1.0

Compare Source

What's Changed

• update job to use latest action release by @​cpanato in https://github.com/sigstore/cosign-installer/pull/130
• Update action example for keyless signing as xarg is not required by @​jbtrystram in https://github.com/sigstore/cosign-installer/pull/132
• update examples by @​cpanato in https://github.com/sigstore/cosign-installer/pull/133
• bump cosign to default to release v2.1.0 and update docs by @​cpanato in https://github.com/sigstore/cosign-installer/pull/136

New Contributors

• @​jbtrystram made their first contribution in https://github.com/sigstore/cosign-installer/pull/132

Full Changelog: sigstore/cosign-installer@v3.0.5...v3.1.0

v1.9.0

Compare Source

Release [v1.9.0] includes bug fixes and new features.

See the full change list.

v1.9.0: BYOB framework (beta)

• New: A new framework to turn GitHub Actions into SLSA compliant builders.

v1.9.0: Maven builder (beta)

• New: A Maven builder to build Java projects and publish to Maven central.

v1.9.0: Gradle builder (beta)

• New: A Gradle builder to build Java projects and publish to Maven central.

v1.9.0: JReleaser builder

• New: A JReleaser builder that wraps the official JReleaser Action.

v1.8.0

Compare Source

Release [v1.8.0] includes bug fixes and new features.

See the full change list.

v1.8.0: Generic Generator

• Added: A new
  base64-subjects-as-file
  was added to allow for specifying a large subject list.

v1.8.0: Node.js Builder (beta)

• Fixed: Publishing for non-scoped packages was fixed (See
  #​2359)
• Fixed: Documentation was updated to clarify that the GitHub Actions
  deployment event is not supported.
• Changed: The file extension for the generated provenance file was changed
  from .sigstore to .build.slsa in order to make it easier to identify
  provenance files regardless of file format.
• Fixed: The publish action was fixed to address an issue with the package
  name when using Node 16.

v1.7.0

Compare Source

This release includes the first beta release of the
Container-based builder.
The Container-based builder provides a GitHub Actions reusable workflow that can
be used to invoke a container image with a user-specified command to generate an
artifact and SLSA Build L3 compliant provenance.

v1.7.0: Go builder

• Added: A new
  go-version-file
  input was added. This allows you to specify a go.mod file in order to track
  which version of Go is used for your project.