3.1.1

What's Changed

• Update a bunch of dependencies, including major version upgrades for octokit, @actions/github and typescript.

Full Changelog: v3.1.0...v3.1.1

3.1.0

What's New

Added support for dependencies submitted through the dependency submission API. This includes two new configuration parameters: retry-on-snapshot-warnings and retry-on-snapshot-warnings-timeout.

What's Changed

• Fix(docs): Correct action input name by @oerd in #551

New Contributors

• @oerd made their first contribution in #551

Full Changelog: v3...v3.1.0

3.0.8

What's Changed

Added on-failure option to comment-summary-in-pr setting by @sgmurphy in #540

Previous configuration files using true/false for comment-summary-in-pr will be mapped automatically to the new values, but we encourage you to update to always/on-failure/never.

New Contributors

• @sgmurphy made their first contribution in #540

Full Changelog: v3...v3.0.8

3.0.7

What's Changed

• Make GHES support / setup more clear by @rajbos in #534
• Add an option to deny packages or groups of packages by @adrienpessu in #544

New Contributors

• @rajbos made their first contribution in #534
• @adrienpessu made their first contribution in #544

Full Changelog: v3...v3.0.7

3.0.6

Fixes a bug introduced in 3.0.5 where we raised PURL errors when Dependency Graph returns an empty package_url.

3.0.5

What's Changed

Thanks to @theztefan, we now have a new allow-dependencies-licenses option that takes a list of dependencies that will be excluded from license checks. See the configuration options for more information on how to use it.

• Exclude dependencies from license checks by @theztefan in #423
• Documentation examples by @theztefan in #423
• Show snapshot warnings in the summary by @juxtin in #439
• Fix default values for fail-on-severity by @febuiles in #451
• Updated dependencies.

New Contributors

• @juxtin made their first contribution in #439
• @theztefan made their first contribution in #423

Full Changelog: v3...v3.0.5

3.0.4

What's New?

The Action can now publish a comment in the pull request if the comment-summary-in-pr option is set. More information can be found in the README.

New Contributors

• @davelosert made their first contribution in #393

Changelog

• Write Summary as comment to the pull request by @davelosert in #393
• Adjust summary format by @davelosert in #416
• Security updates.

Full Changelog: v3...v3.0.4

3.0.3

What's Changed

• Use cache in check-dist.yml by @jongwooo in #359
• Fix Dependency Review API response error handling by @felickz in #370
• Security updates

New Contributors

• @jongwooo made their first contribution in #359
• @felickz made their first contribution in #370

Full Changelog: v3...v3.0.3

3.0.2

This release fixes spelling errors #348 and upgrades dependencies to fix known vulnerabilities

Full Changelog: v3...v3.0.2

3.0.1

This release contains the following bugfixes:

• Fixing API URL for GHES: #331
• Improve list handling for external config files: #330

Full Changelog: v3...v3.0.1