chore(deps): update github actions non-major - #40

v0.24.2

Compare Source

Added Features

• bump eslint from 10.8.1 to 10.9.0 [#​724 @​dependabot]

Additional Changes

• add makefile target to bump syft [#​620 @​willmurphyscode]
• update zizmor workflow triggers [#​624 @​wagoodman]
• require zizmor security events [#​621 @​wagoodman]

(Full Changelog)

v0.24.1

Compare Source

v0.24.0

Compare Source

v0.24.0

• chore: update to node 24 + deps (#​614) [@​kzantow]
• chore: update to ES modules (#​595) [@​kzantow]

⬆️ Dependencies

• chore(deps): update Syft to v1.42.3 (#​615) [@​anchore-actions-token-generator[bot]]

v0.23.1

Compare Source

v0.23.1

⬆️ Dependencies

• chore(deps): update Syft to v1.42.2 (#​607) [@​anchore-actions-token-generator[bot]]
• chore(deps): bump fast-xml-parser and all other deps (#​604) [@​dependabot[bot]]

v0.23.0

Compare Source

v0.23.0

• switch to single-file dist build with sub-action flags and update dependencies (#​595) [@​kzantow]
• switch to esbuild (#​590) [@​willmurphyscode]
• update Syft to v1.42.1 (#​599) [@​anchore-actions-token-generator[bot]]

v0.22.2

Compare Source

v0.22.2

⬆️ Dependencies

• chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (#​581) [@​dependabot[bot]]
• chore(deps): update Syft to v1.41.2 (#​582) [@​anchore-actions-token-generator[bot]]
• chore(deps-dev): bump the dev-dependencies group with 2 updates (#​580) [@​dependabot[bot]]
• chore(deps): update Syft to v1.41.1 (#​579) [@​anchore-actions-token-generator[bot]]

v0.22.1

Compare Source

v0.22.1

⬆️ Dependencies

• chore(deps): update Syft to v1.41.0 (#​576) [@​anchore-actions-token-generator[bot]]
• chore(deps): bump lodash from 4.17.21 to 4.17.23 (#​573) [@​dependabot[bot]]

v0.22.0

Compare Source

Changes in v0.22.0

⬆️ Dependencies

• chore(deps-dev): bump the dev-dependencies group with 19 updates (#​566) [@​dependabot]
• chore(deps): bump npm-check-updates from 17.1.3 to 19.3.1 (#​567) [@​dependabot]
• chore(deps): update Syft to v1.40.1 (#​563) [@​anchore-actions-token-generator[bot]]

v0.21.1

Compare Source

Changes in v0.21.1

• chore(deps): update Syft to v1.40.0 (#​562) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.21.0

Compare Source

• chore(deps): update Syft to v1.39.0 (#​561)
• chore(deps): bump @​octokit/request-error, @​octokit/core and @​octokit/webhooks (#​560)
• chore(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#​558)

v0.20.11

Compare Source

Changes in v0.20.11

• update Syft to v1.38.2 (#​557)
• bump @​octokit/plugin-paginate-rest, @​actions/artifact and @​actions/github (#​550) [[dependabot[bot]](https://github.com/dependabot[bot])]
• bump js-yaml (#​552) [[dependabot[bot]](https://github.com/dependabot[bot])]

v0.20.10

Compare Source

Changes in v0.20.10

• chore(deps): update Syft to v1.38.0 (#​548) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.20.9

Compare Source

Changes in v0.20.9

• chore(deps): update Syft to v1.36.0 (#​546) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.20.8

Compare Source

Changes in v0.20.8

• chore(deps): update Syft to v1.34.2 (#​545) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.20.7

Compare Source

Changes in v0.20.7

• chore(deps): update Syft to v1.34.1 (#​544)

v0.20.6

Compare Source

Changes in v0.20.6

• chore(deps): update Syft to v1.33.0 (#​537) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]
• chore: update actions library to resolve critical vulnerability (#​536) [spiffcs]

v0.20.5

Compare Source

Changes in v0.20.5

• Update Syft to v1.31.0 (#​531)

v0.20.4

Compare Source

Changes in v0.20.4

• chore: update Syft to v1.29.0 (#​529)

v0.20.3

Compare Source

Changes in v0.20.3

• Fix: Strip emojis from correlator before using github APIs (#​527) [AndrewHendry]

v0.20.2

Compare Source

Changes in v0.20.2

• Update Syft to v1.28.0 (#​526)

v0.20.1

Compare Source

Changes in v0.20.1

• Update Syft to v1.27.1 (#​525)

v0.20.0

Compare Source

Changes in v0.20.0

• chore(deps): update Syft to v1.24.0 (#​522)

v0.19.0

Compare Source

Changes in v0.19.0

• chore(deps): update Syft to v1.23.0 (#​521)
• chore(deps): bump peter-evans/create-pull-request from 7.0.6 to 7.0.8 (#​519)
• chore(deps): bump cross-spawn (#​514)

v0.18.0

Compare Source

Changes in v0.18.0

• chore(deps): update Syft to v1.19.0 (#​513)
  • See Syft changelog for latest changes

v0.17.9

Compare Source

Changes in v0.17.9

• chore(deps): update Syft to v1.18.1 (#​510) [anchore-actions-token-generator]
• chore(deps): update Syft to v1.18.0 (#​509) [anchore-actions-token-generator]

v0.17.8

Compare Source

Changes in v0.17.8

• chore(deps): update Syft to v1.17.0 (#​507) [anchore-actions-token-generator]

v0.17.7

Compare Source

Changes in v0.17.7

• chore(deps): update Syft to v1.16.0 (#​506) [anchore-actions-token-generator]

v0.17.6

Compare Source

Changes in v0.17.6

• chore(deps): update Syft to v1.15.0 (#​505) [anchore-actions-token-generator]
• chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#​504) [dependabot]

v0.17.5

Compare Source

Changes in v0.17.5

• chore(deps): update Syft to v1.14.2 (#​503) [anchore-actions-token-generator]

v0.17.4

Compare Source

Changes in v0.17.4

• chore(deps): update Syft to v1.14.1 (#​502) [anchore-actions-token-generator]

v0.17.3

Compare Source

Changes in v0.17.3

• chore(deps): update Syft to v1.14.0 (#​498) [anchore-actions-token-generator]

v0.17.2

Compare Source

Changes in v0.17.2

• Update Syft to v1.11.1 (#​485) [anchore-actions-token-generator]

v0.17.1

Compare Source

Changes in v0.17.1

• chore(deps): update Syft to v1.11.0 (#​483) [anchore-actions-token-generator]

v0.17.0

Compare Source

Changes in v0.17.0

• chore(deps): update Syft to v1.9.0 (#​479) [anchore-actions-token-generator]

v0.16.1

Compare Source

Changes in v0.16.1

• fix: workaround windows install issue (#​477) [willmurphyscode]
• fix: allow users to properly use the file input over the default path value (#​471) [komish]
• chore(deps): update Syft to v1.5.0 (#​470) [anchore-actions-token-generator]
• docs: notes for matrix and required permissions (#​469) [kzantow]
• chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#​466) [dependabot]

v0.16.0: v0.16

Compare Source

Changes in v0.16.0

• Update Syft to v1.4.1 (#​465)
• Update GitHub artifact client (#​463) [kzantow]

NOTE: if you are using this action within a matrix build and see failures attempting to upload artifacts with duplicate names, you will need to set the artifact-name to be unique based on the matrix properties (an example here). This is due to a change to use a newer GitHub API which no longer allows artifacts with duplicate names.

v0.15.11

Compare Source

Changes in v0.15.11

• chore(deps): update Syft to v1.3.0 (#​456) [anchore-actions-token-generator]
• chore: remove outdated snapshot workflow (#​457) [spiffcs]
• fix: don't pass in a separate env. This makes it impossible to pass env vars via the action context to syft. (#​455) [iNoahNothing]

v0.15.10

Compare Source

Changes in v0.15.10

• Update Syft to v1.1.0 (#​454)
• Bump Node to v20 on download-syft/publish-sbom actions (#​448) [ViacheslavKudinov]

v0.15.9

Compare Source

Changes in v0.15.9

• reduce syft debug level (#​446) [kzantow]
• update Syft to v0.105.0 (#​442) [anchore-actions-token-generator]

v0.15.8

Compare Source

Changes in v0.15.8

• Update Syft to v0.103.1 (#​441) [anchore-actions-token-generator]

v0.15.7

Compare Source

Changes in v0.15.7

• chore: migrate action to use node v20.11.0 (Iron) FROM node v16.x.x (#​440) [spiffcs]

v0.15.6

Compare Source

Changes in v0.15.6

• chore(deps): update Syft to v0.102.0 (#​438) [anchore-actions-token-generator]

v0.15.5

Compare Source

Changes in v0.15.5

• chore(deps): update Syft to v0.101.1 (#​437) [anchore-actions-token-generator]

v0.15.4

Compare Source

Changes in v0.15.4

• chore(deps): update Syft to v0.101.0 (#​436) [anchore-actions-token-generator]

v0.15.3

Compare Source

Changes in v0.15.3

• chore(deps): update Syft to v0.100.0 (#​435) [anchore-actions-token-generator]

v0.15.2

Compare Source

Changes in v0.15.2

• chore(deps): update Syft to v0.99.0 (#​432) [anchore-actions-token-generator]
• chore: fix github-script invocation in update-snapshots workflow (#​433) [willmurphyscode]

v0.15.1

Compare Source

Changes in v0.15.1

• chore(deps): update Syft to v0.98.0 (#​431) [anchore-actions-token-generator]
• Add config input (#​430) [eyakubovich]
• chore: pin and upgrade gh actions (#​429) [willmurphyscode]

v0.15.0

Compare Source

Changes in v0.14.4

Breaking Changes

• Previously, running on Windows required WSL. Now, running on Windows expects to be run on native windows (#​426) [willmurphyscode].

Other Changes

• pin and upgrade actions/checkout (#​428) [willmurphyscode]
• chore(deps): update Syft to v0.97.1 (#​427) [anchore-actions-token-generator]
• add oss community board auto-add workflow (#​421) [wagoodman]

v0.14.3

Compare Source

Changes in v0.14.3

• update Syft to v0.84.0 (#​418) [anchore-actions-token-generator]

v0.14.2

Compare Source

Changes in v0.14.2

• Update Syft to v0.80.0 (#​415)
• Make sure all invalid artifact name characters are replaced #​396 (#​417) [lts-po]
• Ensure SBOM is copied to output-file (#​411) [gszr]

v0.14.1

Compare Source

Changes in v0.14.1

• chore(deps): update Syft to v0.76.0 (#​403) [anchore-actions-token-generator]

v0.13.4

Compare Source

Changes in v0.13.4

• Added support of workflow artifact's retention policy (#​398) [ViacheslavKudinov]
• Use the correct SHA for dependency snapshots from pull requests (#​401) [juxtin]
• Update Syft to v0.75.0 (#​394) [anchore-actions-token-generator]

v0.13.3

Compare Source

Changes in v0.13.3

• Update Syft to v0.68.1 (#​391) [anchore-actions-token-generator]

v0.13.2

Compare Source

Changes in v0.13.2

• Update Syft to v0.68.0 (#​387) [anchore-actions-token-generator]

v0.13.1

Compare Source

Changes in v0.13.1

• File input not being passed properly to Syft invocation (#​385) [kzantow]
• Update Syft to v0.60.3 (#​386) [anchore-actions-token-generator]

v0.13.0

Compare Source

Changes in v0.13.0

• Allow type "file:..." to enable creation of SBOMs from tar and other package formats (#​357) [malt3]
• Update Syft to v0.59.0 (#​371) [anchore-actions-token-generator]
• Update dependencies and node version (#​372) [kzantow]

v0.12.0

Compare Source

Changes in v0.12.0

• Update dependencies (#​317) kzantow
• Update Syft to v0.53.4 (#​266) anchore-actions-token-generator
• Expose upload-artifact and upload-release-assets inputs (#​277) joshowen
• Document the dependency-snapshot property (#​297) kzantow

v0.11.0

Compare Source

Changes in v0.11.0

• Update GitHub Snapshot to use correlator (#​259) kzantow

v0.10.0

Compare Source

Changes in v0.10.0

• Update Syft to v0.43.2 (#​225)
• Improve SBOM format handling (#​235)

v1.24.1

Compare Source

1.24.1 (2025-01-30)

Bug Fixes

• allow dry parameter to be undefined (2e9dc42)

v1.24.0

Compare Source

1.24.0 (2025-01-29)

Feature

• update dependencies (281735f)

v1.24

Compare Source

v1.23.1

Compare Source

1.23.1 (2025-01-29)

Bug Fixes

• use getBooleanInput to determine versionFilename (db17a25)

v1.23.0

Compare Source

1.23.0 (2024-02-18)

Feature

• use bun as bundler (7798e56)

Bug Fixes

• use mjs (48d83ac)

v1.23

Compare Source

v1.22.0

Compare Source

1.22.0 (2024-02-18)

Feature

• use bun (6c83899)
• update dependencies (e9871c8)

v1.22

Compare Source

v1.21.1

Compare Source

1.21.1 (2024-02-18)

Bug Fixes

• action: use node 20 (2db6db2)

CI

• Use node 20 (8728a77)

v1.21.0

Compare Source

1.21.0 (2023-02-05)

Feature

• use new download endpoint (1b14387)
• update dependencies (ff0161d)

v1.21

Compare Source

v1.20.0

Compare Source

1.20.0 (2023-01-14)

Feature

• update dependencies (b10f9cb)

Documentation

• add note about token permissions (2d0d57b)
• add hooks config (d5a763e)

v1.20

Compare Source

v1.19.0

Compare Source

1.19.0 (2022-11-04)

Feature

• update dependencies (c78b6ee)

Documentation

• clarify which go-semantic-release version is used (bc71199)

v1.19

Compare Source

v1.18.0

Compare Source

1.18.0 (2022-05-22)

Feature

• add bin configuration option (0bbbc8f)

Documentation

• update allow-initial-development-versions description (bada9de)

v1.18

Compare Source

v1.17.0

Compare Source

1.17.0 (2022-01-30)

Feature

• add hooks config option (7149b16)

v1.17

Compare Source

v1.16.1

Compare Source

1.16.1 (2022-01-29)

Bug Fixes

• action: use node 16 (75b4220)

v1.16.0

Compare Source

1.16.0 (2022-01-29)

Feature

• soft enforce boolean input values (d78e642)
• add custom arguments input parameter (3ecb472)
• use ts and esbuild (b48a96d)

CI

• use node 16 (ad8e6e7)

v1.16

Compare Source

v1.15.0

Compare Source

1.15.0 (2021-07-28)

Feature

• always install latest version (66fbf3f)

v1.15

Compare Source

v1.14.0

Compare Source

1.14.0 (2021-07-23)

Feature

• update husky & dependencies (18f28ef)

v1.14

Compare Source

v1.13.0

Compare Source

1.13.0 (2021-07-23)

Feature

• enable prepend-changelog flags (f629fc1)

Documentation

• fix prepend input description (2bba6a0)

v1.13

Compare Source

v1.12.0

Compare Source

1.12.0 (2021-05-28)

Feature

• update dependencies (a332ac1)

Chores

• add force-bump-patch-version and changelog-generator-opt (e5bb20b)

v1.12

Compare Source

v1.11.2

Compare Source

1.11.2 (2021-01-06)

Bug Fixes

• update dependencies (d039b35)

v1.11.1

Compare Source

1.11.1 (2021-01-06)

Bug Fixes

• action: use .version-unreleased if dry was used (54fde9c)

v1.11.0

Compare Source

1.11.0 (2020-12-11)

Feature

• update dependencies (83a7391)

v1.11

Compare Source

v1.10.0

Compare Source

1.10.0 (2020-12-11)

Feature

• enable the use of 'force-bump-patch-version' and 'changelog-generator-opt' flags (a97bc8d)

Bug Fixes

• js linter (36ba23e)

Chores

• remove second changelog-generaror-opt flag (ea22c81)

v1.10

Compare Source