All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- #513 Security vulnerability in transient dependency
@babel/traverse
- #514 Security vulnerability in transient dependency
semver
- #515 Security vulnerability in transient dependency
undici
- #516 Security vulnerability in transient dependency
debug
- #529 Security vulnerability in transient dependency
braces
- #360 Unable to import GPG private key
- #359 Unable to import GPG private key
- Security vulnerability in transient dependency
minimatch
-
#333 [BREAKING CHANGE] Update all licenses in a file, not only the first found (discovered by @glimchb).
Migration guide
Custom RegExp transforms where previously written to execute with the
mi
flags ("multiline" and "ignore case"). With this new major version the transform also needs to respect theg
flag ("global"). I.e. please verify that your custom transform behaves as expected when used with thegmi
flags.
- Support for the outputs
currentYear
,branchName
,pullRequestNumber
andpullRequestUrl
. Seeaction.yml
for more information.
- Security vulnerability in transient dependency
@actions/core
- Migrate into running on Node.js v16
- Security vulnerability in transient dependency
node-fetch
- #217 Support for GitHub commit signature verification by means of GPG signing commits
- Update dependency @actions/core to v1.6.0
- Update dependency @actions/github to v5.0.0
- Update dependency @actions/glob to v0.2.0
- #119 Support for specifying commit author name and e-mail (proposed by @creativecreatorormaybenot)
- #43 [BREAKING CHANGE] Support for updating one or more arbitrary files. This is a breaking change since actions/checkout now has to precede this action. Please see
README.md
for more information. (proposed by @spl)
- #97 License file is incorrectly updated using ASCII encoding instead of UTF8 (contributed by @mondeja)
- Security vulnerability in transient dependency
node-fetch
- Support for substituting variable
currentYear
in configurationcommitTitle
,commitBody
,prTitle
andprBody
- Variable
currentYear
in branch name is not substituted correctly
- Action fails when assignees are configured
- Action fails when labels are configured
- #57 Support for configuring pull request
- #59 Single year in license is updated into a range of years even though year hasn't changed (discovered by @tenshiAMD)
- GitHub Actions tries to interpolate
${{ secrets.GITHUB_TOKEN }}
in the metadata description
- Support for GNU Affero General Public License v3.0 only (AGPL-3.0-only) licenses
- Security vulnerability in transient dependency
lodash
- Update action metadata with required
token
input - #42 Improve error message displayed when license file doesn't exist in repository
- #40 Only create pull request if license is updated (discovered by @spl)
- Security vulnerability in transient dependency
@actions/http-client
- Security vulnerability in transient dependency
acorn
- Security vulnerability in transient dependency
minimist
- Support for BSD 2-clause "Simplified" (BSD-2-Clause) licenses
- Support for BSD 3-clause "New" or "Revised" (BSD-3-Clause) licenses
- Support for MIT (MIT) licenses
- Support for Apache 2.0 (Apache-2.0) licenses