v3.1.2

What's Changed

• Improve error message when input is invalid by @mheap in #197
• Fix regex for adding pins by @mheap in #198

Full Changelog: v3.1.1...v3.1.2

v3.1.1

What's Changed

• Add tests for addSecurity + fix allowlist format by @mheap in #195

Full Changelog: v3.1.0...v3.1.1

v3.1.0

What's Changed

• Add --enforce flag by @mheap in #190

Full Changelog: v3.0.2...v3.1.0

v3.0.2

What's Changed

• Set WORKFLOWS_DIR in Docker to enable relative paths to be specified by @mheap in #189

Full Changelog: v3.0.1...v3.0.2

v3.0.1

What's Changed

• Fix argument parsing with Commander v13 by @mheap in #187
• Change Docker WORKDIR by @mheap in #188

Full Changelog: v3.0.0...v3.0.1

v3.0.0

What's Changed

• V3 updates by @mheap in #186
  • Change default pin annotation to # {ref} from # pin@{ref}
  • Change authentication env variable from GH_ADMIN_TOKEN to GITHUB_TOKEN

Full Changelog: v2.1.1...v3.0.0

v2.1.1

What's Changed

• fix: Add support for quoted uses values by @pravindahal in #184

New Contributors

• @pravindahal made their first contribution in #184

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• Take folder name as arg by @gladykov in #182

Full Changelog: v2.0.3...v2.1.0

v2.0.3

What's Changed

• Pin all actions commits by @gladykov in #181
• Fix SHA casing by @szepeviktor in #177
• Bump escape-string-regexp from 4.0.0 to 5.0.0 by @ericcornelissen in #179

New Contributors

• @gladykov made their first contribution in #181

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• Update CI by @szepeviktor in #173
• Convert project to ESM by @mheap in #174
• Fix ignoreShas error when workflow contains SHAs by @mheap in #176

New Contributors

• @szepeviktor made their first contribution in #173

Full Changelog: v2.0.1...v2.0.2