Sitelet https://github.com/git-pkgs/pom/releases
Skip to content

Releases: git-pkgs/pom

v0.1.8

Choose a tag to compare

@github-actions github-actions released this 01 Oct 14:46
Immutable release. Only release title and notes can be modified.
3bac91f

Changelog

  • ad55565 Add Dependabot cooldowns and zizmor checks
  • c7f7601 Add and align CI security and dependency automation
  • 16276d5 Fall back to embedded build info for Version (#21)
  • 7692202 Set go 1.26 and toolchain go1.26.7 (#20)
  • 3bac91f Standardize the README license footer
  • 7456db9 Use Go 1.26.6 toolchain (#19)

v0.1.7

Choose a tag to compare

@github-actions github-actions released this 15 Aug 11:10
8aded6a

Changelog

v0.1.6

Choose a tag to compare

@github-actions github-actions released this 14 Aug 10:44
d818a2c

Changelog

  • 6623b68 Bump actions/checkout from 7.0.0 to 7.0.1 (#15)
  • ae2ab91 Bump actions/setup-go from 6.4.0 to 6.5.0 (#14)
  • 39bc7e1 Bump actions/setup-go from 6.5.0 to 7.0.0 (#16)
  • e1b8158 Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#12)
  • 7c60fb6 Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#13)
  • d818a2c Reduce POM parsing and resolution allocations (#17)

v0.1.5

Choose a tag to compare

@github-actions github-actions released this 29 Jun 12:08
ac586a4

Changelog

  • b68ebf0 Bump actions/checkout from 6.0.2 to 6.0.3 (#9)
  • 05230df Bump actions/checkout from 6.0.3 to 7.0.0 (#11)
  • 25118df Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#8)
  • 84ce57b Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#6)
  • bea6080 Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#5)
  • ac586a4 Jail LocalFetcher to a root directory and cap POM read size (#10)
  • c885db1 Set goconst to ignore test files (#7)

v0.1.4

Choose a tag to compare

@github-actions github-actions released this 02 May 15:20
b2e4cce

Changelog

  • 5e4e8c1 Cap interpolated property string length to prevent amplification DoS (#2)
  • 3c9e962 Extract profile mode strings to constants for goconst
  • b2e4cce Reject absolute paths and symlinks in LocalFetcher parent traversal (#3)

v0.1.3

Choose a tag to compare

@github-actions github-actions released this 27 Apr 19:51
6f8e9de

Changelog

  • 6f8e9de Add LocalFetcher and ResolveLocal for filesystem-only parent resolution

v0.1.2

Choose a tag to compare

@github-actions github-actions released this 27 Apr 17:23
3dd90b9

Changelog

  • 3dd90b9 Use cosign v4 bundle format for release signing