Changelog¶
All notable changes to this project are documented below. This project uses Semantic Versioning and Conventional Commits. This page is generated from the repository CHANGELOG.md.
0.1.2 (2026-08-08)¶
Features¶
Bug Fixes¶
- bump Go to 1.26.5, gate CI on govulncheck, drop the PAT from publish (8f3ab17), closes #25
- deps: update module github.com/bradleyfalzon/ghinstallation/v2 to v2.19.0 (#18) (20f0e40)
- deps: update module github.com/prometheus/client_golang to v1.24.1 (#19) (4b46c0e)
- harden publish.yml and correct the reproducibility claim (77a2801)
0.1.1 (2026-08-07)¶
Bug Fixes¶
- attach release assets via gh release upload, not action-gh-release (d51b756), closes #1
- restore linker-injected build metadata dropped with .goreleaser.yml (515a239), closes #1
- split publish out of release.yml, gated on the release event not action outputs (48f9f1e), closes #1
- use the release-please PAT to update an existing release's assets (4751660), closes #1
0.1.0 (2026-08-07)¶
⚠ BREAKING CHANGES¶
- port to the OpenBao SDK
Features¶
- add hashed token to responses for correlation with GitHub audit logs (#163) (0ee76ab)
- added a configuration key [hide_repository_metadata] that, if set to true, will minimize the [token.data.repositories] to [token.data.repositories.names] to avoid high memory consumption (#114) (9bfbd38)
- initializes proxy for Transport if needed (#146) (6ddeeb4)
- port to the OpenBao SDK (8f44f3f), closes #1
Bug Fixes¶
- client timeouts with >250 repositories (#161) (5ce15ec)
- drop stale upstream config and restart module versioning at v0.1.0 (d850cef), closes #1
- keep release-please in 0.x territory for breaking-change commits (c798aac), closes #1
- pin the first release-please release to 0.1.0 (5c02fbc), closes #1
- Use a case-insensitive organization name lookup (#156) (109f340)