v0.1.8

What's Changed

Dependencies

• Bump urllib3 from 2.4.0 to 2.5.0 by @dependabot[bot] in #30
• Bump urllib3 from 2.5.0 to 2.6.0 by @dependabot[bot] in #31
• Bump urllib3 from 2.6.0 to 2.6.3 by @dependabot[bot] in #33
• Bump pynacl from 1.5.0 to 1.6.2 by @dependabot[bot] in #32
• chore(deps): update dependency gitpython to v3.1.46 by @renovate[bot] in #36
• chore(deps): update dependency black to v26 [security] by @renovate[bot] in #35
• chore(deps): update dependency python to 3.14 by @renovate[bot] in #41
• chore(deps): update dev dependencies group (major) by @renovate[bot] in #42
• chore: bring CI and pyproject up-to-date by @mxmehl in #38

Full Changelog: v0.1.7...v0.1.8

v0.1.7

What's Changed

• Clarify status of project by @mxmehl in #29
• Bump some deprecated action deps, bump python versions by @mxmehl in #28
• Bump requests from 2.31.0 to 2.32.0 by @dependabot in #22
• Bump urllib3 from 2.1.0 to 2.2.2 by @dependabot in #23
• Bump certifi from 2023.11.17 to 2024.7.4 by @dependabot in #24
• Bump cryptography from 42.0.4 to 43.0.1 by @dependabot in #26

Full Changelog: v0.1.6...v0.1.7

v0.1.6

What's Changed

• Bump idna from 3.6 to 3.7 by @dependabot in #19
• Bump tqdm from 4.66.1 to 4.66.3 by @dependabot in #20

Full Changelog: v0.1.5...v0.1.6

v0.1.5

What's Changed

• Bump dependencies, also one security-related

Full Changelog: v0.1.4...v0.1.5

v0.1.4

What's Changed

• Bump gitpython from 3.1.40 to 3.1.41 by @dependabot in #12
• Bump cryptography from 41.0.7 to 42.0.0 by @dependabot in #13
• Add workflow to publish a new pypi package upon tagging by @mxmehl in #14

Full Changelog: v0.1.3...v0.1.4

v0.1.3

Changelog

• Various smaller dependency updates
• Add --version to show current version
• Fix --cache-clean to actually clean the cache
• Better information for GitHub token
• Improvements of documentation, tests, CI etc.

v0.1.2

We are happy to publish the first release of the Open Source Red Flag Checker.

Please feel free to experiment with the software and give us feedback. We hope it help you with identifying possible risks in your software supply chain.