v2.3.4

Changelog

🧰 Maintenance

• ci: adopt consolidated ospo-reusable-workflows release.yaml @jmeridth (#552)

See details of all code changes since previous release

v2.3.3

Changelog

🧰 Maintenance

• chore(deps): bump github-community-projects/contributors from 2.0.8 to 2.0.9 in the dependencies group @dependabot[bot] (#550)
• chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 in the dependencies group @dependabot[bot] (#547)
• chore(deps): bump mypy from 1.20.1 to 1.20.2 in the dependencies group @dependabot[bot] (#548)
• chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#545)
• chore(deps): bump mypy from 1.20.0 to 1.20.1 in the dependencies group @dependabot[bot] (#546)
• chore(deps): bump types-requests from 2.33.0.20260402 to 2.33.0.20260408 @dependabot[bot] (#544)
• chore(deps): bump pytest from 9.0.2 to 9.0.3 @dependabot[bot] (#543)
• chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#540)
• chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 @dependabot[bot] (#539)
• chore(deps): bump github/codeql-action from 3.32.6 to 4.35.1 @dependabot[bot] (#541)
• chore(deps): bump kenyonj/mark-ready-when-ready from b6279addd55dd13208965a9eff24b2cf1989a8ef to 0ef6176fc2ddef5bab6cb4ab9517a37f0c153ba4 @dependabot[bot] (#542)
• chore(deps): bump the dependencies group with 3 updates @dependabot[bot] (#538)

See details of all code changes since previous release

v2.3.2

Changelog

🧰 Maintenance

• chore(deps): bump cryptography from 46.0.6 to 46.0.7 @dependabot[bot] (#535)
• chore(deps): bump types-requests from 2.32.4.20260107 to 2.32.4.20260324 @dependabot[bot] (#534)
• chore(deps): bump pytest-cov from 7.0.0 to 7.1.0 in the dependencies group @dependabot[bot] (#532)
• chore(deps): bump the dependencies group with 5 updates @dependabot[bot] (#533)

See details of all code changes since previous release

v2.3.1

Changelog

🐛 Bug Fixes

• fix: handle invalid YAML in existing dependabot config gracefully @jmeridth (#526)

🧰 Maintenance

• chore(deps): bump requests from 2.33.0 to 2.33.1 @dependabot[bot] (#529)
• refactor: replace get_env_vars() tuple with frozen EvergreenConfig dataclass @jmeridth (#525)

See details of all code changes since previous release

v2.3.0

Changelog

🚀 Features

• feat: add GH_ENTERPRISE_API_URL support for newer GHEC instances @jmeridth (#524)

See details of all code changes since previous release

v2.2.1

Changelog

🧰 Maintenance

• chore(deps): bump cryptography from 46.0.5 to 46.0.6 @dependabot[bot] (#521)

See details of all code changes since previous release

v2.2.0

Changelog

🚀 Features

• feat: add detection for 15 new Dependabot package ecosystems @zkoppert (#519)

See details of all code changes since previous release

v2.1.3

Changelog

🐛 Bug Fixes

• fix: validate EXEMPT_ECOSYSTEMS against supported package ecosystems @zkoppert (#514)

🧰 Maintenance

• chore(deps): bump astral-sh/setup-uv from 7.3.1 to 7.6.0 in the dependencies group @dependabot[bot] (#517)

See details of all code changes since previous release

v2.1.2

Changelog

🐛 Bug Fixes

• fix: prevent dev dependency downloads at runtime @zkoppert (#509)
• fix: cast gh_app_id to string for JWT encoding compatibility @jmeridth (#510)
• fix: tighten workflow permissions, add security hardening, and fix uv tool invocations @jmeridth (#506)

🧰 Maintenance

• chore(deps): bump kenyonj/mark-ready-when-ready from 33b13c51ba23786efb933701ef253352baf05bdd to b6279addd55dd13208965a9eff24b2cf1989a8ef @dependabot[bot] (#511)

See details of all code changes since previous release

v2.1.1

Changelog

🐛 Bug Fixes

• fix: add --project flag to uv entrypoint for GitHub Actions compatibility @jmeridth (#504)
• fix: uv version pin and caching @jmeridth (#496)

🧰 Maintenance

• ci: add mark-ready-when-ready workflow @zkoppert (#503)
• chore(deps): switch dependabot package ecosystem from pip to uv @jmeridth (#502)
• chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 in the dependencies group @dependabot[bot] (#499)
• chore(deps): bump isort from 7.0.0 to 8.0.1 @dependabot[bot] (#500)
• chore(deps): bump github/codeql-action from 4.31.9 to 4.32.6 in the dependencies group @dependabot[bot] (#501)
• chore(deps-dev): bump black from 26.1.0 to 26.3.1 in the uv group across 1 directory @dependabot[bot] (#498)

See details of all code changes since previous release