v6.2.0

What's Changed

Features

• fix: fix Yarn Berry workspace audit when skip-dev=true by @kyletsang in #248

Internal

• chore: Add dependabot for updating dependencies by @quinnturner in #245
• docs: CircleCI run audit-ci before npm install by @quinnturner in #246
• chore: Release 6.2.0 by @quinnturner in #249

Full Changelog: v6.1.2...v6.2.0

v6.1.2

What's Changed

• add note about executing right after checkout by @capaj in #242
• fix: dedupe advisory paths in yarn auditor by @kyletsang in #243
• chore: Release 6.1.2 by @quinnturner in #244

New Contributors

• @capaj made their first contribution in #242

Full Changelog: v6.1.1...v6.1.2

v6.1.1

What's Changed

• docs: Add json-schema support by @quinnturner in #238
• chore: Use @types/node^12 by @quinnturner in #237
• fix: Deduplicate advisoryPathsFound by @quinnturner in #240
• chore: Release 6.1.1 by @quinnturner in #241

Full Changelog: v6.1.0...v6.1.1

v6.1.0

What's Changed

PNPM is supported!

• feat: PNPM support by @quinnturner in #235
• docs: Improvements on config explanations by @quinnturner in #233
• Type improvements and better functional structuring by @quinnturner in #234
• chore: Release 6.1.0 by @quinnturner in #236

Full Changelog: v6.0.0...v6.1.0

v6.0.0

What's Changed

BREAKING

• Drop Node 10 support by @quinnturner in #219
• Rewrite NPM 7/8 to fix audit path resolution by @quinnturner in #219
• Remove deprecated props advisories, path-whitelist, whitelist (codemod available) by @quinnturner in #219
• Switch identifier to be taken from github_advisory_id (codemod available) by @mobilutz in #217

Features

• docs: Add codemod instructions and set Node v12 by @quinnturner in #223
• feat: Print path for vulnerable advisories by @quinnturner in #230

Internal

• set package-lock.json lockfile to version 2 by @quinnturner in #219
• update dependencies by @quinnturner in #219
• chore: Release 6.0.0-beta.0 by @quinnturner in #220
• fix: update npm fixtures by @quinnturner in #221
• chore: remove audit-ci allowlist value by @quinnturner in #222
• chore: Release 6.0.0-beta.1 by @quinnturner in #224
• TypeScript support by @quinnturner in #226
• chore: Release 6.0.0-beta.2 by @quinnturner in #229
• chore: Release 6.0.0 by @quinnturner in #231

Full Changelog: v5.1.2...v6.0.0

v6.0.0-beta.2

What's Changed

BREAKING

• Drop Node 10 support, rewrite NPM 7/8, update dependencies, remove deprecated props, set package-lock.json lockfile to version 2 by @quinnturner in #219
• Switch identifier to be taken from github_advisory_id by @mobilutz in #217

Features

• docs: Add codemod instructions and set Node v12 by @quinnturner in #223

Internal

• chore: Release 6.0.0-beta.0 by @quinnturner in #220
• fix: update npm fixtures by @quinnturner in #221
• chore: remove audit-ci allowlist value by @quinnturner in #222
• chore: Release 6.0.0-beta.1 by @quinnturner in #224
• TypeScript support by @quinnturner in #226
• chore: Release 6.0.0-beta.2 by @quinnturner in #229

Full Changelog: v5.1.2...v6.0.0-beta.2

v6.0.0-beta.1

What's Changed

BREAKING

• Drop Node 10 support, rewrite NPM 7/8, update dependencies, remove deprecated props, set package-lock.json lockfile to version 2 by @quinnturner in #219
• Switch identifier to be taken from github_advisory_id by @mobilutz in #217

Features

• docs: Add codemod instructions and set Node v12 by @quinnturner in #223

Internal

• chore: Release 6.0.0-beta.0 by @quinnturner in #220
• fix: update npm fixtures by @quinnturner in #221
• chore: remove audit-ci allowlist value by @quinnturner in #222
• chore: Release 6.0.0-beta.1 by @quinnturner in #224

Full Changelog: v5.1.2...v6.0.0-beta.1

v6.0.0-beta.0

What's Changed

• Drop Node 10 support, rewrite NPM 7/8, update dependencies, remove deprecated props, set package-lock.json lockfile to version 2 by @quinnturner in #219
• chore: Release 6.0.0-beta.0 by @quinnturner in #220

Full Changelog: v5.1.2...v6.0.0-beta.0

v5.1.2

#208 - fix: prevent hang when packages reference each other in via

v5.1.1

This is a re-publish of v5.1.0. There was an outage of NPM when v5.1.0 was published, making v5.1.0 inaccessible.

Closes: #206