v1.4.5

Changelog

• 21c6ddc ci: use custom PAT in release-security-fix workflow
• c5a49a8 ci: fully activate the release-security-fix.yml workflow
• 59fadee ci: set Gryft scan output format to "table"
• 5571ea1 ci: add workflow that auto-creates a new tag on vulnerability fixes

v1.4.4

This is only a dependency-update release (rebuild using the latest Go 1.21.11) to fix CVE-2024-24790 (see #37).

Changelog

• 8271343 chore(deps): update goreleaser/goreleaser-action action to v6 (#36)
• 442b0fc chore(deps): update dependency dominikh/go-tools to v2023.1.7 (#34)
• e98cbac Fix Renovate RegEx manager syntax
• b9c18f9 Configure Renovate (#16)

v1.4.3

This is only a dependency-update release to fix CVE-2023-45288 (see #31).

Changelog

• 2ad5f0f Bump tj-actions/verify-changed-files from 19 to 20 (#30)
• 7d7e785 Bump dominikh/staticcheck-action from 1.3.0 to 1.3.1 (#29)
• 6b54905 Bump tj-actions/verify-changed-files from 18 to 19 (#28)
• a7cf2b0 Bump tj-actions/verify-changed-files from 17 to 18 (#27)
• 2dd46ad Bump tj-actions/verify-changed-files from 16 to 17 (#26)
• bfebc38 Bump actions/setup-go from 4 to 5 (#25)

v1.4.2

Changelog

This is only a dependency-update release. As of the release date, there are no known vulnerabilities, thanks to #22

• 237d281 Merge pull request #23 from MShekow/chore/update-go
• 0e8370c chore: bump Go to 1.21
• 4e9a040 Merge pull request #22 from MShekow/dependabot/go_modules/main/github.com/spf13/afero-1.11.0
• dd04913 Bump github.com/spf13/afero from 1.9.5 to 1.11.0
• 4cc4363 Merge pull request #20 from MShekow/dependabot/go_modules/main/github.com/go-errors/errors-1.5.1
• 5cc9f14 Bump github.com/go-errors/errors from 1.5.0 to 1.5.1
• 38c7959 Merge pull request #18 from MShekow/dependabot/go_modules/main/github.com/go-errors/errors-1.5.0
• 34e0717 Merge pull request #19 from MShekow/dependabot/github_actions/main/goreleaser/goreleaser-action-5
• ef08282 Bump goreleaser/goreleaser-action from 4 to 5
• 4eb52ce Bump github.com/go-errors/errors from 1.4.2 to 1.5.0
• 311f185 Merge pull request #17 from MShekow/dependabot/github_actions/main/actions/checkout-4
• 1a8e63a Bump actions/checkout from 3 to 4
• 5494587 Merge pull request #15 from MShekow/dependabot/github_actions/main/tj-actions/verify-changed-files-16
• 1785f23 Bump tj-actions/verify-changed-files from 15 to 16
• 733bb8b Merge pull request #14 from MShekow/dependabot/github_actions/main/tj-actions/verify-changed-files-15
• 22f3ae1 Bump tj-actions/verify-changed-files from 14 to 15

v1.4.1

Changelog

• Update transitive golang.org/x/text dependency to 0.3.7 to fix CVE-2021-38561 (note: we need to wait for afero to update to 0.3.8 to fix CVE-2022-32149, see spf13/afero#381)

v1.4

Changelog

• Skip files with unsupported mode (e.g. character device or socket), print a warning instead

v1.3

Changelog

• Handle unhandled error of f.Close() in computeFileChecksum() with a print
• Use "go-errors/errors" for proper error stack traces

v1.2

Changelog

• Never follow symbolic links, instead compute the checksum on their target path

v1.1

Changelog

• Properly handle symbolic links, especially to directories
• Always compute the absolute dir path. not just for "."
• Add debug.PrintStack() to various places, to be able to diagnose problems better
• Add Dockerfile frontend info to README.md

v1.0

Changelog

• 5a9464b Merge pull request #2 from MShekow/fix/static-binary
• b025478 Compile static binaries
• 64fa3cd Merge pull request #1 from MShekow/feat/coverage-badge
• a705767 chore: Updated coverage badge.
• e932fcb Merge 0e9151a into 5d790e5
• 0e9151a Improve test coverage by wrapping all "os.something" calls with afero or our own wrappers
• fa67a4e Rename ContinuousDelivery to "Continuous Delivery"
• 7a8f5a2 Add CI and CD badges
• 2eac5aa chore: Updated coverage badge.
• 2dfd103 Merge 0091ce7 into 5d790e5
• 0091ce7 Add link to releases page to README.md
• ba0aa2b Extract Tool version to constant
• 2784683 Add coverage badge GHA workflow
• 5d790e5 Configure builds with .goreleaser.yaml
• bbd2cf2 Fix import path in main.go
• a3935d5 Apply different approach for staticcheck
• e2ceded Fix Go module name to "github.com/MShekow/directory-checksum"
• caa90e2 Add CI/CD GHA workflows
• 14cd368 Commit code and tests
• ff454f9 Initial commit