Breaking Changes
By default the action now expects SPDX-compliant licenses everywhere. If you were previously using license names in the allow or deny lists make sure they're valid!
What's Changed
Support for external configuration files
You can now specify a configuration file external to your repository. This allows organizations to have a single configuration file for all their repos.
Broader license support
We've added support for a much broader set of project licenses by using GitHub's Licenses API.
SPDX Compliance
All of our license-related code now expects SPDX-compliant licenses or expressions. This allows us to standardize on a license naming scheme that already supports OR/AND expressions.
Disable individual checks
You can now use the boolean options license-check and vulnerability-check to disable either one of the checks. More information in our configuration options.
Thanks
Contributors for this release include:
Thanks everyone!
Full Changelog: v2...v3.0.0
