v4.5.4

What's Changed

• Update release workflow template by @jasonkarns in #45
• [StepSecurity] Apply security best practices by @step-security-bot in #44
• Harden sync and tag workflows by @jasonkarns in #46

New Contributors

• @step-security-bot made their first contribution in #44

Full Changelog: v4.5.3...v4.5.4

v4.5.3

What's Changed

• OSSF Scorecard robustly selects default branch by @jasonkarns in #41
• List required release secrets by @jasonkarns in #42

Full Changelog: v4.5.2...v4.5.3

v4.5.2

What's Changed

• Workaround superlinter bug by @jasonkarns in #31
• Run tests on template repo itself by @jasonkarns in #32
• Contributing and readme documentation by @jasonkarns in #33
• Silence pesky shellcheck warning by @jasonkarns in #34
• Pin dependencies to sha by @jasonkarns in #35
• workflow permissions by @jasonkarns in #36
• Update docs by @jasonkarns in #37
• Separate reusable workflow from repo's own test workflow. by @jasonkarns in #38

Full Changelog: v4.5.1...v4.5.2

v4.5.1

What's Changed

• Revert "pushing lightweight tags instead of branches as vN" by @jasonkarns in #30

Full Changelog: v4.5.0...v4.5.1

v4.5.0

Allow callers to opt-out of test.super-linter

Full Changelog: v4.4.0...v4.5.0

v4.4.0

What's Changed

• Run npm-cit on macOS as well by @jasonkarns in #28

Full Changelog: v4.3.0...v4.4.0

v4.3.0

What's Changed

• Add OSSF Scorecard job by @jasonkarns in #27

Full Changelog: v4.2.0...v4.3.0

v4.2.0

What's Changed

• Pin templates to a version by @jasonkarns in #22
• Update tag-major.yml by @jasonkarns in #23
• Default toplevel permissions to read-all by @jasonkarns in #24
• Release to npm registry by @jasonkarns in #25

Full Changelog: v4.1.0...v4.2.0

v4.1.0

What's Changed

• Push major tag as part of release by @jasonkarns in #21

Full Changelog: v4.0.0...v4.1.0

v4.0.0

What's Changed

• Adds homebrew tap bumps to release workflow by @jasonkarns in #19

Full Changelog: v3.2.3...v4.0.0