v2.21.1

What's Changed

• feat: pinning dependant actions by @Raj-StepSecurity in #152
• feat: Update action.yml by @Raj-StepSecurity in #153
• feat: Update action.yml by @Raj-StepSecurity in #154
• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #150

Full Changelog: v2...v2.21.1

v2.21.0

What's Changed

• ci: Update auto_cherry_pick.yml by @Raj-StepSecurity in #144
• ci: Update auto_cherry_pick.yml by @Raj-StepSecurity in #145
• ci: Create claude_review.yml by @Raj-StepSecurity in #146
• chore: Cherry-picked changes from upstream by @github-actions[bot] in #143
• feat: Update README.md by @Raj-StepSecurity in #147
• feat: Update action.yml by @Raj-StepSecurity in #148
• feat: Update action.yml by @Raj-StepSecurity in #149

Full Changelog: v2...v2.21.0

v2.20.5

What's Changed

• Bump python from 3.13.5-alpine3.22 to 3.14.0-alpine3.22 by @dependabot[bot] in #134
• Revert "Bump python from 3.13.5-alpine3.22 to 3.14.0-alpine3.22" by @Raj-StepSecurity in #136
• ci: Scheduling run of ci-cd removed by @Raj-StepSecurity in #138
• fix: fixed docker vulnerability by @amanstep in #139
• Update action.yml by @amanstep in #140
• feat: updated action.yml with new docker image by @amanstep in #141

Full Changelog: v2...v2.20.5

v2.20.4

What's Changed

• fix: Subscription validation scenarios handled by @Raj-StepSecurity in #123
• feat: Update action.yml by @Raj-StepSecurity in #124
• feat: Update action.yml by @Raj-StepSecurity in #125
• feat: Update action.yml by @Raj-StepSecurity in #126
• feat: Update action.yml by @Raj-StepSecurity in #127
• feat: Update action.yml by @Raj-StepSecurity in #128
• feat: Update action.yml by @Raj-StepSecurity in #129

Full Changelog: v2...v2.20.4

v2.20.2

What's Changed

• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #92
• Bump requests from 2.32.3 to 2.32.4 in /misc/action/package-downloads by @dependabot[bot] in #94
• Bump requests from 2.32.3 to 2.32.4 in /misc/action/find-workflows by @dependabot[bot] in #96
• Update osv-scanner.toml by @Raj-StepSecurity in #100
• fix: vulns added to osv-scanner by @Raj-StepSecurity in #105
• fix: fixed vulnerabilities by upgrading dependencies and base image by @amanstep in #108
• ci: removed unsupported windows 2019 from os list by @amanstep in #110
• fix: provided a new tag for docker image by @amanstep in #111
• feat: updated action.yml with new sha for docker image by @amanstep in #112
• ci: mark docker image version with comment by @amanstep in #113

New Contributors

• @stepsecurity-app[bot] made their first contribution in #92
• @dependabot[bot] made their first contribution in #94
• @amanstep made their first contribution in #108

Full Changelog: v2...v2.20.2

v2.20.1

What's Changed

• feat: Update Dockerfile by @Raj-StepSecurity in #97
• feat: Update action.yml by @Raj-StepSecurity in #98
• feat: Update action.yml by @Raj-StepSecurity in #99

Full Changelog: v2...v2.20.1

v2.20.0

What's Changed

• ci: Create guarddog.yml by @Raj-StepSecurity in #89
• chore: Cherry-picked changes from upstream by @github-actions in #88
• fix: Update action.yml by @Raj-StepSecurity in #91

Full Changelog: v2...v2.20.0

v2.19.0

What's Changed

• ci: audit fix workflow updates by @Raj-StepSecurity in #57
• [StepSecurity] Apply security best practices by @step-security-bot in #58
• fix: unused deps added to osv-scanner by @Raj-StepSecurity in #64
• ci: auto cherry-pick workflow added by @Raj-StepSecurity in #65
• chore: Cherry-picked changes from upstream by @github-actions in #68
• chore: Cherry-picked changes from upstream by @github-actions in #80
• ci: Update auto_cherry_pick.yml by @Raj-StepSecurity in #86
• fix: image pinned for docker image by @Raj-StepSecurity in #81

New Contributors

• @Raj-StepSecurity made their first contribution in #57
• @step-security-bot made their first contribution in #58
• @github-actions made their first contribution in #68

Full Changelog: v2...v2.19.0

v2.18.0

What's Changed

• Ignore non-relevant vulnerable dependencies by @shubham-stepsecurity in #40
• chore: fast forward upstream changes to v2.18.0 by @shubham-stepsecurity in #46

Full Changelog: v2...v2.18.0

v2.17.0

What's Changed

• chore: fast forward upstream changes to v2.17.0 by @shubham-stepsecurity in #34
• remove build issues by @shubham-stepsecurity in #37

Full Changelog: v2...v2.17.0