v0.2.0

compare changes

🚀 Enhancements

• Respect pnpm's trustPolicyExclude (2f0f52d)
• Detect loss of npm staged publishing approval (fc86c9a)

📖 Documentation

• Update action description (e78b179)
• Add link to pnpm v10.21 trustPolicy 🎉 (fd8dd3c)

🏡 Chore

• Add licence (cafd196)
• Revert pnpm trust policy and restore provenance action (4320fb9)
• Release v0.0.2 (194cad5)
• Migrate to pnpm v11 (#99)

✅ Tests

• Improve coverage of lockfile parsing utils (a9d6553)
• Migrate to vitest (07fa732)
• Add api responses as fixtures + test provenance utils (fd6ed30)

🤖 CI

• Pin github actions to full-length commit shas (9426311)
• Add agent-scan workflow to flag bot-authored PRs (81568f7)

❤️ Contributors

• Daniel Roe (@danielroe)

v0.1.1

compare changes

🚀 Enhancements

• Add support for bun.lock (#12)

📖 Documentation

• Use @main constraint for example (237ceea)

❤️ Contributors

• Daniel Roe (@danielroe)

0.1.0

compare changes

🚀 Enhancements

• Detect and error when trusted publisher status is lost (#5)
• Add Yarn Berry support (#6)
• Add fail-on-provenance-change (#11)

💅 Refactors

• Simplify and tidy codebase (583865a)

📖 Documentation

• Update README to include yarn.lock v2 support (#10)
• Add permissions to example workflow (a5a7182)

🏡 Chore

• Bump compilerOptions.target to newer value (#8)
• Lint + add lint workflow (6ec62ac)
• Skip lib check (af67d2d)

✅ Tests

• Move sample lockfiles into fixtures/ directory + tidy lockfiles tests (379485e)
• Add more unit tests (158838b)

❤️ Contributors

• Daniel Roe (@danielroe)
• Wojciech Maj (@wojtekmaj)

0.0.1

🩹 Fixes

• Update default value of fail-on-downgrade (c7f8e8b)

📖 Documentation

• Update example (fa4b9ac)
• Update warning (b8d91a9)
• Link to test repo (4c894db)

🏡 Chore

• Remove intro comment (1b6e7c5)
• Update name (c83fb42)
• Update action manifest (#3)

🤖 CI

• Add testing step + renovate config (#2)

❤️ Contributors

• Daniel Roe (@danielroe)