v1.41.1-beta.1

fix(release): revert prerelease-guard ref back to @v1 (#535)

v1.41.0

Github-actions-shared-workflows v1.41.0

Features:

• Add reusable workflows for Helm alpha release and cleanup. (@guimoreirar)

Fixes:

• Correct the release process by merging develop into main. (@bedatty)
• Prevent reliance on unevaluated expressions as input defaults in the prerelease guard. (@bedatty)
• Address issues in the release process by pointing the prerelease-guard ref at develop until v1 catches up. (@bedatty)
• Guard release.yml against prerelease versions published after stable releases. (@bedatty)
• Address code review feedback on prerelease gates. (@bedatty)
• Prevent script injection by passing references via environment variables in the Helm alpha release workflow. (@guimoreirar)

Improvements:

• Bump trufflesecurity/trufflehog from 3.95.5 to 3.95.6 in the security-scanners group. (@bedatty)
• Update the GitHub security group with two dependency updates. (@bedatty)
• Refactor Helm alpha workflows for improved clarity and functionality. (@guimoreirar)
• Update the container retention policy to use a pinned SHA v3.1.0. (@guimoreirar)

Compare changes

v1.41.0-beta.5

fix(prerelease-guard): don't rely on unevaluated expression as input …

v1.41.0-beta.4

chore(deps): bump trufflesecurity/trufflehog from 3.95.5 to 3.95.6 in…

v1.41.0-beta.3

chore(deps): bump the github-security group with 2 updates (#525)

v1.41.0-beta.2

fix(release): point prerelease-guard ref at develop until v1 catches …

v1.41.0-beta.1

feat: add reusable workflows for Helm alpha release and cleanup (#529)

v1.40.4

Github-actions-shared-workflows v1.40.4

Fixes:

• Corrected the release process by merging develop into main. (@bedatty)
• Sanitized filter_paths injection by mapping environment variables to prevent security issues identified by CodeQL. (@bedatty)
• Addressed feedback from CodeRabbit review on PR #523. (@bedatty)
• Improved changelog generation by filtering out bot and irrelevant commits. (@bedatty)

Features:

• Introduced js-pr-validation.yml, an umbrella workflow for JavaScript/TypeScript repositories to streamline pull request validation. (@bedatty)
• Added js-release.yml, an umbrella workflow for JavaScript/TypeScript repositories to facilitate the release process. (@bedatty)

Compare changes

v1.40.4-beta.5

fix(release): sanitize filter_paths injection via env mapping (CodeQL)

v1.40.4-beta.4

fix: address CodeRabbit review on PR #523

- gptchangelog: bake bot baseline into script, treat bot-ignore-list as
  additive so callers passing empty string no longer disable semantic-release-bot
  and lerian-studio-midaz-push-bot filtering
- js-release: forward path_level to release job (monorepo app name alignment)
- js-release: forward dry_run to build job (typescript-build.yml supports it)
- js-pr-validation: add 'edited' to changes allowlist to prevent green
  Frontend Analysis / Security checks after a title-only edit on a failing run
- docs/js-release: fix branch-push primitive (release.yml not typescript-release.yml),
  remove stale node_version row, update dry_run description, fix Related link