v6.0.1

What's Changed

• chore(deps): update actions/checkout action by @renovate[bot] in #23
• chore(deps): update equisoft-actions/setup-python action by @renovate[bot] in #24
• chore(deps): update actions/checkout action by @renovate[bot] in #25
• Pin dependencies by @renovate[bot] in #26
• update GitHub actions by @renovate[bot] in #27
• 🟡 update actions/checkout action by @renovate[bot] in #28

Full Changelog: v6...v6.0.1

v6.0.0

What's Changed

• chore(deps): update actions/checkout action by @renovate in #20
• P22-941: run Pytype only on changed files by @Chahdro in #22

New Contributors

• @Chahdro made their first contribution in #22

Full Changelog: v5...v6.0.0

v5.0.0

What's Changed

• P22-856: Ruff linter by @AlexisGauthierAtKronos in #18

Project must have ruff linter in its dependencies
Rule set is wider than previous linter.
To exclude a subset of rules in a project add the following in pyproject.toml :

[tool.ruff]
ignore = [] 

See rules for a definitions of the available rules.
It is also possible to add more rules using extend-select

Full Changelog: v4...v5.0.0

v4.0.0

What's Changed

• Newly added option to use Poetry dependencies manager. The choice between Pipenv and Poetry is made using file .tool-versions. Whenever 'poetry' is specified in .tool-versions, poetry will be used. Else pipenv will be used.
• Breaking : Target file for action must be changed from .github/workflows/python-pipenv.yml to .github/workflows/python-quality-checks.yml@v4

New Contributors

• @AlexisGauthierAtKronos made their first contribution in #17

Full Changelog: v3...v4.0.0

v3.0.0

What's Changed

• feat!: remove gitleaks + sbom by @Chris-V in #16

Full Changelog: v2...v3.0.0

v2.1.0

What's Changed

• chore(deps): update fkirc/skip-duplicate-actions action to v5 by @renovate in #15

Full Changelog: v2...v2.1.0

v2.0.0

What's Changed

• QCTECH-140 & QCTECH-141: Replace Defect Dojo and Dependency Track with GHAS by @meriouma in #14

Breaking changes ⚠️

• Removed defectdojo-* inputs and secrets
• Removed dependency-track-* inputs and secrets

Full Changelog: v1.3.0...v2.0.0

v1.3.0

What's Changed

• Use equisoft-actions actions with major tag
• chore: configure daily dependabot updates by @Chris-V in #5
• chore(deps): bump actions/checkout from 2 to 3 by @dependabot in #7
• chore(deps): bump kronostechnologies/actions from 0.0.22 to 0.0.23 by @dependabot in #6
• Configure Renovate by @renovate in #8
• Delete dependabot.yml by @meriouma in #10
• chore(deps): update equisoft-actions/semgrep action to v1.1.0 by @renovate in #11
• chore(deps): update equisoft-actions/semgrep action to v1.1.1 by @renovate in #12
• chore(deps): update fkirc/skip-duplicate-actions action to v4 by @renovate in #13

New Contributors

• @dependabot made their first contribution in #7
• @renovate made their first contribution in #8
• @meriouma made their first contribution in #10

Full Changelog: v1.2.0...v1.3.0

v1.2.0

What's Changed

• chore: update setup-python to 1.1.0 by @Chris-V in #4

Full Changelog: v1.1.0...v1.2.0

v1.1.0

What's Changed

• feat: use the Semgrep action, add inputs for Defect Dojo by @Chris-V in #2
• feat: add BOM generation by @Chris-V in #3

New Contributors

• @Chris-V made their first contribution in #2

Full Changelog: v1.0.0...v1.1.0