0.8.0 🌈

⚠️ Breaking

• drop Python 3.8 support @gruebel (#429)

Changes

• Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 @dependabot (#425)
• Bump the pip group with 8 updates @dependabot (#427)
• Bump trufflesecurity/trufflehog from 3.84.1 to 3.88.0 @dependabot (#424)
• Bump trufflesecurity/trufflehog from 3.83.6 to 3.84.1 @dependabot (#421)
• Bump actions/setup-python from 5.2.0 to 5.3.0 @dependabot (#422)
• Bump the pip group with 6 updates @dependabot (#423)
• Bump cookie, express, cookie-parser and express-session @dependabot (#399)
• update GHA versions and adjust update interval @gruebel (#417)
• Bump elliptic from 6.5.7 to 6.6.0 @dependabot (#410)
• Bump the pip group across 1 directory with 5 updates @dependabot (#414)
• Bump the pip group with 5 updates @dependabot (#409)
• Bump the pip group across 1 directory with 6 updates @dependabot (#403)
• Bump trufflesecurity/trufflehog from 3.82.6 to 3.82.8 @dependabot (#401)
• Bump the pip group across 1 directory with 5 updates @dependabot (#394)
• Bump actions/checkout from 4.1.7 to 4.2.0 @dependabot (#392)
• switch trufflehog action to official one @gruebel (#393)
• Bump the pip group across 1 directory with 8 updates @dependabot (#390)

📝 Documentation

• update shell completion docs @gruebel (#419)

0.7.0 🌈

Changes

• update JS dependencies @gruebel (#383)
• Bump peter-evans/create-pull-request from 6.1.0 to 7.0.1 @dependabot (#377)
• Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 @dependabot (#378)
• Bump the pip group across 1 directory with 6 updates @dependabot (#376)
• update mkdocs @gruebel (#374)
• Bump actions/setup-python from 5.1.1 to 5.2.0 @dependabot (#373)
• Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.0 @dependabot (#372)
• drop node 16 support @gruebel (#365)
• pin Python version to 3.8 for dependabot @gruebel (#357)
• group pip updates @gruebel (#353)
• Bump release-drafter/release-drafter from 5.24.0 to 6.0.0 @dependabot (#341)
• Bump peter-evans/create-pull-request from 5.0.2 to 6.1.0 @dependabot (#344)
• Bump actions/setup-node from 3.8.1 to 4.0.3 @dependabot (#346)
• Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.9.0 @dependabot (#342)
• Bump ws from 6.2.2 to 6.2.3 @dependabot (#338)
• add pre-commit and replace black with ruff-format @gruebel (#339)
• update JS and Python dependencies @gruebel (#322)
• drop Python 3.7 support @gruebel (#336)

🚀 Features

• small performance improvements @gruebel (#362)
• add Python 3.13 support @gruebel (#337)

🧰 Maintenance

• leverage new type syntax @gruebel (#355)
• switch to ruff for linting @gruebel (#340)

0.6.3 🌈

Changes

• update deps and upper bound policy_sentry @gruebel (#335)

0.6.2 🌈

Changes

• Revert "[SCM ADMIN] Adding/Updating GUS aware code owners info @W-13958158" @svc-scm (#316)
• Update dependencies @gruebel (#312)

🚀 Features

• create ResourcePolicyDocument with internet reachable check @gruebel (#321)
• extend list of actions exposing credentials @gruebel (#315)

🐛 Bug Fixes

• properly handle missing managed policies @gruebel (#319)

0.6.1 🌈

Changes

• update GHA workflows and add python version test jobs @gruebel (#309)
• bump pyyaml to 6.0.1 @nitrocode (#310)
• [SCM ADMIN] Adding/Updating GUS aware code owners info @W-13958158 @svc-scm (#308)
• update dependencies and fix mypy and pylint issues @gruebel (#307)
• Suppress findings when conditions exist, except when --flag-all-risky-actions flag is included @jacobappleton-orbis (#303)
• Support federated principals @gruebel (#304)

0.6.0 🌈

Changes

• Feature/added filter by severity option @melaniap-codsec (#295)

0.5.1 🌈

Changes

• More gamelift cred vending actions @iann0036 (#286)
• Update Python dependencies @kmcquade (#266)
• #277 broken link fixed. @amityadav2026 (#280)

0.5.0 🌈

Changes

• Optionally allow noisy results to flag risky actions regardless of resource constraints or conditions usage @kmcquade (#257)

🐛 Bug Fixes

• Fix #242 - print Infra modification findings only if they exist @kmcquade (#259)

📝 Documentation

• Update example report to the latest version @kmcquade (#253)

0.4.10 🌈

Changes

• Ability to return json results when used as python lib @mrpool404 (#250)
• Update security.yml to non-vulnerable GitHub actions version @kmcquade (#249)

0.4.9 🌈

Changes

• AWS_DEFAULT_PROFILE is respected; Path fixes @kmcquade (#239)