v0.9.0

Maintainer Notes

These release has a breaking change. Updating to this version will require code changes - see #195 more more information.

Migration Notes

If you were using the check_only input in the autosync action, please see the example below on how to achieve this with the dry_run input:

   steps:
      - uses: actions/checkout@v3
      - name: Run trestlebot
        id: check
        uses: RedHatProductSecurity/trestle-bot/actions/autosync@v0.9.0
        with:
          markdown_path: "markdown/profiles"
          oscal_model: "profile"
          dry_run: true
      # Optional - Set the action to failed if changes are detected.
      - name: Fail for changes
        if: ${{ steps.check.outputs.changes == 'true' }}
        uses: actions/github-script@v7
        with:
          script: |
              core.setFailed('Changes detected. Manual intervention required.')

What's Changed

• ⬆️ Bump idna from 3.6 to 3.7 by @dependabot in #210
• ⬆️ Bump safety from 3.0.1 to 3.1.0 by @dependabot in #203
• feat: replaces 'check_only' with 'dry_run' option by @jpower432 in #195
• ⬆️ Bump email-validator from 2.1.0.post1 to 2.1.1 by @dependabot in #180
• refactor: migrates rule validation to pydantic by @jpower432 in #207

Full Changelog: v0.8.1...v0.9.0