What's Changed

• Read pinned version from custom comment by @mheap in https://github.com/mheap/pin-github-action/pull/150

Full Changelog: https://github.com/mheap/pin-github-action/compare/v1.9.0...v1.9.1

What's Changed

• Allow pin@{ref} comment to be customised by @mheap in https://github.com/mheap/pin-github-action/pull/142
• Update Dependencies by @mheap in https://github.com/mheap/pin-github-action/pull/144

Full Changelog: https://github.com/mheap/pin-github-action/compare/v1.8.0...v1.9.0

What's Changed

• Add support for reusable workflows by @mheap in https://github.com/mheap/pin-github-action/pull/113

Full Changelog: https://github.com/mheap/pin-github-action/compare/v1.7.0...v1.8.0

What's Changed

• feat: yaml-line-width and yaml-null-str YAML toString options by @lucasgonze in https://github.com/mheap/pin-github-action/pull/87
• feat: multiple input files by @lucasgonze in https://github.com/mheap/pin-github-action/pull/89

New Contributors

• @lucasgonze made their first contribution in https://github.com/mheap/pin-github-action/pull/87

Full Changelog: https://github.com/mheap/pin-github-action/compare/v1.6.0...v1.7.0

What's Changed

• Add error handling for rate limits by @mheap in https://github.com/mheap/pin-github-action/pull/75
• Add debug logging by @mheap in https://github.com/mheap/pin-github-action/pull/76

Full Changelog: https://github.com/mheap/pin-github-action/compare/v1.5.0...v1.6.0

• Add support for pinning dependencies in composite actions (#44, #46)

• Allow workflow files that do not contain any actions (#29)

• Bump all dependencies to the latest version

• Always point to the commit sha when pinning. The tag sha previously worked but have recently started to fail (#21, #22)

• Allow consumers to ignore any dependencies that are already pinned with the -i flag (#19)

• Bump dependencies

• Fix pinning workflows that have a run step (#9)

• Update release workflow to ensure release includes the version bump commit

New

• Add the ability to mark actions as allowed and skip pinning them to a specific SHA (#6)

New

• Bump vulnerable dependencies
• Add NPM release workflow