Releases: projectpotos/actions
Releases · projectpotos/actions
Release list
v0.5.0
Immutable
release. Only release title and notes can be modified.
v0.4.0
Immutable
release. Only release title and notes can be modified.
0.4.0 (2026-07-14)
Breaking Changes
## Summary
This PR adds smoke tests for ruff, hadolint and shellcheck
## Type of Change
- [ ] 🐛 Bug fix — patch version bump
- [ ] ✨ New workflow — minor version bump
- [x] 🔧 Update existing workflow — patch or minor version bump
- [ ] 🗑️ EOL / deprecate workflow
- [ ] 📖 Documentation only
- [ ] 🔒 Security improvement
- [ ] 🤖 Dependency / tooling update
## Checklist
- [ ] Workflow YAML is created or updated under `.github/workflows/`
- [ ] Documentation is created or updated under `docs/workflows/` (or
`docs/actions/`)
- [ ] Permissions table in `docs/security/permissions.md` is updated
- [ ] `zensical.toml` nav is updated (required when a docs page is added
or removed)
- [ ] `AGENTS.md` is updated (required when repository structure or
conventions change)
- [ ] A smoke-test job exists (or the exception is documented)
- [ ] All caller examples include `permissions: {}` at the workflow
level with explicit per-job permissions
- [ ] All third-party actions are pinned to a full commit SHA with
version tag comment (e.g. `@abc1234 # v3`)
- [ ] Any new third-party actions have been evaluated against the
[action selection
criteria](https://projectpotos.github.io/actions/security/supply-chain/#action-selection-criteria)
- [ ] No new known-vulnerable dependencies have been introduced (check
Dependabot alerts and the
[thresholds](https://projectpotos.github.io/actions/security/vulnerability-management/))
- [ ] For breaking changes: migration guidance is included in the docs
and the commit message contains `BREAKING CHANGE:`
- [ ] For EOL: deprecation notice is added to the workflow YAML and docs
v0.3.0
Immutable
release. Only release title and notes can be modified.
0.3.0 (2026-07-14)
Breaking Changes
## Summary
This PR reworks huge parts of the docs to better allign them with the
radiorabe/actions docs. It also adds the missing ENISA security
considerations and evaluations.
Also, better issue templates.
## Type of Change
- [ ] 🐛 Bug fix — patch version bump
- [ ] ✨ New workflow — minor version bump
- [ ] 🔧 Update existing workflow — patch or minor version bump
- [ ] 🗑️ EOL / deprecate workflow
- [x] 📖 Documentation only
- [ ] 🔒 Security improvement
- [ ] 🤖 Dependency / tooling update
## Checklist
- [ ] Workflow YAML is created or updated under `.github/workflows/`
- [ ] Documentation is created or updated under `docs/workflows/` (or
`docs/actions/`)
- [ ] Permissions table in `docs/security/permissions.md` is updated
- [ ] `zensical.toml` nav is updated (required when a docs page is added
or removed)
- [ ] `AGENTS.md` is updated (required when repository structure or
conventions change)
- [ ] A smoke-test job exists (or the exception is documented in
`AGENTS.md`)
- [ ] All caller examples include `permissions: {}` at the workflow
level with explicit per-job permissions
- [ ] All third-party actions are pinned to a full commit SHA with
version tag comment (e.g. `@abc1234 # v3`)
- [ ] Any new third-party actions have been evaluated against the
[action selection
criteria](https://projectpotos.github.io/actions/security/supply-chain/#action-selection-criteria)
- [ ] Consuming repositories' `allowed_actions` (tofu repo config) are
updated for new third-party actions
- [ ] `uvx zizmor --persona pedantic .` and `uvx yamllint --strict .`
are clean
- [ ] For breaking changes: migration guidance is included in the docs
and the commit message contains `BREAKING CHANGE:`
- [ ] For EOL: deprecation notice is added to the workflow YAML and docs
Documentation
- remove analysis (ad39d82)
Chores
- ci: bump astral-sh/setup-uv from 8.3.0 to 8.3.1 in /setup-uv (#10) (f38c1fd)
- ci: bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#9) (73cb3bd)
- ci: bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#7) (09c92b5)
- ci: bump astral-sh/setup-uv from 8.2.0 to 8.3.0 in /setup-uv (#8) (1426d9b)
CI
- exclude our own dependencies from the cooldown (40f6449)
v0.2.2
Immutable
release. Only release title and notes can be modified.
v0.2.1
Immutable
release. Only release title and notes can be modified.
0.2.1 (2026-07-10)
Bug Fixes
- release-ansible-collection: dont commit back to repo (d552491)
Documentation
- thx u RaBe (af0ecb4)
Chores
- ci: bump docker/metadata-action from 6.1.0 to 6.2.0 (#5) (48c76c3)
- ci: bump docker/login-action from 4.2.0 to 4.4.0 (#6) (494baa7)
- ci: bump docker/setup-qemu-action from 3.6.0 to 4.2.0 (#1) (43a5358)
- ci: bump actions/upload-artifact from 5.0.0 to 7.0.1 (#4) (52c3db2)
- ci: bump actions/setup-python from 6.2.0 to 6.3.0 (#2) (5cdcc7c)
- ci: bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#3) (0d8aac9)
v0.2.0
Immutable
release. Only release title and notes can be modified.
v0.1.0
Immutable
release. Only release title and notes can be modified.