Skip to content

Commit 9339409

Browse files
lelialelia
authored
chore: fix release and updater script (#57)
* chore: bump versions to v2.0.2, clean changelog, fix update script Signed-off-by: lelia <lelia@socket.dev> * chore: handle existing release edge case Signed-off-by: lelia <lelia@socket.dev> * chore: update PR template to remove temp instrux Signed-off-by: lelia <lelia@socket.dev> * chore: further template tweaks Signed-off-by: lelia <lelia@socket.dev> * fix: remove duplicate line from workflow Signed-off-by: lelia <lelia@socket.dev> --------- Signed-off-by: lelia <lelia@socket.dev>
1 parent f3538b7 commit 9339409

File tree

7 files changed

+29
-228
lines changed

7 files changed

+29
-228
lines changed

‎.github/PULL_REQUEST_TEMPLATE.md‎

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,7 @@
2323

2424
- [ ] `socket_basics/version.py` updated to new version
2525
- [ ] `pyproject.toml` `version:` field updated to match
26-
- [ ] `action.yml` `image:` ref updated to `docker://ghcr.io/socketdev/socket-basics:<new-version>` *(auto-updated by `publish-docker.yml` after v2.0.0; manual update required only for the initial v2.0.0 release)*
27-
- [ ] `CHANGELOG.md` `[Unreleased]` section reviewed *(note: this content is replaced by auto-generated release notes when the tag fires — see [docs/releasing.md](../docs/releasing.md#changelog-and-release-notes))*
26+
- [ ] `action.yml` `image:` ref updated to `docker://ghcr.io/socketdev/socket-basics:<new-version>` *(auto-updated by `publish-docker.yml`
27+
- [ ] `CHANGELOG.md` `[Unreleased]` section reviewed
2828

29-
> ⚠️ **After merging:** run `publish-docker.yml` via `workflow_dispatch` with the new version
30-
> **before** creating the git tag. The image must exist in GHCR before the tag is pushed.
31-
> See [docs/releasing.md](../docs/releasing.md) for the full process.
29+
> See [docs/releasing.md](../docs/releasing.md) for the full release process.

‎CHANGELOG.md‎

Lines changed: 0 additions & 198 deletions
Original file line numberDiff line numberDiff line change
@@ -4,207 +4,9 @@ All notable changes to this project will be documented in this file.
44

55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
66

7-
> **Versioning note:** Releases through `1.1.3` used bare semver tags (e.g. `1.1.3`).
8-
> Starting with `v2.0.0` the project uses a `v` prefix (e.g. `v2.0.0`). Floating major
9-
> tags (`v2`) are intentionally not published — immutable version tags and SHA pinning
10-
> are the recommended consumption pattern for a security tool.
11-
127
---
138

149
## [Unreleased]
1510

16-
## [2.0.2] - 2026-03-22
17-
18-
<!-- Release notes generated using configuration in .github/release.yml at v2.0.2 -->
19-
20-
21-
22-
**Full Changelog**: https://github.com/SocketDev/socket-basics/compare/v2.0.1...v2.0.2
23-
## [2.0.0] - 2026-03-20
24-
25-
<!-- Release notes generated using configuration in .github/release.yml at v2.0.0 -->
26-
27-
## What's Changed
28-
### 🔧 Other Changes
29-
* feat: 🐳 multi-stage Docker builds, immutable release pipeline, `CHANGELOG` automation by @lelia in https://github.com/SocketDev/socket-basics/pull/46
30-
* fix(ci): add conventional commit prefixes to Dependabot config by @lelia in https://github.com/SocketDev/socket-basics/pull/53
31-
* fix(ci): support breaking change indicator (!) in commit-lint pattern by @lelia in https://github.com/SocketDev/socket-basics/pull/54
32-
* fix(ci): accept full tag name in workflow_dispatch, drop auto-v-prefix by @lelia in https://github.com/SocketDev/socket-basics/pull/55
33-
* feat!: switch to pre-built GHCR images by @lelia in https://github.com/SocketDev/socket-basics/pull/48
34-
35-
36-
**Full Changelog**: https://github.com/SocketDev/socket-basics/compare/1.1.3...v2.0.0
37-
## [1.1.3] - 2026-03-03
38-
39-
### Added
40-
- Smoke test Docker workflow with scheduled runs every 12 hours ([#41])
41-
- `pytest` GitHub Actions workflow for Python unit tests ([#42])
42-
- Structured findings added to webhook payload ([#38])
43-
44-
### Fixed
45-
- Slack and MS Teams notifiers not reading URL from dashboard config ([#37])
46-
47-
[#37]: https://github.com/SocketDev/socket-basics/pull/37
48-
[#38]: https://github.com/SocketDev/socket-basics/pull/38
49-
[#41]: https://github.com/SocketDev/socket-basics/pull/41
50-
[#42]: https://github.com/SocketDev/socket-basics/pull/42
51-
52-
## [1.1.2] - 2026-03-02
53-
54-
### Changed
55-
- Bump Trivy from `v0.67.2` to `v0.69.2` ([#39])
56-
- `CODEOWNERS` updated with new team name ([#36])
57-
58-
[#36]: https://github.com/SocketDev/socket-basics/pull/36
59-
[#39]: https://github.com/SocketDev/socket-basics/pull/39
60-
61-
## [1.1.0] - 2026-02-20
62-
63-
### Fixed
64-
- Jira dashboard config params not reaching notifier ([#22])
65-
- Notifiers reading repo/branch from wrong source ([#30])
66-
- GitHub PR comment enhancement and layout improvements ([#26])
67-
68-
### Changed
69-
- `CODEOWNERS` updated to reference new GHEC team name ([#33])
70-
71-
[#22]: https://github.com/SocketDev/socket-basics/pull/22
72-
[#26]: https://github.com/SocketDev/socket-basics/pull/26
73-
[#30]: https://github.com/SocketDev/socket-basics/pull/30
74-
[#33]: https://github.com/SocketDev/socket-basics/pull/33
75-
76-
## [1.0.29] - 2026-02-19
77-
78-
### Added
79-
- `SKIP_SOCKET_SUBMISSION` and `SKIP_SOCKET_REACH` environment variables for Node.js
80-
Socket CLI integration ([#29])
81-
82-
### Changed
83-
- Pin TruffleHog to known-good version tag ([#32])
84-
- Enrich OpenGrep alerts with full vulnerability metadata and detailed reports ([#28])
85-
86-
[#28]: https://github.com/SocketDev/socket-basics/pull/28
87-
[#29]: https://github.com/SocketDev/socket-basics/pull/29
88-
[#32]: https://github.com/SocketDev/socket-basics/pull/32
89-
90-
## [1.0.28] - 2026-02-06
91-
92-
### Changed
93-
- Dependency upgrades and internal maintenance ([#27])
94-
95-
[#27]: https://github.com/SocketDev/socket-basics/pull/27
96-
97-
## [1.0.27] - 2026-02-06
98-
99-
### Added
100-
- Dockerfile auto-discovery workflow pattern documentation ([#25])
101-
- `scan_type` parameter added to full scan API calls ([#24])
102-
103-
[#24]: https://github.com/SocketDev/socket-basics/pull/24
104-
[#25]: https://github.com/SocketDev/socket-basics/pull/25
105-
106-
## [1.0.26] - 2026-01-20
107-
108-
### Fixed
109-
- Empty CLI string defaults no longer override env/API config ([#17])
110-
111-
### Changed
112-
- Bump `urllib3` from `2.5.0` to `2.6.3` ([#21])
113-
114-
[#17]: https://github.com/SocketDev/socket-basics/pull/17
115-
[#21]: https://github.com/SocketDev/socket-basics/pull/21
116-
117-
## [1.0.25] - 2025-10-28
118-
119-
### Fixed
120-
- Regression in rule name detection ([#15])
121-
122-
[#15]: https://github.com/SocketDev/socket-basics/pull/15
123-
124-
## [1.0.24] - 2025-10-28
125-
126-
### Fixed
127-
- Hard-coded detection for Golang ([#14])
128-
129-
[#14]: https://github.com/SocketDev/socket-basics/pull/14
130-
131-
## [1.0.23] - 2025-10-28
132-
133-
### Changed
134-
- Improve default SAST ruleset ([#13])
135-
136-
[#13]: https://github.com/SocketDev/socket-basics/pull/13
137-
138-
## [1.0.21] - 2025-10-24
139-
140-
### Fixed
141-
- Caching result fix ([#12])
142-
143-
[#12]: https://github.com/SocketDev/socket-basics/pull/12
144-
145-
## [1.0.20] - 2025-10-24
146-
147-
### Fixed
148-
- Restore Node.js and Socket CLI in container ([#11])
149-
150-
[#11]: https://github.com/SocketDev/socket-basics/pull/11
151-
152-
## [1.0.10] - 2025-10-22
153-
154-
### Changed
155-
- Updated examples with PR check and commit hash pinning ([#9])
156-
157-
[#9]: https://github.com/SocketDev/socket-basics/pull/9
158-
159-
## [1.0.9] - 2025-10-22
160-
161-
### Added
162-
- Action inputs for configuring scan behavior ([#8])
163-
164-
### Fixed
165-
- Documentation and version check issues ([#7])
166-
167-
[#7]: https://github.com/SocketDev/socket-basics/pull/7
168-
[#8]: https://github.com/SocketDev/socket-basics/pull/8
169-
170-
## [1.0.3] - 2025-10-21
171-
172-
### Added
173-
- GitHub token support in `action.yml` ([#3])
174-
175-
### Fixed
176-
- `action.yml` configuration issues ([#3])
177-
- Documentation link ([#5])
178-
179-
[#3]: https://github.com/SocketDev/socket-basics/pull/3
180-
[#5]: https://github.com/SocketDev/socket-basics/pull/5
181-
182-
## [1.0.2] - 2025-10-20
183-
184-
### Fixed
185-
- Initial Trivy + Socket results integration fixes ([#2])
186-
187-
[#2]: https://github.com/SocketDev/socket-basics/pull/2
188-
189-
---
190-
19111
<!-- Comparison links — updated automatically by scripts/update_changelog.py on each release -->
19212
[Unreleased]: https://github.com/SocketDev/socket-basics/compare/v2.0.2...HEAD
193-
[2.0.2]: https://github.com/SocketDev/socket-basics/compare/v2.0.0...v2.0.2
194-
[2.0.0]: https://github.com/SocketDev/socket-basics/compare/1.1.3...v2.0.0
195-
[1.1.3]: https://github.com/SocketDev/socket-basics/compare/1.1.2...1.1.3
196-
[1.1.2]: https://github.com/SocketDev/socket-basics/compare/1.1.0...1.1.2
197-
[1.1.0]: https://github.com/SocketDev/socket-basics/compare/1.0.29...1.1.0
198-
[1.0.29]: https://github.com/SocketDev/socket-basics/compare/1.0.28...1.0.29
199-
[1.0.28]: https://github.com/SocketDev/socket-basics/compare/1.0.27...1.0.28
200-
[1.0.27]: https://github.com/SocketDev/socket-basics/compare/1.0.26...1.0.27
201-
[1.0.26]: https://github.com/SocketDev/socket-basics/compare/1.0.25...1.0.26
202-
[1.0.25]: https://github.com/SocketDev/socket-basics/compare/1.0.24...1.0.25
203-
[1.0.24]: https://github.com/SocketDev/socket-basics/compare/1.0.23...1.0.24
204-
[1.0.23]: https://github.com/SocketDev/socket-basics/compare/1.0.21...1.0.23
205-
[1.0.21]: https://github.com/SocketDev/socket-basics/compare/1.0.20...1.0.21
206-
[1.0.20]: https://github.com/SocketDev/socket-basics/compare/1.0.10...1.0.20
207-
[1.0.10]: https://github.com/SocketDev/socket-basics/compare/1.0.9...1.0.10
208-
[1.0.9]: https://github.com/SocketDev/socket-basics/compare/1.0.3...1.0.9
209-
[1.0.3]: https://github.com/SocketDev/socket-basics/compare/1.0.2...1.0.3
210-
[1.0.2]: https://github.com/SocketDev/socket-basics/commits/1.0.2

‎README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
- name: Run Socket Basics
3636
# Pin to a commit SHA for supply-chain safety.
3737
# Dependabot will keep this up to date automatically — see docs/github-action.md.
38-
uses: SocketDev/socket-basics@<sha> # v2.0.0
38+
uses: SocketDev/socket-basics@<sha> # v2.0.2
3939
env:
4040
GITHUB_PR_NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }}
4141
with:

0 commit comments

Comments
 (0)