This PR contains the following updates:

Release Notes

v0.7.4

Compare Source

🎉 GitHub Codeowners Validator 0.7.4 is now available!

Highlights

✨ New functionality

• Support GitHub App authentication (#​146) (@​julienduchesne)
  Now, you can use the GitHub App auth instead of private token. Read more here: https://github.com/mszostok/codeowners-validator/blob/main/docs/gh-token.md#github-app.

• New experimental check: Avoid shadowing (#​149) (@​julienduchesne)
  Reports if entries go from least specific to most specific. Otherwise, earlier entries are completely ignored.

  For example:

First entry

 /build/logs/ @​octocat

Shadows - reported as error

 * @​s1
 /b*/logs @​s5

OK

 /b*/other @​o1
 /script/* @​o2
 ```

🔧 Bug Fixes

• Apply hot fix to resolve issue with untrusted git repository for not-owned checker (#​148) (@​mszostok)
  Added to solve problem with actions/checkout#766.

Changelog

• 7dfc6dc: Support Github App authentication (#​146) (@​julienduchesne)
• 0e995bc: New experimental check: Avoid shadowing (#​149) (@​julienduchesne)
• d1be488: Apply hot fix to resolve issue with untrusted git repository for not-owned checker (#​148) (@​mszostok)
• cfa4033: Update main README.md (#​153) (@​mszostok)
• 7f3f5e2: Adjust docs and GitHub action for v0.7.4 release (#​154) (@​mszostok)

v0.7.3

Compare Source

🎉 GitHub Codeowners Validator 0.7.3 is now available!

Highlights

✨ New functionality

• not-owned-checker: Add git-ls-tree implementation with subdirectory support (#​141) (@​jeremycohen)
  Now you can specify against which subdirectories the not-owned check should be executed. To configure that, use the NOT_OWNED_CHECKER_SUBDIRECTORIES environment variable. In the default mode, it works as previously, where all files are checked.
• Add GitHub token validation to get rid of misleading error checks (#​143)

🔧 Bug Fixes

• Fix scope and internal error handling (#​145) (@​mszostok)
  The previous release informs the user about the internal error, but the exit code was not properly propagated. Now, besides the error message, the exit code is also set.

Changelog

• a16e4b9: not-owned-checker: Add git-ls-tree implementation with subdirectory support (#​141) (@​jeremycohen)
• 2ae5a4b: Add token validation when necessary, fmt shell code, enable 'gocritics' (#​143) (@​mszostok)
• 4e0aa9d: Prepare for release v0.7.3 (#​144) (@​mszostok)
• 436c7ac: Fix scope and internal error handling (#​145) (@​mszostok)

v0.7.2

Compare Source

🎉 GitHub Codeowners Validator 0.7.2 is now available!

Highlights

🔧 Bug Fixes

• Handle internal err, return issue with empty codeowners or git dirty state (#​130)
  This fixes a tech debt where codeowners-validator only logged the internal error and excited with 0 status code. Now, if there is any error, a proper exit code is returned.
• Allow comments in pattern line, update golangci-lint (#​129) (@​mszostok)
  Recently, GitHub allowed comments in CODEOWNERS files to appear at the end of a line, not just on their own line. As a result, a validation rule was removed to conform with a new syntax.

✨ New checks

• Add a flag to only allow teams as owners (#​127) (@​seveas)
  Now you can enable more strict rule and specify that only teams are allowed as owners of files.

🛡️ Security

• Bump dependencies (#​135) (@​mszostok)
• Bump alpine from 3.15.3 to 3.15.4 (#​136) (@​dependabot[bot])

Installation

See the Installation section for more installation options.

Docker images

ghcr.io:

• docker pull ghcr.io/mszostok/codeowners-validator:stable
• docker pull ghcr.io/mszostok/codeowners-validator:v0
• docker pull ghcr.io/mszostok/codeowners-validator:v0.7
• docker pull ghcr.io/mszostok/codeowners-validator:v0.7.2

Changelog 🚀

• d95ed83: Allow comments in pattern line, update golangci-lint (#​129) (@​mszostok)
• d7b92b1: Handle internal err, return issue with empty codeowners or git dirty state (#​130) (@​mszostok)
• bcdcc57: Bump dependencies (#​135) (@​mszostok)
• 3315c00: Add a flag to only allow teams as owners (#​127) (@​seveas)
• 5b87d6b: Add missing cfg in action.yml, add missing test for 'OwnersMustBeTeams' check (#​137) (@​mszostok)
• 127e9a8: Bump alpine from 3.15.3 to 3.15.4 (#​136) (@​dependabot[bot])
• f555ba6: Prepare for release v0.7.2 (#​138) (@​mszostok)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

• If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.