lerko
37bf443e29
The existing .grype.yaml ignore listed the wish SCP traversal only by CVE id; grype's db now matches it as GHSA-xjvp-7243-rg9h and ignores are exact-id, so the rc.2 scan gate tripped on an already-triaged finding. List both ids. Vulnerable SCP middleware is never compiled in; real fix is the charm v2 stack migration (#126). cliff.toml ignore_tags folds rc tags into the next real release so v0.1.0's notes cover full history instead of commits-since-rc.2.
50 lines
1.5 KiB
TOML
50 lines
1.5 KiB
TOML
[changelog]
|
|
header = """
|
|
# Changelog\n
|
|
"""
|
|
body = """
|
|
{% if version %}\
|
|
## [{{ version }}] — {{ timestamp | date(format="%Y-%m-%d") }}
|
|
{% else %}\
|
|
## [Unreleased]
|
|
{% endif %}\
|
|
{% for group, commits in commits | group_by(attribute="group") %}
|
|
### {{ group | striptags | trim }}
|
|
{% for commit in commits %}
|
|
- {{ commit.message | split(pat="\n") | first | trim }}\
|
|
{% endfor %}
|
|
{% endfor %}\n
|
|
"""
|
|
trim = true
|
|
|
|
[git]
|
|
conventional_commits = true
|
|
filter_unconventional = true
|
|
split_commits = false
|
|
protect_breaking_commits = false
|
|
filter_commits = false
|
|
tag_pattern = "v[0-9].*"
|
|
# rc tags are pipeline rehearsals, not releases — without this, the final
|
|
# tag's notes would only cover commits since the last rc (near-empty for
|
|
# v0.1.0). Ignored tags fold their commits into the next real release.
|
|
ignore_tags = "v.*-rc.*"
|
|
topo_order = false
|
|
sort_commits = "oldest"
|
|
|
|
commit_parsers = [
|
|
{ message = "^feat", group = "Added" },
|
|
{ message = "^fix", group = "Fixed" },
|
|
{ message = "^perf", group = "Changed" },
|
|
{ message = "^refactor", group = "Changed" },
|
|
{ message = "^security", group = "Security" },
|
|
{ body = ".*security", group = "Security" },
|
|
{ body = "BREAKING", group = "Breaking" },
|
|
{ footer = "BREAKING.CHANGE", group = "Breaking" },
|
|
{ message = "^docs", skip = true },
|
|
{ message = "^style", skip = true },
|
|
{ message = "^chore", skip = true },
|
|
{ message = "^ci", skip = true },
|
|
{ message = "^test", skip = true },
|
|
{ message = "^build", skip = true },
|
|
]
|