What's Changed

• Add permissions to all workflows by @truggeri in #687
• build(deps-dev): bump globals from 16.0.0 to 17.4.0 by @dependabot[bot] in #690
• build(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @dependabot[bot] in #693
• build(deps-dev): bump @hono/node-server from 1.19.10 to 1.19.13 by @dependabot[bot] in #694
• build(deps-dev): bump hono from 4.12.7 to 4.12.12 by @dependabot[bot] in #695
• Dynamically update the tracking tag in action by @truggeri in #696
• fix: handle duplicate dependency names in parseMetadataLinks by @devantler in #700
• fix: remove $ anchor from updateFragment regex to handle pip directory suffixes by @devantler in #698
• Updates to README for permissions clarification by @truggeri in #697
• fix: resolve update-type null for Python, Composer, and Terraform PRs by @vitorsdcs in #704
• build(deps-dev): bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in #703
• build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @dependabot[bot] in #701
• build(deps): bump @actions/github from 9.0.0 to 9.1.0 in the dependencies group across 1 directory by @dependabot[bot] in #702
• build(deps-dev): bump hono from 4.12.12 to 4.12.14 by @dependabot[bot] in #705
• v3.1.0 by @fetch-metadata-action-automation[bot] in #692

New Contributors

• @devantler made their first contribution in #700
• @vitorsdcs made their first contribution in #704

Full Changelog: v3...v3.1.0

The breaking change is requiring Node.js version v24 as the Actions runtime.

What's Changed

• feat: Parse versions from metadata links by @ppkarwasz in #632
• Upgrade actions core and actions github packages by @truggeri in #649
• docs: Add notes for using alert-lookup with App Token by @sue445 in #656
• feat!: update Node.js version to v24 by @sturman in #671
• Switch build tooling from ncc to esbuild by @truggeri in #676
• Add --legal-comments=none to esbuild build commands by @jeffwidman in #679
• Bump tsconfig target from es2022 to es2024 by @jeffwidman in #680
• Remove vestigial outDir from tsconfig.json by @jeffwidman in #681
• Switch tsconfig module resolution to bundler by @jeffwidman in #682
• Remove skipLibCheck from tsconfig.json by @jeffwidman in #683
• Add typecheck step to CI by @jeffwidman in #685
• Enable noImplicitAny in tsconfig.json by @jeffwidman in #684
• Upgrade @actions/core to ^3.0.0 by @truggeri in #677
• Upgrade @actions/github to ^9.0.0 and @octokit/request-error to ^7.1.0 by @truggeri in #678
• Bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in #651
• Bump hono from 4.11.1 to 4.11.4 by @dependabot[bot] in #652
• Bump hono from 4.11.4 to 4.11.7 by @dependabot[bot] in #653
• Bump hono from 4.11.7 to 4.12.0 by @dependabot[bot] in #657
• Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #655
• Bump @modelcontextprotocol/sdk from 1.25.1 to 1.26.0 by @dependabot[bot] in #654
• Bump @hono/node-server from 1.19.9 to 1.19.10 by @dependabot[bot] in #665
• Bump hono from 4.12.2 to 4.12.5 by @dependabot[bot] in #664
• Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #667
• Bump hono from 4.12.5 to 4.12.7 by @dependabot[bot] in #668
• Bump actions/create-github-app-token from 2.2.1 to 3.0.0 by @dependabot[bot] in #669
• Bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #670
• build(deps-dev): bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #674

New Contributors

• @ppkarwasz made their first contribution in #632
• @truggeri made their first contribution in #649
• @sue445 made their first contribution in #656
• @sturman made their first contribution in #671

Full Changelog: v2...v3.0.0

What's Changed

• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] in #628
• Bump the dev-dependencies group with 11 updates by @dependabot[bot] in #629
• Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by @dependabot[bot] in #635
• Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by @dependabot[bot] in #638
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #636
• Bump actions/setup-node from 4 to 5 by @dependabot[bot] in #637
• Bump actions/setup-node from 5 to 6 by @dependabot[bot] in #639
• Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by @dependabot[bot] in #643
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #642
• Bump actions/create-github-app-token from 2.2.0 to 2.2.1 by @dependabot[bot] in #648
• Bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #644
• Bump express from 5.1.0 to 5.2.1 by @dependabot[bot] in #645
• Bump @modelcontextprotocol/sdk from 1.11.2 to 1.24.0 by @dependabot[bot] in #647
• v2.5.0 by @fetch-metadata-action-automation[bot] in #631

Full Changelog: v2...v2.5.0

What's Changed

• Bump actions/create-github-app-token from 1.11.0 to 1.11.3 by @dependabot in #598
• Bump @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #578
• Add missing @octokit/request-error to package.json by @jeffwidman in #605
• Bump to ESLint 9 by @jeffwidman in #606
• Stop using a node16 devcontainer image by @jeffwidman in #608
• Make typescript compile to "es2022" by @jeffwidman in #609
• Bump the dev-dependencies group across 1 directory with 8 updates by @dependabot in #607
• Tidy up examples slightly by @jeffwidman in #611
• Fixup some anchor tags that weren't deeplinking by @jeffwidman in #614
• Remove unnecessary hardcoding of ref by @jeffwidman in #617
• Bump actions/create-github-app-token from 1.11.3 to 2.0.2 by @dependabot in #616
• Enable caching of npm install/npm ci for setup-node action by @jeffwidman in #618
• Add workflow to publish new version of immutable action on every release by @jeffwidman in #623
• Bump actions/create-github-app-token from 2.0.2 to 2.0.6 by @dependabot in #621
• v2.4.0 by @fetch-metadata-action-automation in #594

Full Changelog: v2...v2.4.0

What's Changed

• Bump actions/create-github-app-token from 1.10.2 to 1.10.3 by @dependabot in #537
• Update readme to include an if conditional by @Nishnha in #548
• Silence audit and funding messages from npm by @jeffwidman in #550
• Bump actions/create-github-app-token from 1.10.3 to 1.11.0 by @dependabot in #554
• fix readme action example by @CloudNStoyan in #563
• Fixed missing outputs in action.yml by @CatChen in #564
• Handle branch names containing dependency group by @CloudNStoyan in #565
• v2.3.0 by @fetch-metadata-action-automation in #543

New Contributors

• @CloudNStoyan made their first contribution in #563
• @CatChen made their first contribution in #564

Full Changelog: v2...v2.3.0

What's Changed

• Bump actions/create-github-app-token from 1.9.0 to 1.10.0 by @dependabot in #523
• Bump actions/create-github-app-token from 1.10.0 to 1.10.2 by @dependabot in #534
• Bump braces from 3.0.2 to 3.0.3 by @dependabot in #532
• v2.2.0 by @fetch-metadata-action-automation in #520

Full Changelog: v2...v2.2.0

What's Changed

• Relax engine-strict=true by @jeffwidman in #510
• Handle branch names containing hyphen separators by @tspencer244 in #450
• Switch to monthly release cadence by @jeffwidman in #509
• v2.1.0 by @fetch-metadata-action-automation in #518

New Contributors

• @tspencer244 made their first contribution in #450

Full Changelog: v2.0.0...v2.1.0

What's Changed

• Upgrade from node16 to node20 by @Nishnha in #443 👈 this is a potentially breaking change for some workflows
• v2 is the new tracking tag by @jeffwidman in #506
• v2.0.0 by @fetch-metadata-action-automation in #508

Full Changelog: v1.7.0...v2.0.0

What's Changed

• Bump dotenv from 16.0.3 to 16.3.1 by @dependabot in #404
• Bump @types/node from 20.2.3 to 20.3.3 by @dependabot in #407
• Bump the eslint-dependencies group with 4 updates by @dependabot in #409
• Update dependabot.yml by @bdragon in #410
• Bump @types/node from 20.3.3 to 20.4.0 by @dependabot in #411
• Bump yaml from 2.2.1 to 2.3.1 by @dependabot in #390
• Bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in #412
• Bump @types/node from 20.4.0 to 20.4.1 by @dependabot in #413
• Generate Dependabot PRs on Sundays weekly by @abdulapopoola in #417
• Aggressively group prod and dev dependencies for NPM by @abdulapopoola in #420
• Update .nvmrc to latest node 16 LTS version by @abdulapopoola in #422
• Bump the dev-dependencies group with 9 updates by @dependabot in #421
• Bump the dev-dependencies group with 1 update by @dependabot in #423
• Check for uncommitted files beyond the diff directory by @jeffwidman in #278
• Bump the dev-dependencies group with 6 updates by @dependabot in #424
• Bump the dev-dependencies group with 3 updates by @dependabot in #425
• Bump the dev-dependencies group with 6 updates by @dependabot in #428
• Bump the dev-dependencies group with 7 updates by @dependabot in #429
• Bump tibdex/github-app-token from 1.8.0 to 1.8.2 by @dependabot in #430
• Bump the dev-dependencies group with 4 updates by @dependabot in #432
• Bump actions/checkout from 3 to 4 by @dependabot in #436
• Bump the dev-dependencies group with 6 updates by @dependabot in #440
• Change actions/checkout@v3 to v4 in readme by @Nishnha in #444
• Bump the dev-dependencies group with 4 updates by @dependabot in #445
• Bump @vercel/ncc from 0.36.1 to 0.38.0 by @dependabot in #435
• Bump the dev-dependencies group with 4 updates by @dependabot in #447
• Bump the dev-dependencies group with 3 updates by @dependabot in #448
• Bump @babel/traverse from 7.22.8 to 7.23.2 by @dependabot in #457
• Add blurbs about using a PAT to the readme by @Nishnha in #466
• Bump @vercel/ncc from 0.38.0 to 0.38.1 by @dependabot in #462
• Bump actions/setup-node from 3 to 4 by @dependabot in #461
• Bump the dev-dependencies group with 13 updates by @dependabot in #497
• Bump tibdex/github-app-token from 1.8.2 to 2.1.0 by @dependabot in #442
• Scope app token to only this repo for security by @jeffwidman in #501
• Switch to the official action for managing app tokens by @jeffwidman in #504
• v1.7.0 by @fetch-metadata-action-automation in #505

New Contributors

• @bdragon made their first contribution in #410
• @abdulapopoola made their first contribution in #417

Full Changelog: v1.6.0...v1.7.0

What's Changed

• Add .vscode folder to .gitignore by @timothy-humphrey in #385
• Support for Grouped Updates by @Nishnha in #396
• v1.6.0 by @fetch-metadata-action-automation in #403

New Contributors

• @timothy-humphrey made their first contribution in #385

Full Changelog: v1...v1.6.0