Deprecation Notice

I created uv-secure to resolve some pain points I had with getting pip-audit to work
with uv.lock files. Since
uv audit was announced though I
now use that for my repos and am deprecating uv-secure in favour of the uv audit
command.

If uv audit does not work for your workflow, consider
pysentry-rs or
pip-audit instead.

Thank you to everyone that took the time to raise issues and give me feedback on uv-secure!

What's Changed

• chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 in the actions-dependencies group by @dependabot[bot] in #225
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #226
• Migrate linter configs to TOML and enable ryl fixes by @owenlamont in #227
• fix: use pinact CLI in update workflow by @owenlamont in #228
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #233
• chore(deps): bump the actions-dependencies group with 2 updates by @dependabot[bot] in #231
• 215 deprecate uv-secure by @owenlamont in #234

Full Changelog: 0.17.1...v0.17.2

What's Changed

• Replace yamllint hook with ryl-pre-commit by @owenlamont in #214
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #217
• chore(deps): bump the actions-dependencies group with 2 updates by @dependabot[bot] in #216
• chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 in the actions-dependencies group by @dependabot[bot] in #219
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #218
• chore(deps): bump the actions-dependencies group with 3 updates by @dependabot[bot] in #221
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #222
• 220 erroneous no pypi dependencies to check by @owenlamont in #223

Full Changelog: 0.17.0...0.17.1

What's Changed

• Bump uv_build build-system range by @owenlamont in #204
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #206
• chore(deps): bump astral-sh/setup-uv from 7.2.0 to 7.3.0 in the actions-dependencies group by @dependabot[bot] in #205
• chore: refresh dependencies and linters by @create-pr-workflow-auth[bot] in #209
• Add safe --fix support for unused ignores in TOML configs by @owenlamont in #210
• Highlight maintenance failure entries and bump version by @owenlamont in #211

Full Changelog: 0.16.0...0.17.0

What's Changed

• 183 uv secure should report if it itself has known vulnerabilities, add --ignore-unfixed option, and fix json output by @owenlamont in #202
• 193 add an option to only show vulnerabilities at a certain level or higher, show vulnerability severities, and optionally error for unused dependency/vulnerability ignores by @owenlamont in #203

Full Changelog: 0.15.4...0.16.0

What's Changed

• 180 replace mypy with ty by @owenlamont in #181
• feat: allow aliases for ignored vulnerabilities in configuration by @owenlamont in #182

Full Changelog: 0.15.3...0.15.4

What's Changed

• chore(deps): bump the actions-dependencies group with 4 updates by @dependabot[bot] in #163
• chore: refresh uv.lock by @create-pr-workflow-auth[bot] in #164
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #165
• chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 in the actions-dependencies group by @dependabot[bot] in #167
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #168
• chore(deps): bump the actions-dependencies group with 2 updates by @dependabot[bot] in #170
• chore: refresh uv.lock by @create-pr-workflow-auth[bot] in #171
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #172
• chore(deps): bump the actions-dependencies group with 3 updates by @dependabot[bot] in #176
• Feature/sqlite caching by @owenlamont in #179
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #178

Full Changelog: 0.15.2...0.15.3

What's Changed

• chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 in the actions-dependencies group by @dependabot[bot] in #160
• 161 fix asyncer dependency problem by @owenlamont in #162

Full Changelog: 0.15.1...0.15.2

What's Changed

• chore(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.3 in the actions-dependencies group by @dependabot[bot] in #155
• chore: refresh uv.lock by @create-pr-workflow-auth[bot] in #156
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #157
• Make PyPi source check more robust by @owenlamont in #159

Full Changelog: 0.15.0...0.15.1

What's Changed

• chore: refresh uv.lock by @create-pr-workflow-auth[bot] in #138
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #139
• chore: refresh uv.lock by @create-pr-workflow-auth[bot] in #150
• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #151
• Refactor and enhance documentation across multiple modules by @owenlamont in #153
• 146 make uv-secure detect if uv itself is insecure by @owenlamont in #154

Full Changelog: 0.14.4...0.15.0

What's Changed

• chore: refresh .pre-commit-config.yaml by @create-pr-workflow-auth[bot] in #134
• chore(deps): bump the actions-dependencies group with 3 updates by @dependabot[bot] in #133
• chore: refresh uv.lock by @create-pr-workflow-auth[bot] in #136
• Update version to 0.14.4 and bump hishel dependency to 1.1.2 by @owenlamont in #137

Full Changelog: 0.14.3...0.14.4