audit/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.2.6] - 2025-11-22

• Update cargo-audit to 0.22.0

[1.2.5] - 2025-10-09

• Pin the version of actions/cache to commit hash by @Gronner in #122

[1.2.4] - 2025-03-03

• Update cargo-audit to 0.21.2

[1.2.3] - 2024-12-17

• Show a better error message when running "cargo audit" fails #98

[1.2.2] - 2024-11-06

• Update cargo-audit to 0.21.0

[1.2.1] - 2024-07-31

• Temporarily remove --locked from the install instructions again, since cargo-audit relies on an old version of time that is incompatible with Rust 1.80.

[1.2.0] - 2024-03-05

• feat: add --locked to cargo install cargo-audit by @lwshang in #72
• Add working directory input to configure where cargo audit executes by @jonasbb in #78

[1.1.14] - 2024-02-18

• Update cargo-audit to 0.20.0

[1.1.13] - 2024-02-03

• Update cargo-audit to 0.19.0

[1.1.12] - 2024-01-20

• Fix default of file argument to make it work again for repositories without Cargo.lock checked in.

[1.1.11] - 2024-01-18

• Allow specifying the path to the Cargo.lock file, in case it is not in the root of the repository (#55)
• Update the example in the README, to have the correct permissions for private repositories.

[1.1.10] - 2023-11-02

• Fix running the action, by using the correct version of the cache action.

[1.1.9] - 2023-11-01

• Update cargo-audit to 0.18.3

[1.1.8] - 2023-08-23

• Handle missing data in advisories better to prevent crashing (#40)

[1.1.7] - 2023-05-12

• Update cargo-audit to 0.17.6

[1.1.6] - 2023-03-24

• Update cargo-audit to 0.17.5

[1.1.5] - 2022-12-22

• Fix duplicate issues for yanked crates.

  The previous version introduced a bug where existing issues were not properly detected. This only affected issues for yanked crates. Now duplicate issues will no longer be created.

[1.1.4] - 2022-12-22

• Handle warnings without any associated advisory.

  This occurs for yanked crates, where the advisory field is null in the JSON output. Now a message is shown that the crate and version is yanked.

[1.1.3] - 2022-12-05

• Fix the path to the cargo installation directory to fix caching.

[1.1.2] - 2022-11-09

Changed

• Update cargo-audit to 0.17.4 which fixes checking for yanked crates.

[1.1.1] - 2022-10-13

Changed

• Switch from set-output to $GITHUB_OUTPUT to avoid warning https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

[1.1.0] - 2022-08-14

Added

• Present aliases for the RustSec ID and related advisories in the overview table (#1).

Changed

• Setting denyWarnings will now pass --deny warnings to cargo audit.

[1.0.1] - 2022-08-09

Added

• Create proper release tags.

[1.0.0] - 2022-08-09

Initial Version