v1.3.2

1.3.2 (2026-05-21)

Bug Fixes

• security-scan: add actions: read permission required by codeql u… (2c99588)
• security-scan: add actions: read permission required by codeql upload-sarif (77df583)

v1.3.1

1.3.1 (2026-05-21)

Bug Fixes

• sign-image: login to ecr public before signing so cosign can push the signature (57c5ce2)
• sign-image: login to ecr public before signing so cosign can push the signature (b2f1e3c)

v1.3.0

1.3.0 (2026-05-21)

Features

• security-scan: add SARIF upload to docker and ECR security scans (fdb8e24)

v1.2.1

1.2.1 (2026-05-21)

Bug Fixes

• docker-build-push-ecr: use build step digest output directly for multi-platform builds (5505a3f)
• docker-build-push-ecr: use build step digest output directly for multi-platform builds (f92d1a4)

v1.2.0

1.2.0 (2026-05-21)

Features

• actions: add trivy-tofu-scan reusable workflow (b522300)

v1.1.1

1.1.1 (2026-05-21)

Bug Fixes

• docker-build-push-ecr: use build step output for digest instead of metadata-file (7dcf2ae)
• docker-build-push-ecr: use build step output for digest instead of metadata-file (cad0d0a)

v1.1.0

1.1.0 (2026-05-20)

Features

• actions: add sign-image composite action for cosign + KMS signing (62180f8)
• actions: add sign-image composite action for cosign + KMS signing (dff9979)
• docker-build-push-ecr: expose image digest as workflow output (83112a5)
• docker-build-push-ecr: expose image digest as workflow output (3132795)
• sign-image: configure AWS credentials inside composite action (d7038c4)

Bug Fixes

• install np cli and set api key in build-and-push job (2804f8e)
• install np cli and set api key in build-and-push job (398991f)
• sign-image: add --recursive to sign per-platform manifests (42a7efe)
• sign-image: add --recursive to sign per-platform manifests (d44436a)

v1.0.2

1.0.2 (2026-05-06)

Bug Fixes

• make release-please workflow generic via release-type input (a27ada5)

v1.0.1

1.0.1 (2026-05-04)

Bug Fixes

• force push automation branch in update-readme-actions (b58334e)
• force push automation branch to avoid rejected push on re-runs (2fa3c51)

v1.0.0

1.0.0 (2026-04-30)

Features

• actions-nullplatform-terraform: add gitignore (3b3a92e)
• actions-nullplatform: add readme with github models (56d2db0)
• actions-nullplatform: add readme with github models (08d6218)
• actions-terraform: add new jobs (ca5a3ec)
• add modular README generator v2 with multi-project support (129ca75)
• add optional inputs to pnpm, go, and docker pr-check workflows (87f1439)
• add permissions to release (f6662ac)
• add pipeline (49ecc55)
• add pipeline (64a7400)
• add pr-checks-node-pnpm-build reusable workflow (f9a867d)
• add pr-checks-node-pnpm-build reusable workflow (5823bf4)
• add pr-checks-terraform orchestrator workflow (33813e7)
• add pr-checks-terraform orchestrator workflow (28e1454)
• add release-please workflow for self-versioning (6724664)
• add release-please workflow for self-versioning (c45f155)
• add reusable PR checks workflows for SOC 2 change management (fa3f661)
• add reusable PR checks workflows for SOC 2 change management (5ffbad0)
• add reusable tofu-test workflow for unit testing modules (d6131c2)
• add run-first composite action and update node workflows to use it (a851fda)
• add shellcheck reusable workflow (418090a)
• add shellcheck reusable workflow (2032d32)
• add support for np (9c5c9fe)
• add support for np (6365d96)
• add tf docs and release (6b75aa4)
• add tf docs and release (170becd)
• add working-directory and node-version inputs to npm workflow (af8d8f8)
• add working-directory and node-version inputs to npm workflow (5bb8592)
• commit: add validate for conventional commit (9f2c80d)
• commit: add validate for conventional commit (30e00dc)
• docker-security-scan: add build_args input (e56bc2e)
• docker: add optional build_args input to docker-build-push-ecr (825b2eb)
• maintain floating major version tag (v1) after each release (3dfc73f)
• readme-ai: add trigger variables for conditional usage generation (b7d0f92)
• readme: add readme (9c36b6e)
• release: add job to update README versions after release (6935157)
• syntax (3d3a352)
• syntax (7af3b3e)
• terraform: add architecture section, AI metadata, and cache-aware regeneration (c4fe51c)
• terraform: add architecture section, AI metadata, and cache-aware regeneration (053cdd3)
• tfdocs: add commit messages (e8e11f0)
• workflows: add generic changelog-release workflow (de9452e)
• workflows: add generic changelog-release workflow (5bfb8bf)

Bug Fixes

• action-nullplatform: add action to docker login (cff3f3a)
• action-nullplatform: add action to docker login (38d5eef)
• action-nullplatform: add parallel max to tofu test (02a11b0)
• action-nullplatform: delete file (d03cee1)
• action-nullplatform: git ignore (9b9077a)
• action-nullplatform: git ignore (775a38e)
• add cache-dependency-path to setup-node in reusable node workflows (0674078)
• add cache-dependency-path to setup-node steps in reusable workflows (cbc0747)
• add packages: read permission to pr-checks-docker workflow (e774285)
• add packages: read permission to pr-checks-docker workflow (4cde0d8)
• add skip_backend input to tofu-lint workflow (4484ee4)
• add skip_backend input to tofu-lint workflow (d0c41bf)
• ai: upgrade Anthropic default model to Claude Sonnet 4.5 (9d4740b)
• ai: upgrade Anthropic default model to Claude Sonnet 4.5 (77e1278)
• ci: skip branch validation for release-please and upgrade setup-… (8563529)
• ci: skip branch validation for release-please and upgrade setup-opentofu to v2 (28e21b1)
• ci: update README via PR instead of direct push to main (edfd217)
• ci: update README via PR instead of direct push to main (4ea22a6)
• ci: update README via PR instead of direct pu...