2.0.0

Major version update! We are introducing a few configuration options to make the action more useful in a broader set of scenarios:

• fail-on-severity: Specify the minimum security vulnerability threshold before failing workflow runs.
• allow-licenses: An allowlist for dependency licenses.
• deny-licenses: A blocklist for dependency licenses.

You can read more about these options in the "Configuration" section of the README.

1.0.2

• Clarify error messages for private repos
• Update NPM dependencies.

v1

First release of the Dependency Review Action.

v1.0.1

We're starting to use semantic versioning for our project.