- bump cryptography from 46.0.6 to 46.0.7 (#464)
- bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 (#452)
- bump astral-sh/setup-uv from 7.6.0 to 8.0.0 (#453)
- bump pytest-cov from 6.3.0 to 7.1.0 (#456)
- bump the patch-updates group across 1 directory with 2 updates (#460)
- bump the patch-updates group with 2 updates
- bump types-requests from 2.33.0.20260327 to 2.33.0.20260402 (#461)
- bump types-python-dateutil from 2.9.0.20260323 to 2.9.0.20260402 (#462)
- bump mypy from 1.19.1 to 1.20.0 (#463)
- bump docker/login-action from 4.0.0 to 4.1.0 (#459)
- bump fastmcp from 3.1.1 to 3.2.0 (#458)
- bump types-requests from 2.32.4.20260107 to 2.33.0.20260327 (#455)
- bump pygments from 2.19.2 to 2.20.0 (#457)
- bump the patch-updates group with 2 updates (#454)
- bump cryptography from 46.0.5 to 46.0.6 (#451)
- remove osv GH action job and bump requests depenency (#450)
- remove osv action job and bump requests depenency
- bump ruff from 0.15.6 to 0.15.7 in the patch-updates group (#444)
- bump fastmcp from 3.0.2 to 3.1.1 (#446)
- bump fastmcp from 3.0.2 to 3.1.1 (#446)
- bump pytest-cov from 6.3.0 to 7.1.0 (#445)
- bump types-python-dateutil from 2.9.0.20260305 to 2.9.0.20260323 (#447)
- bump pytest from 8.4.2 to 9.0.2 (#448)
- bump actions/cache from 5.0.3 to 5.0.4 in the patch-updates group (#443)
- docker-compose parser (#427)
- Scan Dockerfile for typos (#422)
- download DockerHub top packages weekly (#420)
- MCP support (#417)
- fix weekly download of top packages (#441)
- require to test python package and docker build before publishing (#423)
- bump actions/create-github-app-token from 2.2.1 to 3.0.0 (#431)
- bump ruff from 0.12.3 to 0.15.6 (#437)
- bump dorny/paths-filter from 3.0.2 to 4.0.1 (#433)
- bump astral-sh/setup-uv from 7.3.1 to 7.6.0 (#432)
- bump softprops/action-gh-release from 2.5.0 to 2.6.1 (#430)
- bump actions/download-artifact from 7.0.0 to 8.0.1 (#434)
- bump commitizen from 4.13.8 to 4.13.9 in the patch-updates group (#435)
- bump mypy from 1.16.1 to 1.19.1 (#439)
- bump tomlkit from 0.13.3 to 0.14.0 (#438)
- bump types-python-dateutil from 2.9.0.20260124 to 2.9.0.20260305 (#436)
- bump authlib from 1.6.8 to 1.6.9 (#440)
- bump pyjwt from 2.11.0 to 2.12.0 (#429)
- bump docker/login-action from 3.7.0 to 4.0.0 (#426)
- bump astral-sh/setup-uv from 7.3.0 to 7.3.1 in the patch-updates group (#424)
- bump astral-sh/setup-uv in the patch-updates group
- bump astral-sh/setup-uv from 7.3.0 to 7.3.1 in the patch-updates group (#419)
- bump astral-sh/setup-uv in the patch-updates group
- Weekly update of trusted packages
- bump dependencies (#416)
- Weekly update of trusted packages
- Weekly update of trusted packages
- bump astral-sh/setup-uv from 7.2.1 to 7.3.0 (#415)
- Weekly update of trusted packages
- bump docker/login-action from 3.6.0 to 3.7.0 (#414)
- bump the patch-updates group with 2 updates (#413)
- Weekly update of trusted packages
- bump actions/checkout from 6.0.1 to 6.0.2 in the patch-updates group (#412)
- bump actions/checkout in the patch-updates group
- Weekly update of trusted packages
- bump actions/cache from 5.0.1 to 5.0.2 in the patch-updates group (#411)
- Weekly update of trusted packages
- do not persist credentials in checkout action (#410)
- bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (#409)
- bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 (#408)
- build package with specified Python version (#395)
- bump actions/cache from 4.3.0 to 5.0.1 (#403)
- bump actions/upload-artifact from 5.0.0 to 6.0.0 (#404)
- bump actions/download-artifact from 6.0.0 to 7.0.0 (#405)
- bump dependencies (#406)
- Weekly update of trusted packages
- Weekly update of trusted packages
- Weekly update of trusted packages
- Weekly update of trusted packages
- bump the patch-updates group with 3 updates (#401)
- Weekly update of trusted packages
- bump dependencies (#402)
- Weekly update of trusted packages
- bump softprops/action-gh-release from 2.4.2 to 2.5.0 (#400)
- Weekly update of trusted packages
- bump actions/checkout from 5.0.0 to 6.0.0 (#398)
- bump actions/create-github-app-token from 2.1.4 to 2.2.0 (#399)
- bump astral-sh/setup-uv from 7.1.2 to 7.1.4 in the patch-updates group (#397)
- Weekly update of trusted packages
- Weekly update of trusted packages
- bump softprops/action-gh-release from 2.4.1 to 2.4.2 in the patch-updates group (#396)
- Weekly update of trusted packages
- add --table option (#393)
- Add pnpm-lock.yaml parser (#382)
- treat namespaces as a special case when checking for typos (#378)
- do not display unnecesary info with --json (#386)
- do not error on empty files (#383)
- make DependencyManagers objects of base class (#377)
- periodically run OSV scanner (#390)
- Improve weekly download flow (#381)
- improve NPM download parameters (#380)
- Improve cache when publishing (#360)
- Update Python badge (#391)
- add tag with major version (#389)
- use gemini-2.5-pro in lgtm (#385)
- Weekly update of trusted packages
- Weekly update of trusted packages
- Weekly update of trusted packages
- bump actions/upload-artifact from 4.6.2 to 5.0.0 (#372)
- bump actions/download-artifact from 5.0.0 to 6.0.0 (#373)
- bump astral-sh/setup-uv from 7.1.1 to 7.1.2 in the patch-updates group (#374)
- Use Python 3.14 in Docker image and drop 3.9 support (#371)
- bump actions/download-artifact from 4.1.8 to 5.0.0 (#364)
- bump actions/upload-artifact from 4.4.0 to 4.6.2 (#367)
- bump softprops/action-gh-release from 2.3.3 to 2.4.1 (#368)
- bump astral-sh/setup-uv from 6.7.0 to 7.1.1 (#369)
- Weekly update of trusted packages
- Weekly update of trusted packages
- Weekly update of trusted packages
- Weekly update of trusted packages
- refactor Dockerfile (#361)
- allow to set ecosystem sources via the cli (#345)
- Accept a source for every dependency manager in the config (#340)
- support multiple dependency files in config and cli (#335)
- recursively look for lock files (#332)
- support parsing multiple files (#326)
- create
cliextra group (#322)
- correctly load resursive config value from file (#347)
- parse yarn files with multiple dependencies on the same line (#337)
- show the name of the file that's being analyzed (#333)
- paginate npm (#342)
- refactor ci (#353)
- Improve docker cache and test that the image works (#349)
- use lgtm gh action (#341)
- add docstrings to all classes and methods (#355)
- fix cache section (#336)
- Bump to 5.0.0 (#358)
- bump dependencies (#357)
- bump actions/cache from 4.2.4 to 4.3.0 (#352)
- bump docker/login-action from 3.5.0 to 3.6.0 (#351)
- Weekly update of trusted packages
- simplify Dockerfile (#348)
- Weekly update of trusted packages
- bump astral-sh/setup-uv from 6.6.1 to 6.7.0 in the minor-updates group (#331)
- bump actions/create-github-app-token from 2.1.1 to 2.1.4 in the patch-updates group (#330)
- Weekly update of trusted packages
- use repo as source of truth (#317)
- save trusted packages in the repo (#314)
- add support for yarn.lock files (#308)
- add support for package-lock.json files (#305)
- make config file optional (#295)
- allow to set use_cache from config file (#292)
- load config from
twyn.tomlif it exists (#291)
- remove wrong formatting in weekly_download.yml (#319)
- add git configuration to weekly download (#318)
- properly propagate error messages (#306)
- Improve weekly download flow (#316)
- rewrite requirements.txt parser and change the way we read files (#311)
- Abstract general behaviour from TopPypiReference (#299)
- remove custom logging implementation (#302)
- adapt to breaking change in lgtm-ai (#315)
- add lgtm options (#301)
- fix preview bump version (#298)
- preview next version job (#296)
- bump checkout action to 5.0.0 in docker-build action (#289)
- manual update of dependencies (#320)
- Weekly update of trusted packages
- bump the patch-updates group with 2 updates (#309)
- Docker Hub badge (#304)
- Revert "bump: version 3.1.0 → 3.2.0" (#297)
- improve cache handler testing (#310)
- allow to get results as json (#284)
- allow to disable track while evaluating dependencies (#282)
- expose
check_dependenciesto the main interface (#278)
- Properly annotate
check_dependencies'sselector_methodarg (#287)
- remove old cache file path from docs (#288)
- fix docs (#286)
- update docs with json and "twyn as a package" examples (#285)
- support multiple sources and create CacheHandler (#274)
- clear cache through the cli (#271)
- save downloaded packages to cache (#270)
- run conventional-label only on main (#276)
- Change exception handling in cli (#277)
- run build test action when there's a change in the action file (#268)
- udpate docs (#269)
- bump dependabot/fetch-metadata from 1.1.1 to 2.4.0 (#273)
- bump astral-sh/setup-uv from 6.5.0 to 6.6.0 in the minor-updates group (#272)
- check_dependencies now returns the list of dependencies
- check_dependencies returns the list of dependencies (#252)
- fix test-docker-build-condition (#264)
- small refactoring changes (#251)
- Create action for docker builds (#261)
- change package ecosystem to uv (#260)
- allow dependabot to update GitHub actions (#250)
- bump docker/build-push-action from 5.4.0 to 6.18.0 (#263)
- bump actions/create-github-app-token from 1.12.0 to 2.1.1 (#259)
- bump actions/checkout from 4.2.2 to 5.0.0 (#253)
- bump actions/cache from 4.2.3 to 4.2.4 in the patch-updates group (#257)
- bump the minor-updates group with 3 updates (#258)
- run ensurepip before copying lock dependency files (#247)
- use VERSION for saving package version (#249)
- dynamic versioning (#248)
- replace poetry with uv (#245)
- support uv.lock files (#244)
- update security jobs (#243)
- bump types-requests from 2.32.4.20250611 to 2.32.4.20250809 (#241)
- bump ruff from 0.12.7 to 0.12.8 in the patch-updates group (#240)
- bump the patch-updates group with 2 updates (#239)
- bump the minor-updates group across 1 directory with 2 updates (#238)
- bump the patch-updates group with 2 updates (#236)
- bump ruff from 0.12.2 to 0.12.3 in the patch-updates group (#234)
- bump ruff from 0.12.1 to 0.12.2 in the patch-updates group (#233)
- bump ruff from 0.12.0 to 0.12.1 in the patch-updates group (#232)
- bump mypy from 1.16.0 to 1.16.1 in the patch-updates group (#231)
- bump the minor-updates group across 1 directory with 3 updates (#230)
- bump urllib3 from 2.3.0 to 2.5.0 (#229)
- bump types-requests from 2.32.0.20250602 to 2.32.4.20250611 in the patch-updates group (#227)
- bump requests from 2.32.3 to 2.32.4 (#226)
- bump types-requests from 2.32.0.20250515 to 2.32.0.20250602 (#223)
- bump the patch-updates group across 1 directory with 3 updates (#225)
- bump mypy from 1.15.0 to 1.16.0 in the minor-updates group (#222)
- add lgtm AI auto-reviewer (#221)
- Change Dockerfile to install twyn directly from the source code (#220)
- bump ruff from 0.11.10 to 0.11.11 in the patch-updates group (#218)
- add maintainer email (#217)
- bump commitizen from 4.7.2 to 4.8.2 in the minor-updates group (#214)
- require manual action to create tag (#216)
- handle return code (#219)
- bump types-requests from 2.32.0.20250328 to 2.32.0.20250515 (#212)
- Fix typo in push_to_docker_hub action (#215)
- bump the patch-updates group with 2 updates (#211)
- bump commitizen from 4.6.1 to 4.7.0 in the minor-updates group (#210)
- bump ruff from 0.11.8 to 0.11.9 in the patch-updates group (#209)
- bump the patch-updates group with 2 updates (#208)
- bump ruff from 0.11.6 to 0.11.7 in the patch-updates group (#207)
- bump the patch-updates group with 2 updates (#206)
- bump the minor-updates group with 2 updates (#205)
- bump ruff from 0.11.4 to 0.11.5 in the patch-updates group (#204)
- bump ruff from 0.11.2 to 0.11.4 in the patch-updates group (#202)
- publish to pypi using OIDC (#213)
- bump the minor-updates group with 3 updates (#203)
- group dependabot updates (#201)
- bump the dependencies group with 3 updates (#200)
- bump the dependencies group with 2 updates (#199)
- update depdendencies (#198)
- revert uv changes (#197)
- update dependencies (#196)
- use OIDC when publishing to PyPi (#193)
- replace setuptools with hatchling (#192)
- replace poetry with uv (#191)
- bump the dependencies group with 2 updates (#188)
- bump the dependencies group with 2 updates (#187)
- pin osv's version to 1.9.2 (#189)
- Bump to Python 3.13 (#186)
- bump the dependencies group across 1 directory with 4 updates (#184)
- Trigger release notes job after publishing has succeeded (#185)
- fix publish_to_pypi job (#181)
- bump ruff from 0.9.1 to 0.9.2 in the dependencies group (#180)
- bump the dependencies group across 1 directory with 3 updates (#179)
- bump jinja2 to get rid of vulnerability (#177)
- bump the dependencies group across 1 directory with 4 updates (#176)
- bump the dependencies group with 4 updates (#174)
- create release pages
- bump ruff from 0.7.4 to 0.8.0 in the dependencies group
- Use FileHandlerPathlib in ConfigHandler (#171)
- bump the dependencies group with 2 updates
- #167: Separate "messages" from "logging"
- simplify config a bit more
- configurable pypi-reference
- rewrite configuration handle
- move docker to python 3.13 and change entrypoint
- add CODEOWNERS file and fix up authors and maintainers
- copy edit README
- support and test against range of python versions
- select file from paths that are not in the root folder (#157)
- bump the dependencies group with 3 updates (#154)
- bump the dependencies group with 3 updates
- Add docs for --dependency option and fix typo (closes #155) (#156)
- Introduce FileHandler (#153)
- allow searching dependencies from the command line (#152)
- bump the dependencies group across 1 directory with 7 updates (#151)
- bump the dependencies group with 2 updates (#147)
- bump the dependencies group with 2 updates
- bump the dependencies group with 2 updates (#146)
- bump the dependencies group with 2 updates
- bump the dependencies group with 2 updates (#145)
- bump the dependencies group with 2 updates
- bump the dependencies group with 2 updates (#144)
- bump the dependencies group with 2 updates
- auto merge non major dependency updates (#142)
- bump the dependencies group with 4 updates (#141)
- bump the dependencies group with 3 updates (#140)
- bump the dependencies group with 2 updates
- bump the dependencies group across 1 directory with 6 updates
- bump the dependencies group with 3 updates (#134)
- bump the dependencies group with 4 updates (#133)
- bump the dependencies group with 3 updates (#132)
- bump zipp from 3.16.2 to 3.19.1 (#131)
- bump the dependencies group across 1 directory with 4 updates (#130)
- bump certifi from 2023.7.22 to 2024.7.4 (#129)
- bump urllib3 from 2.0.7 to 2.2.2 (#126)
- bump ruff from 0.4.8 to 0.4.9 in the dependencies group (#125)
- bump the dependencies group with 2 updates (#124)
- bump the dependencies group with 4 updates (#123)
- bump the dependencies group with 4 updates (#122)
- bump the dependencies group with 3 updates (#120)
- bump the dependencies group with 2 updates (#119)
- bump the dependencies group across 1 directory with 5 updates (#117)
- bump jinja2 from 3.1.3 to 3.1.4 (#118)
- bump the dependencies group with 2 updates (#115)
- bump idna from 3.4 to 3.7 (#113)
- bump the dependencies group with 4 updates (#112)
- bump the dependencies group with 4 updates (#110)
- bump the dependencies group with 7 updates (#108)
- bump the dependencies group with 5 updates (#107)
- bump the dependencies group with 4 updates (#105)
- remove black dependency and adjust ruff settings format (#104)
- bump the dependencies group with 5 updates (#103)
- bump the dependencies group with 1 update (#100)
- bump the dependencies group with 1 update (#99)
- bump jinja2 from 3.1.2 to 3.1.3 (#98)
- bump the dependencies group with 2 updates (#95)
- bump the dependencies group with 6 updates (#94)
- bump the dependencies group with 2 updates (#92)
- bump the dependencies group with 1 update (#91)
- bump the dependencies group with 1 update (#90)
- bump the dependencies group with 1 update (#89)
- bump the dependencies group with 3 updates (#88)
- bump the dependencies group with 3 updates (#87)
- bump the dependencies group with 2 updates (#86)
- group depenencies updates (#85)
- bump rich from 13.5.2 to 13.6.0 (#83)
- bump tomlkit from 0.12.1 to 0.12.2 (#82)
- bump rapidfuzz from 3.4.0 to 3.5.2 (#80)
- bump ruff from 0.1.1 to 0.1.3 (#77)
- bump pytest from 7.4.0 to 7.4.3 (#78)
- bump commitizen from 3.6.0 to 3.12.0 (#73)
- bump types-requests from 2.31.0.2 to 2.31.0.10 (#72)
- bump rapidfuzz from 3.2.0 to 3.4.0 (#79)
- bump black from 23.7.0 to 23.10.1
- bump ruff from 0.0.284 to 0.1.1
- bump urllib3 from 1.26.17 to 1.26.18 (#71)
- update README (#66)
- bump click from 8.1.6 to 8.1.7 (#50)
- bump urllib3 from 1.26.14 to 1.26.17 (#65)
- add Dockerfile and publish docker image to Docker Hub (#56)
- bump types-requests from 2.31.0.1 to 2.31.0.2 (#46)
- bump rich from 13.4.2 to 13.5.2 (#47)
- bump tomlkit from 0.11.8 to 0.12.1 (#45)
- bump mypy from 1.4.1 to 1.5.1 (#49)
- bump ruff from 0.0.282 to 0.0.284 (#44)
- bump rapidfuzz from 3.1.1 to 3.2.0 (#41)
- bump ruff from 0.0.278 to 0.0.282 (#42)
- bump commitizen from 2.42.1 to 3.6.0 (#40)
- bump pyparsing from 3.0.9 to 3.1.1 (#38)
- bump ipdb from 0.13.11 to 0.13.13 (#36)
- bump certifi (#43)
- bump click from 8.1.3 to 8.1.6 (#32)
- bump pytest-cov from 4.0.0 to 4.1.0 (#25)
- bump
pygmentsto patch vulnerability (#30)
- bump dparse from 0.6.2 to 0.6.3 (#26)
- bump black from 23.3.0 to 23.7.0 (#28)
- bump mypy from 1.3.0 to 1.4.1 (#29)
- bump types-requests from 2.28.11.15 to 2.31.0.1 (#18)
- bump ruff from 0.0.269 to 0.0.278 (#24)
- bump pytest from 7.2.1 to 7.4.0 (#20)
- bump rich from 13.3.1 to 13.4.2 (#22)
- bump rapidfuzz from 3.0.0 to 3.1.1 (#21)
- Support poetry version format >= 1.5.0 (#23)
- rename BREAKING CHANGE to break to meet other types naming format (#17)
- add --version cli option (#16)
- bump black from 22.12.0 to 23.3.0 (#10)
- bump ruff from 0.0.239 to 0.0.269 (#11)
- bump mypy from 0.982 to 1.3.0 (#13)
- bump tomlkit from 0.11.6 to 0.11.8 (#12)
- bump rapidfuzz from 2.13.7 to 3.0.0 (#14)
- trigger dependabot on mondays and take it out of
workflowsfolder (#9)
- add commit linting and improve commitizen settings (#15)
- run twyn in the pipeline (#7)
- add dependabot (#3)
- Open source release