v6.6.1

What's Changed

• fix(#301): Handle JSONStream.parse() errors more gracefully by @quinnturner in #306
• Update README.md for improved docs on extra-args by @quinnturner in #304
• Release 6.6.1 by @quinnturner in #307

Full Changelog: v6.6.0...v6.6.1

v6.6.0

What's Changed

• chore(deps): bump json5 from 1.0.1 to 1.0.2 by @dependabot in #299
• Add --extra-args to fix #298 by @sargunv in #300
• chore: Release 6.6.0 by @quinnturner in #303

New Contributors

• @dependabot made their first contribution in #299
• @sargunv made their first contribution in #300

Full Changelog: v6.5.0...v6.6.0

v6.5.0

What's Changed

Features

• Added support for registry flag for pnpm by @DiogoVCS in #293

Internal

• Update CircleCI base image by @quinnturner in #295
• Add ignore to linguist for Yarn Berry by @quinnturner in #296
• Release 6.5.0 by @quinnturner in #294

New Contributors

• @DiogoVCS made their first contribution in #293

Full Changelog: v6.4.1...v6.5.0

v6.4.1

What's Changed

Fixes

• fix: fix config parsing when using objects in allowlist by @kyletsang in #289
• Warn invalid NSP empty record by @quinnturner in #291

Internal

• chore: Update action dependencies by @quinnturner in #287
• Release 6.4.1 by @quinnturner in #290

Full Changelog: v6.4.0...v6.4.1

v6.4.0

What's Changed

Features

• implement allowlist records by @kyletsang in #284

Internal

• chore: Update CodeQL by @quinnturner in #276
• chore: remove husky and pretty-quick by @quinnturner in #275
• chore: fix yarn-auditor tests by @kyletsang in #283
• Update devDependencies and release 6.4.0 by @quinnturner in #286

Full Changelog: v6.3.0...v6.4.0

v6.3.0

What's Changed

Features

• feat: Add support for importing audit-ci by @quinnturner in #271

Fixes

• chore: Remove can't find package.json warning. by @quinnturner in #269
• fix: Downgrade sinon for Node 12 support by @quinnturner in #272
• docs: Pin running audit-ci to major version by @quinnturner in #273

Internal

• fix: improve gitignore to avoid adding yarn files by @quinnturner in #266
• feat: Add coverage checks and minimum levels by @quinnturner in #267
• chore: Improve test and code type-safety by @quinnturner in #268
• chore: Improve tests and typing & package d.ts files. by @quinnturner in #270
• chore: Release 6.3.0 by @quinnturner in #274

Full Changelog: v6.2.1...v6.3.0

v6.2.1

What's Changed

• chore: fix typo in lint:fix script by @kyletsang in #250
• chore(deps): Add audit-types by @quinnturner in #251
• docs: Add a ton of detail to allowlist documentation. by @quinnturner in #254
• fix: Handle unhandled promise rejections in bin by @quinnturner in #255
• fix: minor lint by @quinnturner in #256
• fix: PNPM audit registry warning by @quinnturner in #257
• fix: Handle NPM 7+'s message (error) response by @quinnturner in #258
• chore: Release 6.2.1 by @quinnturner in #259

Full Changelog: v6.2.0...v6.2.1

v6.2.0

What's Changed

Features

• fix: fix Yarn Berry workspace audit when skip-dev=true by @kyletsang in #248

Internal

• chore: Add dependabot for updating dependencies by @quinnturner in #245
• docs: CircleCI run audit-ci before npm install by @quinnturner in #246
• chore: Release 6.2.0 by @quinnturner in #249

Full Changelog: v6.1.2...v6.2.0

v6.1.2

What's Changed

• add note about executing right after checkout by @capaj in #242
• fix: dedupe advisory paths in yarn auditor by @kyletsang in #243
• chore: Release 6.1.2 by @quinnturner in #244

New Contributors

• @capaj made their first contribution in #242

Full Changelog: v6.1.1...v6.1.2

v6.1.1

What's Changed

• docs: Add json-schema support by @quinnturner in #238
• chore: Use @types/node^12 by @quinnturner in #237
• fix: Deduplicate advisoryPathsFound by @quinnturner in #240
• chore: Release 6.1.1 by @quinnturner in #241

Full Changelog: v6.1.0...v6.1.1