• zizmor: expose additional cli options by @crazy-max in #142
• build(deps): bump actions/checkout from 6.0.3 to 7.0.1 in #123 #132
• build(deps): bump astral-sh/setup-uv from 8.1.0 to 9.0.0 in #120 #130 #133
• build(deps): bump github/codeql-action/upload-sarif from 4.36.1 to 4.37.6 in #121 #131 #140 #141

Full Changelog: v1.10.1...v1.11.0

• zizmor: fix app token permissions by @crazy-max in #122

Full Changelog: v1.10.0...v1.10.1

• zizmor: harden uv tool install by @crazy-max in #118
• zizmor: scope GitHub App token permissions by @crazy-max in #119

Full Changelog: v1.9.0...v1.10.0

• gotest-annotations: remove npm dependency by @crazy-max in #111
• releases-json: harden npm install by @crazy-max in #112
• container-logs-check: fix logs ordering by @crazy-max in #110
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in #108
• build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 in #103
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 in #114 #115 #116 #117
• build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 in #102 #109

Full Changelog: v1.8.0...v1.9.0

• container-logs-check: swarm service support by @crazy-max in #100
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in #101

Full Changelog: v1.7.1...v1.8.0

• zizmor: fix GitHub App input environment names by @crazy-max in #99

Full Changelog: v1.7.0...v1.7.1

• zizmor: GitHub App token support by @crazy-max in #98
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 in #95
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in #94
• build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in #97
• build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 in #96

Full Changelog: v1.6.0...v1.7.0

• remove explicit permissions from reusable workflows by @crazy-max in #93

Full Changelog: v1.5.0...v1.6.0

• zizmor: fix workflow permissions for private repositories by @crazy-max in #91

Full Changelog: v1.4.0...v1.5.0

• zizmor: default scan path to repository root by @crazy-max in #90
• build(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 in #89
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 in #88

Full Changelog: v1.3.0...v1.4.0