• 93f67d9 fastfloat: localize handling of invalid number without integer and fractional...
• 6f52d1b fastfloat: support elided integer or float part (#84)
• 6dae91c Fix 64-bit tests on 32-bit systems (#60)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from step-security/harden-runner's releases.

v2.0.0

Release v2.0.0

• Feature to disable sudo: Use disable-sudo: true to run job steps without sudo access on the GitHub-hosted runner. disable-sudo is false by default and needs to be opted-into. (documentation)
• File monitoring improvements: All source code files are monitored now for overwrite, instead of a few extensions. Instead of getting annotations for overwrites, you can also opt-in to getting email or Slack notifications if source code is overwritten. (documentation)
• Support for private repositories: Starting with Harder Runner v2.0.0, use of harden runner for private repositories will require a Team/ Enterprise license. Harder Runner GitHub Action is free for all public repositories.

What's Changed

• Update README.md by @​varunsh-coder in step-security/harden-runner#187
• Bump step-security/harden-runner from 1.4.5 to 1.5.0 by @​dependabot in step-security/harden-runner#188
• Bump github/codeql-action from 2.1.22 to 2.1.26 by @​dependabot in step-security/harden-runner#189
• Add scorecard by @​varunsh-coder in step-security/harden-runner#192
• Bump actions/checkout from 3.0.0 to 3.1.0 by @​dependabot in step-security/harden-runner#198
• Bump github/codeql-action from 2.1.26 to 2.1.27 by @​dependabot in step-security/harden-runner#197
• Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @​dependabot in step-security/harden-runner#194
• Bump ossf/scorecard-action from 2.0.4 to 2.0.6 by @​dependabot in step-security/harden-runner#202
• Bump github/codeql-action from 2.1.27 to 2.1.28 by @​dependabot in step-security/harden-runner#201
• Bump actions/upload-artifact from 3.1.0 to 3.1.1 by @​dependabot in step-security/harden-runner#203
• Bump github/codeql-action from 2.1.28 to 2.1.29 by @​dependabot in step-security/harden-runner#204
• Update README by @​varunsh-coder in step-security/harden-runner#208

Full Changelog: https://github.com/step-security/harden-runner/compare/v1...v2.0.0

• ebacdc2 Merge pull request #209 from step-security/release-v2.0.0
• f28b626 Update README (#208)
• 620cac5 Update version
• 118e400 Changes for v2.0.0 (#207)
• 3888ae1 Merge pull request #204 from step-security/dependabot/github_actions/github/c...
• 1e3c2df Bump github/codeql-action from 2.1.28 to 2.1.29
• 5e53a69 Merge pull request #203 from step-security/dependabot/github_actions/actions/...
• 33d7981 Bump actions/upload-artifact from 3.1.0 to 3.1.1
• 5565dcd Merge pull request #201 from step-security/dependabot/github_actions/github/c...
• d5b1e9d Merge pull request #202 from step-security/dependabot/github_actions/ossf/sco...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/checkout's releases.

v3.2.0

What's Changed

• Add GitHub Action to perform release by @​rentziass in actions/checkout#942
• Fix status badge by @​ScottBrenner in actions/checkout#967
• Replace datadog/squid with ubuntu/squid Docker image by @​cory-miller in actions/checkout#1002
• Wrap pipeline commands for submoduleForeach in quotes by @​jokreliable in actions/checkout#964
• Update @​actions/io to 1.1.2 by @​cory-miller in actions/checkout#1029
• Upgrading version to 3.2.0 by @​vmjoseph in actions/checkout#1039

New Contributors

• @​ScottBrenner made their first contribution in actions/checkout#967
• @​cory-miller made their first contribution in actions/checkout#1002
• @​jokreliable made their first contribution in actions/checkout#964
• @​vmjoseph made their first contribution in actions/checkout#1039

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.2.0

v3.1.0

What's Changed

• Inject GitHub host to be able to clone from another GitHub instance by @​peter-murray in actions/checkout#922
• Bump @​actions/core to 1.10.0 by @​rentziass in actions/checkout#939

New Contributors

• @​peter-murray made their first contribution in actions/checkout#922
• @​rentziass made their first contribution in actions/checkout#939

Full Changelog: https://github.com/actions/checkout/compare/v3.0.2...v3.1.0

v3.0.2

What's Changed

• Add set-safe-directory input to allow customers to take control. by @​TingluoHuang in actions/checkout#770
• Prepare changelog for v3.0.2. by @​TingluoHuang in actions/checkout#777

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.0.2

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Updated to the node16 runtime by default
  • This requires a minimum Actions Runner version of v2.285.0 to run, which is by default available in GHES 3.4 or later.

v2.6.0

What's Changed

• Add backports to v2 branch by @​cory-miller in actions/checkout#1040
  • Includes backports from the following changes: actions/checkout#964, actions/checkout#1002, actions/checkout#1029
  • Upgraded the licensed version to match what is used in v3.

... (truncated)

Sourced from actions/checkout's changelog.

Changelog

v3.1.0

• Use @​actions/core saveState and getState
• Add github-server-url input

v3.0.2

• Add input set-safe-directory

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Update to node 16

v2.3.1

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

• Fallback to the default branch

v2.2.0

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

• Changes to support GHES (here and here)

v2.1.0

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

v2.0.0

• Do not pass cred on command line
• Add input persist-credentials
• Fallback to REST API to download repo

... (truncated)

• 755da8c 3.2.0 (#1039)
• 26d48e8 Update @​actions/io to 1.1.2 (#1029)
• bf08527 wrap pipeline commands for submoduleForeach in quotes (#964)
• 5c3ccc2 Replace datadog/squid with ubuntu/squid Docker image (#1002)
• 1f9a0c2 README - fix status badge (#967)
• 8230315 Add workflow to update a main version (#942)
• 93ea575 Prepare release v3.1.0 (#940)
• 6a84743 Bump @​actions/core to 1.10.0 (#939)
• e6d535c Inject GitHub host to be able to clone from another GitHub instance (#922)
• 2541b12 Prepare changelog for v3.0.2. (#777)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from golangci/golangci-lint-action's releases.

v3.3.1

What's Changed

• build(deps-dev): bump @​typescript-eslint/parser from 5.40.0 to 5.40.1 by @​dependabot in golangci/golangci-lint-action#590
• build(deps-dev): bump eslint from 8.25.0 to 8.26.0 by @​dependabot in golangci/golangci-lint-action#591
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1 by @​dependabot in golangci/golangci-lint-action#592
• build(deps): bump @​actions/cache from 3.0.5 to 3.0.6 by @​dependabot in golangci/golangci-lint-action#593
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.40.1 to 5.41.0 by @​dependabot in golangci/golangci-lint-action#594
• build(deps): bump @​types/semver from 7.3.12 to 7.3.13 by @​dependabot in golangci/golangci-lint-action#595
• build(deps-dev): bump @​typescript-eslint/parser from 5.40.1 to 5.41.0 by @​dependabot in golangci/golangci-lint-action#596
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0 by @​dependabot in golangci/golangci-lint-action#597
• build(deps-dev): bump eslint from 8.26.0 to 8.27.0 by @​dependabot in golangci/golangci-lint-action#598
• build(deps-dev): bump @​typescript-eslint/parser from 5.41.0 to 5.42.0 by @​dependabot in golangci/golangci-lint-action#599

Full Changelog: https://github.com/golangci/golangci-lint-action/compare/v3...v3.3.1

v3.3.0

What's Changed

• build(deps): bump @​actions/github from 5.0.1 to 5.0.3 by @​dependabot in golangci/golangci-lint-action#470
• build(deps): bump @​actions/cache from 2.0.2 to 2.0.4 by @​dependabot in golangci/golangci-lint-action#471
• build(deps-dev): bump eslint from 8.15.0 to 8.16.0 by @​dependabot in golangci/golangci-lint-action#478
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.23.0 to 5.25.0 by @​dependabot in golangci/golangci-lint-action#477
• build(deps-dev): bump @​vercel/ncc from 0.33.4 to 0.34.0 by @​dependabot in golangci/golangci-lint-action#480
• build(deps-dev): bump typescript from 4.6.4 to 4.7.2 by @​dependabot in golangci/golangci-lint-action#482
• build(deps-dev): bump @​typescript-eslint/parser from 5.23.0 to 5.26.0 by @​dependabot in golangci/golangci-lint-action#481
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.25.0 to 5.26.0 by @​dependabot in golangci/golangci-lint-action#483
• build(deps): bump @​actions/cache from 2.0.4 to 2.0.5 by @​dependabot in golangci/golangci-lint-action#484
• build(deps): bump @​actions/core from 1.8.0 to 1.8.2 by @​dependabot in golangci/golangci-lint-action#473
• build(deps): bump @​actions/tool-cache from 1.7.2 to 2.0.1 by @​dependabot in golangci/golangci-lint-action#472
• fix broken build by @​kamilsk in golangci/golangci-lint-action#486
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.26.0 to 5.27.0 by @​dependabot in golangci/golangci-lint-action#487
• build(deps-dev): bump typescript from 4.7.2 to 4.7.3 by @​dependabot in golangci/golangci-lint-action#488
• build(deps-dev): bump eslint from 8.16.0 to 8.17.0 by @​dependabot in golangci/golangci-lint-action#491
• build(deps-dev): bump @​typescript-eslint/parser from 5.26.0 to 5.27.0 by @​dependabot in golangci/golangci-lint-action#489
• build(deps): bump @​actions/http-client from 1.0.11 to 2.0.1 by @​dependabot in golangci/golangci-lint-action#490
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.27.0 to 5.27.1 by @​dependabot in golangci/golangci-lint-action#493
• build(deps-dev): bump @​typescript-eslint/parser from 5.27.0 to 5.27.1 by @​dependabot in golangci/golangci-lint-action#495
• build(deps): bump @​actions/cache from 2.0.5 to 2.0.6 by @​dependabot in golangci/golangci-lint-action#494
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.27.1 to 5.28.0 by @​dependabot in golangci/golangci-lint-action#497
• build(deps-dev): bump prettier from 2.6.2 to 2.7.1 by @​dependabot in golangci/golangci-lint-action#499
• build(deps-dev): bump @​typescript-eslint/parser from 5.27.1 to 5.28.0 by @​dependabot in golangci/golangci-lint-action#501
• build(deps-dev): bump eslint from 8.17.0 to 8.18.0 by @​dependabot in golangci/golangci-lint-action#503
• build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by @​dependabot in golangci/golangci-lint-action#502
• build(deps): bump @​types/semver from 7.3.9 to 7.3.10 by @​dependabot in golangci/golangci-lint-action#498
• build(deps): bump @​actions/core from 1.8.2 to 1.9.0 by @​dependabot in golangci/golangci-lint-action#500
• build(deps-dev): bump @​typescript-eslint/parser from 5.28.0 to 5.29.0 by @​dependabot in golangci/golangci-lint-action#504
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.28.0 to 5.30.0 by @​dependabot in golangci/golangci-lint-action#508
• build(deps): bump @​actions/cache from 2.0.6 to 3.0.0 by @​dependabot in golangci/golangci-lint-action#507
• build(deps-dev): bump eslint from 8.18.0 to 8.19.0 by @​dependabot in golangci/golangci-lint-action#512
• build(deps-dev): bump eslint-plugin-prettier from 4.0.0 to 4.2.1 by @​dependabot in golangci/golangci-lint-action#511

... (truncated)

• 0ad9a09 build(deps-dev): bump @​typescript-eslint/parser from 5.41.0 to 5.42.0 (#599)
• 235ea57 build(deps-dev): bump eslint from 8.26.0 to 8.27.0 (#598)
• a6ed001 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0 ...
• 3a7156a build(deps-dev): bump @​typescript-eslint/parser from 5.40.1 to 5.41.0 (#596)
• 481f8ba build(deps): bump @​types/semver from 7.3.12 to 7.3.13 (#595)
• 06edb37 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.40.1 to 5.41.0 ...
• c2f79a7 build(deps): bump @​actions/cache from 3.0.5 to 3.0.6 (#593)
• d6eac69 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1 ...
• 7268434 build(deps-dev): bump eslint from 8.25.0 to 8.26.0 (#591)
• a926e2b build(deps-dev): bump @​typescript-eslint/parser from 5.40.0 to 5.40.1 (#590)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

[UNRELEASED]

No user facing changes.

2.1.37 - 14 Dec 2022

• Update default CodeQL bundle version to 2.11.6. #1433

2.1.36 - 08 Dec 2022

• Update default CodeQL bundle version to 2.11.5. #1412
• Add a step that tries to upload a SARIF file for the workflow run when that workflow run fails. This will help better surface failed code scanning workflow runs. #1393
• Python automatic dependency installation will no longer consider dependecy code installed in venv as user-written, for projects using Poetry that specify virtualenvs.in-project = true in their poetry.toml. #1419.

2.1.35 - 01 Dec 2022

No user facing changes.

2.1.34 - 25 Nov 2022

• Update default CodeQL bundle version to 2.11.4. #1391
• Fixed a bug where some the init action and the analyze action would have different sets of experimental feature flags enabled. #1384

2.1.33 - 16 Nov 2022

• Go is now analyzed in the same way as other compiled languages such as C/C++, C#, and Java. This completes the rollout of the feature described in CodeQL Action version 2.1.27. #1322
• Bump the minimum CodeQL bundle version to 2.6.3. #1358

2.1.32 - 14 Nov 2022

• Update default CodeQL bundle version to 2.11.3. #1348
• Update the ML-powered additional query pack for JavaScript to version 0.4.0. #1351

2.1.31 - 04 Nov 2022

• The rb/weak-cryptographic-algorithm Ruby query has been updated to no longer report uses of hash functions such as MD5 and SHA1 even if they are known to be weak. These hash algorithms are used very often in non-sensitive contexts, making the query too imprecise in practice. For more information, see the corresponding change in the github/codeql repository. #1344

2.1.30 - 02 Nov 2022

• Improve the error message when using CodeQL bundle version 2.7.2 and earlier in a workflow that runs on a runner image such as ubuntu-22.04 that uses glibc version 2.34 and later. #1334

2.1.29 - 26 Oct 2022

• Update default CodeQL bundle version to 2.11.2. #1320

2.1.28 - 18 Oct 2022

• Update default CodeQL bundle version to 2.11.1. #1294

... (truncated)

• 959cbb7 Merge pull request #1436 from github/update-v2.1.37-d58039a1
• 10ca836 Update changelog for v2.1.37
• d58039a Merge pull request #1435 from github/orhantoy/add-CODE_SCANNING_REF-tests
• 37a4496 Merge pull request #1433 from github/henrymercer/use-codeql-2.11.6
• b7028af Make sure env is reset between tests
• f629dad Merge branch 'main' into henrymercer/use-codeql-2.11.6
• ccee4c6 Add tests for CODE_SCANNING_REF
• 899bf9c Merge pull request #1432 from github/henrymercer/init-post-telemetry
• dd7c3ef Remove debugging log statements
• b7b875e Reuse existing fields in post-init status report
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-go's releases.

Add support for stable and oldstable aliases

In scope of this release we introduce aliases for the go-version input. The stable alias instals the latest stable version of Go. The oldstable alias installs previous latest minor release (the stable is 1.19.x -> the oldstable is 1.18.x).

Stable

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version: 'stable'
  - run: go run hello.go

OldStable

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version: 'oldstable'
  - run: go run hello.go

Add support for go.work and pass the token input through on GHES

In scope of this release we added support for go.work file to pass it in go-version-file input.

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version-file: go.work
  - run: go run hello.go

Besides, we added support to pass the token input through on GHES.

Fix cache issues and update dependencies

In scope of this release we fixed the issue with the correct generation of the cache key when the go-version-file input is set (actions/setup-go#267). Moreover, we fixed an issue when the cache folder was not found. Besides, we updated actions/core to 1.10.0 version (actions/setup-go#273).

Support architecture input and fix Expand-Archive issue

This release introduces support for architecture input for setup-go action #253. It also adds support for arm32 architecture for self-hosted runners. If architecture is not provided action will use default runner architecture. Example of usage:

steps:
- uses: actions/checkout@v3
- uses: actions/setup-go@v3
</tr></table> 

... (truncated)

• 6edd440 fix log for stable aliases (#303)
• 38dbe75 Add stable and oldstable aliases (#300)
• 30c39bf Merge pull request #301 from jongwooo/chore/use-cache-in-check-dist
• 8377b69 Use cache in check-dist.yml
• d0a58c1 Merge pull request #294 from JamesMGreene/patch-1
• 3dcd9d6 Update to latest actions/publish-action
• e983b65 Merge pull request #283 from koba1t/add_support_gowork_for_go-version-file
• 27b43e1 Pass the token input through on GHES (#277)
• 7678c83 add support gowork for go-version-file
• c4a742c fix(): cache resolve version input (#267)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

• 181cea6 impr: CallerInfo should print full paths to the terminal (#1201)
• cf1284f Allow mock expectations to be ordered (#1106)
• 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178)
• 2fab6df Add WithinTimeRange method (#1188)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

• 41453c0 Update gopkg.in/yaml.v3
• 285adcc Update go versions in build matrix
• 6e7fab4 Bump actions/setup-go from 2 to 3.1.0
• 106ec21 use RWMutex
• a409ccf fix data race in the suit
• 3586478 assert: fix typo
• 7797738 Update versions supported to include go 1.16
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

• 083ff1c Fixed didPanic to now detect panic(nil).
• 1e36bfe Use cross Go version compatible build tag syntax
• e798dc2 Add docs on 1.17 build tags
• 83198c2 assert: guard CanConvert call in backward compatible wrapper
• 087b655 assert: allow comparing time.Time
• 7bcf74e fix msgAndArgs forwarding
• c29de71 add tests for correct msgAndArgs forwarding
• f87e2b2 Update builds
• ab6dc32 fix linting errors in /assert package
• edff5a0 fix funtion name
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

• b747d7c Bump github.com/stretchr/objx from 0.4.0 to 0.5.0 (#1283)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)