v4.0.0

What's Changed

• fix: Security updates by @github-actions[bot] in #262
• fix: Security updates by @github-actions[bot] in #290
• fix: Security updates by @github-actions[bot] in #291
• fix: Security updates by @github-actions[bot] in #292
• fix: Security updates by @github-actions[bot] in #294
• fix: Security updates by @github-actions[bot] in #295
• fix: Security updates by @github-actions[bot] in #296
• fix: Security updates by @github-actions[bot] in #297
• fix: Security updates by @github-actions[bot] in #298
• fix: Security updates by @github-actions[bot] in #299
• fix: Security updates by @github-actions[bot] in #300
• fix: Security updates by @github-actions[bot] in #301
• fix: Security updates by @github-actions[bot] in #302
• chore: add claude review workflow by @anurag-stepsecurity in #304
• feat: update auto_cherry_pick.yml by @amanstep in #305
• feat: update auto_cherry_pick.yml by @amanstep in #306
• chore: Cherry-picked changes from upstream by @github-actions[bot] in #303
• chore(deps-dev): bump eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot[bot] in #232
• Bump actions/checkout from 3.6.0 to 5.0.0 by @dependabot[bot] in #245
• Bump actions/dependency-review-action from 2.5.1 to 4.8.1 by @dependabot[bot] in #280
• Bump actions/setup-node from 4.0.2 to 6.0.0 by @dependabot[bot] in #283
• Bump github/codeql-action from 2.25.9 to 4.31.0 by @dependabot[bot] in #288
• Bump @types/node from 24.0.0 to 25.6.0 by @dependabot[bot] in #289
• Bump @commitlint/config-conventional from 16.2.4 to 20.0.0 by @dependabot[bot] in #269
• fix: Resolve security vulnerabilities by @anurag-stepsecurity in #307
• fix: Update banner and subscription check by @anurag-stepsecurity in #308

New Contributors

• @anurag-stepsecurity made their first contribution in #304
• @amanstep made their first contribution in #305

Full Changelog: v3...v4.0.0

v3.0.4

What's Changed

• ci: Update auto_cherry_pick.yml by @Raj-StepSecurity in #208
• fix: Security updates by @github-actions[bot] in #216
• fix: Security updates by @github-actions[bot] in #236
• chore: dist updated by @github-actions[bot] in #253
• feat: Validate Subscription flow Updated by @Raj-StepSecurity in #252

Full Changelog: v3...v3.0.4

v3.0.3

What's Changed

• ci: auto cherry pick workflow added by @Raj-StepSecurity in #161
• chore: Cherry-picked changes from upstream by @github-actions in #164
• fix: Security updates by @github-actions in #165
• [StepSecurity] Apply security best practices by @stepsecurity-app in #172
• fix: updated validate subscription check by @Raj-StepSecurity in #193
• Revert "fix: updated validate subscription check" by @Raj-StepSecurity in #197
• fix: Security updates by @github-actions in #199

New Contributors

• @stepsecurity-app made their first contribution in #172

Full Changelog: v3...v3.0.3

v3.0.2

What's Changed

• Create osv-scanner.toml by @varunsh-coder in #91
• vulns audited and fixed by @Raj-StepSecurity in #129
• cross spwn fixed by @Raj-StepSecurity in #130
• Revert main vuln fixes by @Raj-StepSecurity in #131
• workflow to fix vulnerabilities by @Raj-StepSecurity in #132
• fix: Security updates via npm audit fix
  by @github-actions in #133
• Bump actions/upload-artifact from 3.1.3 to 4.4.3 by @dependabot in #99
• release changes removed and vuln fixed by @Raj-StepSecurity in #142

New Contributors

• @varunsh-coder made their first contribution in #91
• @Raj-StepSecurity made their first contribution in #129
• @github-actions made their first contribution in #133

Full Changelog: v3...v3.0.2

v3.0.1

What's Changed

• Bump braces from 3.0.2 to 3.0.3 by @dependabot in #48
• Bump ossf/scorecard-action from 2.0.6 to 2.4.0 by @dependabot in #40
• Bump undici from 5.28.2 to 5.28.4 by @dependabot in #49
• Bump axios from 1.7.2 to 1.7.4 by @dependabot in #61
• update dependencies & patch vulnerable build by @shubham-stepsecurity in #62

New Contributors

• @dependabot made their first contribution in #48

Full Changelog: v3...v3.0.1

v3.0.0

What's Changed

• chore: initial Release by @shubham-stepsecurity in #1
• update: Standardize release workflow by @shubham-stepsecurity in #2
• [StepSecurity] Apply security best practices by @step-security-bot in #3
• chore: add security policy by @shubham-stepsecurity in #15

New Contributors

• @shubham-stepsecurity made their first contribution in #1
• @step-security-bot made their first contribution in #3

Full Changelog: https://github.com/step-security/retry/commits/v3.0.0