🚀 Release 2.0.2

[github-actions]

🎉 Time to Release 2.0.2!

This repository is ready for a new release based on meaningful changes since the last release.

🎯 Release Triggers Detected

• ✅ Code changes to the action: Changes detected in action source files (excluding docs, workflows, tests)
• ✅ Security-related dependency updates: Security fixes or vulnerability patches detected

📊 Summary

• Current version: v2.0.1

• Next version: 2.0.2

• Total commits: 63

• Features: 0

• Bug fixes: 1

• Security updates: 5 ⚠️

Changes since v2.0.1

🔐 Security Updates

These security updates are a primary reason for this release.

• ⚠️ chore: bump step-security/harden-runner in the github-actions group (6a39661) by @dependabot[bot] on 2026-09-02
• ⚠️ fix(deps): resolve js-yaml and @babel/core security vulnerabilities (fix(deps): resolve js-yaml and @babel/core security vulnerabilities #718) (c3ea4af) by @rob Bos on 2026-07-27
• ⚠️ security: add explicit read-only permissions to semver-check workflow (security: add explicit permissions to semver-check workflow #707) (8f20f60) by @rob Bos on 2026-07-11
• ⚠️ Merge pull request chore: bump step-security/harden-runner from 2.19.4 to 2.20.0 #698 from devops-actions/dependabot/github_actions/step-security/harden-runner-2.20.0 (96e5449) by @github-actions[bot] on 2026-07-07
• ⚠️ chore: bump step-security/harden-runner from 2.19.4 to 2.20.0 (00b5870) by @dependabot[bot] on 2026-07-07

🐛 Bug Fixes

• fix(deps): resolve js-yaml and @babel/core security vulnerabilities (fix(deps): resolve js-yaml and @babel/core security vulnerabilities #718) (c3ea4af) by @rob Bos on 2026-07-27

🔧 Other Changes

• Merge pull request chore: bump browserslist from 4.25.1 to 4.28.8 #740 from devops-actions/dependabot/npm_and_yarn/browserslist-4.28.8 (5ab1af1) by @github-actions[bot] on 2026-09-02
• chore: bump browserslist from 4.25.1 to 4.28.8 (b8aac63) by @dependabot[bot] on 2026-09-02
• Merge pull request chore: bump @humanfs/node from 0.16.6 to 0.16.8 #739 from devops-actions/dependabot/npm_and_yarn/humanfs/node-0.16.8 (584d251) by @github-actions[bot] on 2026-09-02
• chore: bump @humanfs/node from 0.16.6 to 0.16.8 (b8294fc) by @dependabot[bot] on 2026-09-02
• Merge pull request chore: bump step-security/harden-runner from 2.21.0 to 2.21.1 in the github-actions group #738 from devops-actions/dependabot/github_actions/github-actions-4c70b186bc (60fb898) by @github-actions[bot] on 2026-09-02
• Merge pull request chore: bump the development-dependencies group across 1 directory with 8 updates #737 from devops-actions/dependabot/npm_and_yarn/development-dependencies-faa882106f (65cdad3) by @github-actions[bot] on 2026-09-02
• chore: bump the development-dependencies group across 1 directory with 8 updates (7d8771f) by @dependabot[bot] on 2026-09-02
• Merge pull request chore: bump the production-dependencies group with 3 updates #736 from devops-actions/dependabot/npm_and_yarn/production-dependencies-d62098efe6 (f51bfeb) by @github-actions[bot] on 2026-09-01
• chore: bump the production-dependencies group with 3 updates (5b716af) by @dependabot[bot] on 2026-09-01
• chore: bump the github-actions group with 7 updates (chore: bump the github-actions group with 7 updates #734) (91d047d) by @dependabot[bot] on 2026-09-01
• Merge pull request chore: bump the github-actions group across 1 directory with 9 updates #733 from devops-actions/dependabot/github_actions/github-actions-2c810230b5 (d1e8e85) by @rob Bos on 2026-08-31
• chore: bump the github-actions group across 1 directory with 9 updates (ec69726) by @dependabot[bot] on 2026-08-25
• chore: bump the github-actions group with 4 updates (chore: bump the github-actions group with 4 updates #729) (14cdbe5) by @dependabot[bot] on 2026-08-17
• Merge pull request chore: bump js-yaml from 5.2.2 to 5.2.3 #727 from devops-actions/dependabot/npm_and_yarn/js-yaml-5.2.3 (17e9c6b) by @github-actions[bot] on 2026-08-07
• chore: bump js-yaml from 5.2.2 to 5.2.3 (ce3b139) by @dependabot[bot] on 2026-08-07
• Merge pull request chore: bump the github-actions group with 4 updates #726 from devops-actions/dependabot/github_actions/github-actions-359137164d (4533b39) by @github-actions[bot] on 2026-08-07
• chore: bump the github-actions group with 4 updates (e6f53fd) by @dependabot[bot] on 2026-08-07
• Merge pull request chore: bump the github-actions group with 3 updates #725 from devops-actions/dependabot/github_actions/github-actions-a8bbb0c234 (1570a86) by @github-actions[bot] on 2026-08-06
• chore: bump the github-actions group with 3 updates (3e8d1b7) by @dependabot[bot] on 2026-08-06
• Merge pull request chore: bump undici from 6.27.0 to 6.28.0 #724 from devops-actions/dependabot/npm_and_yarn/undici-6.28.0 (58e5585) by @github-actions[bot] on 2026-08-05
• chore: bump undici from 6.27.0 to 6.28.0 (9c4556b) by @dependabot[bot] on 2026-08-05
• Merge pull request chore: bump brace-expansion from 1.1.12 to 1.1.18 #723 from devops-actions/dependabot/npm_and_yarn/brace-expansion-1.1.18 (a5a29b0) by @github-actions[bot] on 2026-08-05
• chore: bump brace-expansion from 1.1.12 to 1.1.18 (4ef5ee4) by @dependabot[bot] on 2026-08-05
• Merge pull request chore: bump the github-actions group with 4 updates #722 from devops-actions/dependabot/github_actions/github-actions-382b9ebefd (d043581) by @rob Bos on 2026-08-03
• chore: bump the github-actions group with 4 updates (5cb9a50) by @dependabot[bot] on 2026-08-03
• Merge pull request chore: bump the development-dependencies group with 7 updates #720 from devops-actions/dependabot/npm_and_yarn/development-dependencies-03affeb09c (0ee5eee) by @github-actions[bot] on 2026-08-01
• chore: bump the development-dependencies group with 7 updates (195a281) by @dependabot[bot] on 2026-08-01
• Merge pull request chore: bump the github-actions group with 3 updates #719 from devops-actions/dependabot/github_actions/github-actions-432e0d4de6 (a7d4b56) by @github-actions[bot] on 2026-07-30
• chore: bump the github-actions group with 3 updates (d0919a5) by @dependabot[bot] on 2026-07-30
• Merge pull request chore: bump the github-actions group across 1 directory with 9 updates #715 from devops-actions/dependabot/github_actions/github-actions-f2df83cf57 (0d47b5a) by @rob Bos on 2026-07-29
• chore: bump the github-actions group across 1 directory with 9 updates (e559353) by @dependabot[bot] on 2026-07-28
• Merge pull request chore: bump js-yaml from 5.2.1 to 5.2.2 #717 from devops-actions/dependabot/npm_and_yarn/js-yaml-5.2.2 (445de7a) by @github-actions[bot] on 2026-07-27
• chore: bump js-yaml from 5.2.1 to 5.2.2 (601bc52) by @dependabot[bot] on 2026-07-27
• Merge pull request chore: bump the github-actions group with 3 updates #711 from devops-actions/dependabot/github_actions/github-actions-3d2ef569ae (91e4b05) by @github-actions[bot] on 2026-07-17
• chore: bump the github-actions group with 3 updates (7ea2b71) by @dependabot[bot] on 2026-07-17
• chore: bump actions/setup-node in the github-actions group (chore: bump actions/setup-node from 6.4.0 to 7.0.0 in the github-actions group #710) (de14029) by @dependabot[bot] on 2026-07-14
• chore: bump the github-actions group with 4 updates (chore: bump the github-actions group with 4 updates #709) (47e53d4) by @dependabot[bot] on 2026-07-13
• chore: bump the development-dependencies group with 6 updates (chore: bump the development-dependencies group with 6 updates #706) (8c371d4) by @dependabot[bot] on 2026-07-11
• Merge pull request chore: bump the github-actions group in /.github/workflows with 2 updates #704 from devops-actions/dependabot/github_actions/dot-github/workflows/github-actions-6872eef3cb (4325fb5) by @github-actions[bot] on 2026-07-11
• Merge branch 'main' into dependabot/github_actions/dot-github/workflows/github-actions-6872eef3cb (66de210) by @rob Bos on 2026-07-11
• Merge pull request chore: bump the github-actions group with 2 updates #705 from devops-actions/dependabot/github_actions/github-actions-6872eef3cb (c324bff) by @github-actions[bot] on 2026-07-11
• Merge branch 'main' into dependabot/github_actions/dot-github/workflows/github-actions-6872eef3cb (9852cb6) by @rob Bos on 2026-07-11
• Merge branch 'main' into dependabot/github_actions/github-actions-6872eef3cb (8e9910c) by @rob Bos on 2026-07-11
• Merge pull request chore: bump js-yaml from 5.2.0 to 5.2.1 in the production-dependencies group #703 from devops-actions/dependabot/npm_and_yarn/production-dependencies-9d5d00edeb (3a93adb) by @github-actions[bot] on 2026-07-11
• chore: bump the github-actions group with 2 updates (cfde0e2) by @dependabot[bot] on 2026-07-11
• chore: bump the github-actions group (21f9c38) by @dependabot[bot] on 2026-07-11
• chore: bump js-yaml in the production-dependencies group (3960316) by @dependabot[bot] on 2026-07-11
• chore: group github-actions dependabot updates (chore: group github-actions dependabot updates #702) (6b03556) by @rob Bos on 2026-07-11
• chore: bump devops-actions/.github/.github/workflows/actions-example-checker.yml (chore: bump devops-actions/.github/.github/workflows/actions-example-checker.yml from 36ef47f59df5b0ae9b4214ab664d18533abdb9bf to 891fb6d59e53d81ffc7e9367de68d4ef288f2900 #693) (7808619) by @dependabot[bot] on 2026-07-11
• chore: bump devops-actions/.github/.github/workflows/issue-pr-tag.yml (chore: bump devops-actions/.github/.github/workflows/issue-pr-tag.yml from b77cea6d7ba1cd4e001581783cc592bbb63ce46d to 891fb6d59e53d81ffc7e9367de68d4ef288f2900 #694) (5c693bb) by @dependabot[bot] on 2026-07-11
• Merge pull request chore: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 #701 from devops-actions/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.0 (3cc298c) by @github-actions[bot] on 2026-07-08
• chore: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 (b46410d) by @dependabot[bot] on 2026-07-08
• Merge pull request chore: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 #697 from devops-actions/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.3 (58736bf) by @github-actions[bot] on 2026-07-07
• chore: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 (066172b) by @dependabot[bot] on 2026-07-07
• chore: bump devops-actions/.github/.github/workflows/dependency-review.yml (chore: bump devops-actions/.github/.github/workflows/dependency-review.yml from 36ef47f59df5b0ae9b4214ab664d18533abdb9bf to 891fb6d59e53d81ffc7e9367de68d4ef288f2900 #692) (f212f6a) by @dependabot[bot] on 2026-07-06
• chore: bump devops-actions/.github/.github/workflows/actions-dependencies.yml (chore: bump devops-actions/.github/.github/workflows/actions-dependencies.yml from 36ef47f59df5b0ae9b4214ab664d18533abdb9bf to 891fb6d59e53d81ffc7e9367de68d4ef288f2900 #696) (8bcc8ea) by @dependabot[bot] on 2026-07-06
• Merge pull request chore: bump devops-actions/action-get-tag from 1.0.4 to 1.0.5 #695 from devops-actions/dependabot/github_actions/devops-actions/action-get-tag-1.0.5 (b0a5861) by @github-actions[bot] on 2026-07-06
• chore: bump devops-actions/action-get-tag from 1.0.4 to 1.0.5 (463aeaf) by @dependabot[bot] on 2026-07-06

📋 Release Checklist

• Review the changelog above
• Verify security updates are critical enough to warrant immediate release
• Update version numbers if needed (consider major/minor for breaking changes)
• Review and merge any pending PRs
• Create and push the tag: git tag -a 2.0.2 -m "Release 2.0.2"
• Push tags: git push --tags
• Verify the release workflow completes successfully
• Close this issue after release is published

📦 SBOM Information

SBOM files have been generated and are available in the workflow artifacts:

• SPDX format: sbom-spdx.json
• CycloneDX format: sbom-cyclonedx.json

🤖 Automation Note

This issue was automatically created by the time-for-new-release workflow.

Release criteria: This workflow only creates release issues when there are:

1. Code changes to the action itself (not just docs or tests), OR
2. Security-related dependency updates

Once the release is published, this issue can be closed.