# [3.10.0](https://gitlab.com/to-be-continuous/maven/compare/3.9.2...3.10.0) (2024-06-30)

### Bug Fixes

* add submodule pom files as job artifacts ([e6960e6b](https://gitlab.com/to-be-continuous/maven/commit/e6960e6b26be9fecb4ce69d38e12919a886132a0))

### Features

* add eval_all_secrets closes [#59](https://gitlab.com/to-be-continuous/maven/issues/59) ([c77193c4](https://gitlab.com/to-be-continuous/maven/commit/c77193c447fa897563b07ec0cc5a17ea02e229b8))

feat: add eval_all_secrets closes #59

Closes #59

See merge request to-be-continuous/maven!85

fix: Add submodule .pom files as job artifacts

Closes #58

See merge request to-be-continuous/maven!84

chore(deps): update dependency to-be-continuous/semantic-release to v3.11

See merge request to-be-continuous/maven!83

ci(security): add Gitleaks scan

See merge request to-be-continuous/maven!82

chore(deps): update dependency to-be-continuous/semantic-release to v3.10

See merge request to-be-continuous/maven!80

## [3.9.2](https://gitlab.com/to-be-continuous/maven/compare/3.9.1...3.9.2) (2024-05-05)

### Bug Fixes

* **workflow:** disable MR pipeline from prod & integ branches ([3fc4c9ed](https://gitlab.com/to-be-continuous/maven/commit/3fc4c9edbded967df2f4c648672de8d51515bd7e))

Today creating a backmerge MR from prod or integ branch to any other branch triggers a pipeline
even though no change has been pushed.
Ultimately those pipelines might (re)trigger integration or production environment deployment and/or packages publication.
That might have unexpected consequences.
This change simply disables MR pipeline from prod & integ branches, enforcing branch pipelines only (i.e. when a true commit is pushed).

docs: Replaced / with : after hostname in scm example

See merge request to-be-continuous/maven!79

https://maven.apache.org/scm/git.html

chore(deps): update to-be-continuous dependencies

See merge request to-be-continuous/maven!77

## [3.9.1](https://gitlab.com/to-be-continuous/maven/compare/3.9.0...3.9.1) (2024-1-30)

### Bug Fixes

* sanitize variable substitution pattern ([f3164e86](https://gitlab.com/to-be-continuous/maven/commit/f3164e86c50e730af74c032ee0fb3c05c7005106))

replace '${foo+repl}' pattern with '${foo:+repl}' (latest supports $foo being defined but empty)

# [3.9.0](https://gitlab.com/to-be-continuous/maven/compare/3.8.0...3.9.0) (2024-1-27)

### Features

* GitLab CI/CD component migration ([5c32520f](https://gitlab.com/to-be-continuous/maven/commit/5c32520f6eecc18b58b2b2cf0f4326e04e023cec))

GitLab CI/CD component migration

See merge request to-be-continuous/maven!74

 requires GitLab 16.6 or later

chore(deps): update to-be-continuous dependencies

See merge request to-be-continuous/maven!76

# [3.8.0](https://gitlab.com/to-be-continuous/maven/compare/3.7.1...3.8.0) (2023-12-8)

### Features

* use centralized tracking image (gitlab.com) ([6d11997d](https://gitlab.com/to-be-continuous/maven/commit/6d11997d1894711795685416b3c2aa574b3a77cb))

docs: how to set NVD api key and data feed url for dependency-check

Closes #49

See merge request to-be-continuous/maven!75

chore(deps): update dependency to-be-continuous/semantic-release to v3.6

See merge request to-be-continuous/maven!72

## [3.7.1](https://gitlab.com/to-be-continuous/maven/compare/3.7.0...3.7.1) (2023-11-02)

### Bug Fixes

* initialize docker auth config in mvn-sbom job for private registries ([4c991ef2](https://gitlab.com/to-be-continuous/maven/commit/4c991ef2620fbac31cb4ea6de632c1c4bdb7957e))