## [7.5.1](https://gitlab.com/to-be-continuous/python/compare/7.5.0...7.5.1) (2024-11-21)

### Bug Fixes

* **CodeArtifact:** fix AWS CodeArtifact variant ([c913e653](https://gitlab.com/to-be-continuous/python/commit/c913e6538d88efaf1d6f0eb7742e7531d66a32c2))

# [7.5.0](https://gitlab.com/to-be-continuous/python/compare/7.4.0...7.5.0) (2024-11-11)

### Features

* **Ruff:** add `ruff-format` job for code formatting ([142589f2](https://gitlab.com/to-be-continuous/python/commit/142589f2c260336d3a703af3e149c1c666fd5373))

# [7.4.0](https://gitlab.com/to-be-continuous/python/compare/7.3.3...7.4.0) (2024-11-08)

### Features

* add AWS CodeArtifact support (variant) ([128fb995](https://gitlab.com/to-be-continuous/python/commit/128fb9950c1354c211abe17d5cba19d75dd66ecc))

## [7.3.3](https://gitlab.com/to-be-continuous/python/compare/7.3.2...7.3.3) (2024-11-06)

### Bug Fixes

* correct bandit exclude of .venv and .cache ([ed955279](https://gitlab.com/to-be-continuous/python/commit/ed955279f56f2d66a2a7532b35515f2309f05f5c)), closes [#92](https://gitlab.com/to-be-continuous/python/issues/92)

fix #92

## [7.3.2](https://gitlab.com/to-be-continuous/python/compare/7.3.1...7.3.2) (2024-11-02)

### Bug Fixes

* limit security reports access to developer role or higher ([40c85eff](https://gitlab.com/to-be-continuous/python/commit/40c85eff562a00ceb9b381ef72472ce1910b97ab))

## [7.3.1](https://gitlab.com/to-be-continuous/python/compare/7.3.0...7.3.1) (2024-10-25)

### Bug Fixes

* **Trivy:** trivy scan fails when issues are found ([671b7814](https://gitlab.com/to-be-continuous/python/commit/671b78142c08cdd5bbf1441a81705b96dbf0740f))
* use right options for uv with extras deps ([354af5ad](https://gitlab.com/to-be-continuous/python/commit/354af5ad8294ad8f3de3f7ad6aeaf8752d5f2625))

`--extras` is not the right command for `uv`. It's `--extra` instead.

Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>

# [7.3.0](https://gitlab.com/to-be-continuous/python/compare/7.2.0...7.3.0) (2024-10-15)

### Features

* **uv:** add uv support as a new build system ([8aeb20b0](https://gitlab.com/to-be-continuous/python/commit/8aeb20b09347ff35398a4a707852a9cc17cc6842)), closes [#80](https://gitlab.com/to-be-continuous/python/issues/80)
* **uv:** add uv support as a new build system ([d22ffbac](https://gitlab.com/to-be-continuous/python/commit/d22ffbacb4228cb4ffdc6396bca9e43ad194bfff))

# [7.2.0](https://gitlab.com/to-be-continuous/python/compare/7.1.1...7.2.0) (2024-10-04)

### Bug Fixes

* **release:** support full semantic-versioning specifcation (with prerelease and build metadata) ([08e9d7e9](https://gitlab.com/to-be-continuous/python/commit/08e9d7e9f7f1bdd43a2070c9ee5abb16a8b8aaa0))
* **trivy:** use --pkg-types instead of deprecated --vuln-type option ([5e0a0d29](https://gitlab.com/to-be-continuous/python/commit/5e0a0d2918fd7539bd2e1cb955e99ef5857db1f5))

### Features

* **trivy:** enable comprehensive priority ([322eb1b8](https://gitlab.com/to-be-continuous/python/commit/322eb1b88c49d9a1662ad6b6199541f1a82860ef))

## [7.1.1](https://gitlab.com/to-be-continuous/python/compare/7.1.0...7.1.1) (2024-10-03)

### Bug Fixes

* Poetry Build system test ([95056049](https://gitlab.com/to-be-continuous/python/commit/95056049e7ee8239b6358def7c594e7002036574))

# [7.1.0](https://gitlab.com/to-be-continuous/python/compare/7.0.2...7.1.0) (2024-09-15)

### Bug Fixes

* check trivy activity to match new log format ([edd8fcf7](https://gitlab.com/to-be-continuous/python/commit/edd8fcf71f1b251c467d6bbce6e8a190d4584dda))
* pylint --ignore .cache not working now use find to exclude .cache ([e1463bc7](https://gitlab.com/to-be-continuous/python/commit/e1463bc750fbd24b12d407267061d8ae8a3718f1))

### Features

* isort exclude .cache ([e333183c](https://gitlab.com/to-be-continuous/python/commit/e333183ca48aa98baf9d510caf0c8f3f93d04b82))
* remove unnecesary install when use poetry or pipenv ([f025c6df](https://gitlab.com/to-be-continuous/python/commit/f025c6df22d48bd735458fc478b18d2235a715a2))

- trivy, sbom not install packages from project if use poetry, pipenv by take advantage of lockfile

## [7.0.2](https://gitlab.com/to-be-continuous/python/compare/7.0.1...7.0.2) (2024-05-20)

### Bug Fixes

* issue [#73](https://gitlab.com/to-be-continuous/python/issues/73) github_get_latest_version ([ce26d5ab](https://gitlab.com/to-be-continuous/python/commit/ce26d5abba8950f30bad1d992a2481bf252359b7))
* README for trivy now enabled by default ([f5d5f2e9](https://gitlab.com/to-be-continuous/python/commit/f5d5f2e9c186b6aeb0c55ef45a65b85615b9ad7b))

## [7.0.1](https://gitlab.com/to-be-continuous/python/compare/7.0.0...7.0.1) (2024-05-17)

### Bug Fixes

* remove useless apt commands ([469ebece](https://gitlab.com/to-be-continuous/python/commit/469ebece1e05b4748c3bd4e2ff793b058ea57bbf))

# [7.0.0](https://gitlab.com/to-be-continuous/python/compare/6.11.1...7.0.0) (2024-05-17)

### Code Refactoring

* **Trivy:** py-trivy job is enabled by default ([d9e86795](https://gitlab.com/to-be-continuous/python/commit/d9e867952d5a2040037c5cb03456380b976219af))

### Features

* add support for slim and alpine Python images + change default base image ([22003d19](https://gitlab.com/to-be-continuous/python/commit/22003d195670f3d923f31014636485bc783068bb))

### BREAKING CHANGES

* **Trivy:** py-trivy job is enabled by default
'trivy-enabled' input is no longer supported - use 'trivy-disabled' instead
* the default base image has been changed to python:debian-slim

BREAKING CHANGE: py-trivy job is enabled by default
'trivy-enabled' input is no longer supported - use 'trivy-disabled' instead

BREAKING CHANGE: the default base image has been changed to python:debian-slim

The template now supports installing packages on Alpine and Debian-based images.
The function also skips install if packages are already installed.

## [6.11.1](https://gitlab.com/to-be-continuous/python/compare/6.11.0...6.11.1) (2024-05-05)

### Bug Fixes

* **workflow:** disable MR pipeline from prod & integ branches ([8703dea9](https://gitlab.com/to-be-continuous/python/commit/8703dea915ca48038588adcc2a0672269dd24bb4))

Today creating a backmerge MR from prod or integ branch to any other branch triggers a pipeline
even though no change has been pushed.
Ultimately those pipelines might (re)trigger integration or production environment deployment and/or packages publication.
That might have unexpected consequences.
This change simply disables MR pipeline from prod & integ branches, enforcing branch pipelines only (i.e. when a true commit is pushed).