v1.3.0

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed

• Fix golangci-lint fails by @thockin in #173
• Add minimal permissions to workflows by @pnacht in #177
• Add a security policy by @pnacht in #178
• Update security email by @thockin in #181
• docs: explain relationship between Logger{} and Discard() by @pohly in #182
• Add the OpenSSF Scorecard workflow by @pnacht in #186
• README: show of OpenSSF Scorecard badge by @pohly in #187
• Hash-pin workflow Actions by @pnacht in #189
• Bump go versions to 1.18+ by @thockin in #203
• slogr: add glue code for logging to slog.Handler and with slog.Logger by @pohly in #205
• slogr: restore original backend when converting back and forth by @pohly in #210
• slogr: add SlogSink by @pohly in #211
• Use same call depth for Enabled, Info, Error by @thockin in #218
• test: eliminate helper func by @thockin in #219
• docs: interoperability with slog by @pohly in #222

---

• build(deps): bump actions/setup-go from 3.5.0 to 4.0.1 by @dependabot in #190
• build(deps): bump github/codeql-action from 2.20.1 to 2.20.3 by @dependabot in #191
• build(deps): bump github/codeql-action from 2.20.3 to 2.20.4 by @dependabot in #192
• build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 by @dependabot in #193
• build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 by @dependabot in #194
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.3 by @dependabot in #207
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #206
• build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in #209
• build(deps): bump github/codeql-action from 2.21.3 to 2.21.4 by @dependabot in #208
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #214
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot in #217
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #220
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #221
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @dependabot in #223
• build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot in #224
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #225
• build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot in #226
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in #227
• build(deps): bump github/codeql-action from 2.21.9 to 2.22.0 by @dependabot in #228
• build(deps): bump github/codeql-action from 2.22.0 to 2.22.3 by @dependabot in #229
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #231
• build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @dependabot in #230

New Contributors

• @pnacht made their first contribution in #177
• @dependabot made their first contribution in #190

Full Changelog: v1.2.4...v1.3.0