What's Changed
- build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.0 by @dependabot in #1512
- build(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by @dependabot in #1513
- build(deps): bump google.golang.org/api from 0.217.0 to 0.220.0 by @dependabot in #1514
- build(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 by @dependabot in #1520
- clean up ci permissions and update golangci-lint by @cpanato in #1523
- build(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.2 by @dependabot in #1521
- build(deps): bump github.com/sigstore/cosign/v2 from 2.4.1 to 2.4.2 by @dependabot in #1517
- build(deps): bump docker/setup-qemu-action from 3.3.0 to 3.4.0 by @dependabot in #1515
- build(deps): bump chainguard.dev/sdk from 0.1.29 to 0.1.31 by @dependabot in #1498
- build(deps): bump go.step.sm/crypto from 0.57.0 to 0.57.1 by @dependabot in #1504
- build(deps): bump golang.org/x/time from 0.9.0 to 0.10.0 by @dependabot in #1509
- move some unnecessary logs to debug by @imjasonh in #1522
- build(deps): bump github.com/chainguard-dev/clog from 1.5.1 to 1.6.1 by @dependabot in #1500
- build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in #1510
- build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in #1511
- build(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2 by @dependabot in #1491
- Consider already selected packages during solve by @jonjohnsonjr in #1406
- spdx: explain SHA1 usage by @xnox in #1501
Full Changelog: v0.24.0...v0.25.0