What's Changed
- Retract v0.27.8 by @wlynch in #1694
- Upgrade go-containerregistry by @xnox in #1659
- build(deps): bump chainguard-dev/actions from 1.1.1 to 1.1.3 by @dependabot in #1707
- add pkg/apko.Version to report apko dep version by @imjasonh in #1698
- build(deps): bump step-security/harden-runner from 2.11.1 to 2.12.1 by @dependabot in #1710
- build(deps): bump github/codeql-action from 3.28.17 to 3.29.0 by @dependabot in #1709
- dot: switch from open-golang to pkg/browser by @xnox in #1713
- build(deps): bump chainguard-dev/actions from 1.1.3 to 1.2.1 by @dependabot in #1715
- CONTRIBUTING.md: website link for golangci-lint has moved by @dannf in #1608
- build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in #1716
- Document how layering works by @jonjohnsonjr in #1703
- build(deps): bump chainguard-dev/actions from 1.2.1 to 1.3.0 by @dependabot in #1717
- build(deps): bump chainguard-dev/actions from 1.3.0 to 1.4.1 by @dependabot in #1719
- sbom: export ParseReleaseData for external use by @sil2100 in #1721
- build(deps): bump go.step.sm/crypto from 0.60.0 to 0.67.0 by @dependabot in #1722
- build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot in #1723
- build(deps): bump github.com/go-git/go-git/v5 from 5.16.0 to 5.16.2 by @dependabot in #1708
- build(deps): bump chainguard-dev/actions from 1.4.1 to 1.4.2 by @dependabot in #1724
- build(deps): bump google.golang.org/api from 0.231.0 to 0.238.0 by @dependabot in #1718
- build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8 by @dependabot in #1725
- fix(pkg/lock): Arch2LockedPackages produces empty/broken APK world files by @lyoung-confluent in #1731
- build(deps): bump github/codeql-action from 3.29.0 to 3.29.1 by @dependabot in #1730
- build(deps): bump go.opentelemetry.io/otel/trace from 1.36.0 to 1.37.0 by @dependabot in #1728
- build(deps): bump google.golang.org/api from 0.238.0 to 0.239.0 by @dependabot in #1726
Full Changelog: v0.27.9...v0.28.0