Changelog
- 6a66a43 Regenerate apko-discover.lock.json golden file (#2608)
- 0d57364 Use go-jose v4 directly for JWKS key discovery (#2621)
- 70b8c43 apk: stop writing the uncompressed data tar into the cache (#2622)
- f7ffe4e build(deps): bump chainguard.dev/sdk from 0.1.404 to 0.1.421 (#2605)
- fb0bf33 build(deps): bump chainguard.dev/sdk from 0.1.421 to 0.1.424 (#2614)
- 7223d8c build(deps): bump chainguard.dev/sdk from 0.1.424 to 0.1.426 (#2616)
- ab9c6d6 build(deps): bump github.com/erofs/go-erofs from 0.3.2-0.20260804074615-52cc42c5291c to 0.3.2 (#2617)
- dec3e6d build(deps): bump github.com/github/go-spdx/v2 from 2.7.1 to 2.8.0 (#2603)
- 796ba1d build(deps): bump google.golang.org/api from 0.305.0 to 0.308.0 (#2604)
- f71ffa1 build(deps): bump the codeql group across 1 directory with 2 updates (#2606)
- 6c60be3 build: split a layered build's walk from how it writes layers (#2615)
- ad76450 fix(apk): don't write to an offline cache on a package cache miss (#2611)
- 41d1382 paths: recursive permission mutations follow symlinks and re-own files outside the tree (#2618)
- ad680c7 tarfs: keep a package file's changes once it is opened to write (#2612)