Changelog
- 78f3b0f build(deps): bump chainguard.dev/sdk from 0.1.454 to 0.1.470 (#2660)
- c854f89 build(deps): bump chainguard.dev/sdk from 0.1.470 to 0.1.475 (#2663)
- 8eed8c7 build(deps): bump chainguard.dev/sdk from 0.1.475 to 0.1.480 (#2668)
- 6aab053 build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.8 to 4.1.9 (#2659)
- 77fddd8 build(deps): bump golang.org/x/oauth2 from 0.37.0 to 0.38.0 (#2665)
- 2f1cd38 build(deps): bump golang.org/x/sync from 0.24.0 to 0.25.0 (#2657)
- 440f4eb build(deps): bump golang.org/x/sys from 0.49.0 to 0.50.0 (#2664)
- 802dfeb build(deps): bump google.golang.org/api from 0.310.0 to 0.311.0 (#2658)
- aca4a56 build(deps): bump sigstore/cosign-installer from 4.1.2 to 4.1.3 (#2655)
- ca3f207 build(deps): bump step-security/harden-runner from 2.22.3 to 2.22.4 (#2656)
- a9a0710 build(deps): bump the codeql group with 2 updates (#2654)
- 8422bb2 chore(ci): let mono publish exported changes to apko (#2661)
- 54d4fe1 feat(build): translate image config to and from the Registry API (#2667)
- 13690cb fix(apk): harden key fetching, index signature order and cgr auth token handling (#2639)
- 8ac9e12 fix(build): validate accounts after include merge and s6 service names (#2641)
- 20a72cf fix(fs): make Lstat not follow symlinks and lock memFile data access (#2640)
- 8c4f67b fix(fs): reject SubFS paths that climb above Root (#2642)