What's Changed
- build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #2085
- build(deps): bump step-security/harden-runner from 2.21.1 to 2.22.1 by @dependabot[bot] in #2086
- build(deps): bump chainguard-dev/actions/goimports from 1.6.36 to 1.6.40 by @dependabot[bot] in #2083
- build(deps): bump chainguard-dev/actions/git-tag from 1.6.36 to 1.6.40 by @dependabot[bot] in #2082
- build(deps): bump step-security/action-actionlint from 1.73.1 to 1.76.0 by @dependabot[bot] in #2080
- build(deps): bump github.com/containerd/containerd/v2 from 2.3.5 to 2.3.6 by @dependabot[bot] in #2079
- build(deps): bump github.com/anchore/syft from 1.51.0 to 1.52.0 by @dependabot[bot] in #2076
- build(deps): bump cloud.google.com/go/storage from 1.67.1 to 1.68.0 by @dependabot[bot] in #2073
- build(deps): bump golang.org/x/text from 0.41.0 to 0.43.0 by @dependabot[bot] in #2074
- build: bump golangci-lint to v2.14.0, pin CI to Go 1.27 by @cpanato in #2087
- build(deps): bump the chainguard group across 1 directory with 3 updates by @dependabot[bot] in #2081
- build(deps): bump github.com/anchore/stereoscope from 0.3.2 to 0.3.4 by @dependabot[bot] in #2075
- ci: pin Go 1.27 in setup-go and apply workflow hardening by @cpanato in #2088
- Do not panic on an empty entry in the repositories block by @arpitjain099 in #2042
- checks: don't panic on a DT_SONAME without .so in it by @arpitjain099 in #2017
- lint: add valid-version-stream-provides rule by @cpanato in #2091
- lint: add prefer-git-checkout rule by @cpanato in #2090
- Remove unused pkg/sbom by @cpanato in #2089
- build(deps): bump chainguard-dev/actions/git-tag from 1.6.40 to 1.6.41 by @dependabot[bot] in #2099
- build(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 by @dependabot[bot] in #2098
- build(deps): bump chainguard-dev/actions/goimports from 1.6.40 to 1.6.41 by @dependabot[bot] in #2097
- build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #2096
- build(deps): bump github.com/cli/go-gh/v2 from 2.16.1 to 2.16.2 by @dependabot[bot] in #2095
- build(deps): bump github.com/anchore/syft from 1.52.0 to 1.54.1 by @dependabot[bot] in #2094
- build(deps): bump golang.org/x/term from 0.46.0 to 0.47.0 by @dependabot[bot] in #2093
- build(deps): bump github.com/github/go-spdx/v2 from 2.7.0 to 2.7.1 by @dependabot[bot] in #2092
New Contributors
- @arpitjain099 made their first contribution in #2042
Full Changelog: v0.39.28...v0.39.29