v0.16.0-rc9

Changelog

• 740a63f feat: store SBOM files outside tar.gz artifacts
• fcdb2ec fix!: correct typo in vet check name
• 28c3ea6 fix(cache): require dependencies in local cache for cached packages
• 1aa988a fix: add --sort=name to tar command for deterministic archives
• eb5e08c fix: add -trimpath to default Go build command for reproducible builds
• 0e85232 fix: correct typos in comments and documentation
• a81e7da fix: correct typos in filename and error message
• 098444f fix: correct typos in test case names
• f8679f7 fix: make GetTransitiveDependencies return deterministic order
• 992b32f perf(cache): add environment variables for S3 cache tuning
• 32d3e47 perf(cache): return detailed download results for smarter cache decisions
• 96bae24 test(cache): use Go packages in integration test for transitive deps

v0.16.0-rc12

Changelog

• c53da73 fix: resolve builtin variables in PackageInternal (prep, env)
• d4094a2 fix: skip SBOM scan for downloaded packages without SBOM

v0.16.0-rc11

Changelog

• c5de41a fix: resolve builtin variables in PackageInternal (prep, env)

v0.16.0-rc10

Changelog

• b5e3cbf fix: skip SBOM scan for downloaded packages without SBOM

v0.16.0-rc8

Changelog

• 3eb1928 perf(cache): add environment variables for S3 cache tuning

v0.16.0-rc7

Changelog

• fcdb2ec fix!: correct typo in vet check name
• 80b4e7a fix(cache): require dependencies in local cache for cached packages
• 0e85232 fix: correct typos in comments and documentation
• a81e7da fix: correct typos in filename and error message
• 098444f fix: correct typos in test case names
• 11e76f6 perf(cache): return detailed download results for smarter cache decisions
• cbd588d test(cache): use Go packages in integration test for transitive deps

v0.16.0-rc6

Changelog

• 0cc793e fix "yarn install" invocation: --frozenlockfile -> --frozen-lockfile
• 3bf13c6 fix(yarn): add --frozen-lockfile to default install command
• cb9e4f0 fix(yarn): handle scoped packages in link dependency extraction
• f82d2ed fix(yarn): patch yarn.lock for link: dependencies and fix extraction path
• a19656c fix: validate dependencies after download to prevent cache inconsistency
• f552c5c test(s3): reduce flaky threshold for batch optimization test
• aa9a7a5 test(yarn): add tests for link dependency patching
• 8b9566a test(yarn): add tests for scoped package extraction

v0.16.0-rc5

Changelog

• 0cc793e fix "yarn install" invocation: --frozenlockfile -> --frozen-lockfile
• 3bf13c6 fix(yarn): add --frozen-lockfile to default install command
• 8cb1ccf fix(yarn): patch yarn.lock for link: dependencies and fix extraction path
• 8f0e3d2 test(s3): reduce flaky threshold for batch optimization test

v0.16.0-rc4

Changelog

• 0cc793e fix "yarn install" invocation: --frozenlockfile -> --frozen-lockfile
• 3bf13c6 fix(yarn): add --frozen-lockfile to default install command
• be53b96 fix: validate dependencies after download to prevent cache inconsistency

v0.10.6

Changelog

• 4eca8ad fix(yarn): add --frozen-lockfile to default install command