v0.39.1

What's Changed

• build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 by @dependabot[bot] in #1865
• build(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2 by @dependabot[bot] in #1864
• build(deps): bump chainguard-dev/actions from 1.5.13 to 1.5.16 by @dependabot[bot] in #1863
• build(deps): bump chainguard-dev/actions from 1.5.16 to 1.6.0 by @dependabot[bot] in #1866

Full Changelog: v0.39.0...v0.39.1

v0.39.0

What's Changed

• Remove obsolete commands by @xnox in #1857

Full Changelog: v0.38.31...v0.39.0

v0.38.31

What's Changed

• upgrade to latest apko by @jdolitsky in #1854

Full Changelog: v0.38.30...v0.38.31

v0.38.30

What's Changed

• build(deps): bump the chainguard group with 3 updates by @dependabot[bot] in #1841
• build(deps): bump chainguard-dev/actions from 1.5.12 to 1.5.13 by @dependabot[bot] in #1843
• build(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 by @dependabot[bot] in #1842
• build(deps): bump github.com/chainguard-dev/advisory-schema from 0.37.33 to 0.37.34 in the chainguard group by @dependabot[bot] in #1844
• build(deps): bump chainguard.dev/melange from 0.40.0 to 0.40.2 in the chainguard group by @dependabot[bot] in #1848

Full Changelog: v0.38.29...v0.38.30

v0.38.29

What's Changed

• build(deps): bump the chainguard group with 3 updates by @dependabot[bot] in #1832
• build(deps): bump chainguard-dev/actions from 1.5.11 to 1.5.12 by @dependabot[bot] in #1833
• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1834
• build(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by @dependabot[bot] in #1812
• build(deps): bump github.com/cli/go-gh/v2 from 2.12.2 to 2.13.0 by @dependabot[bot] in #1803
• feat(pkg/lint): flag packages that depend on unversioned python packages by @sil2100 in #1821
• lint: add fetch-templating rule to validate version templates by @AbduAzim424 in #1835
• build(deps): bump github.com/anchore/stereoscope from 0.1.13 to 0.1.18 by @dependabot[bot] in #1836
• build(deps): bump cloud.google.com/go/storage from 1.59.0 to 1.59.1 by @dependabot[bot] in #1837
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 in /.github/actions by @dependabot[bot] in #1840
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1839

New Contributors

• @sil2100 made their first contribution in #1821
• @AbduAzim424 made their first contribution in #1835

Full Changelog: v0.38.28...v0.38.29

v0.38.28

What's Changed

• lint: Handle multiple args by @jonjohnsonjr in #1820
• build(deps): bump the chainguard group across 1 directory with 4 updates by @dependabot[bot] in #1818
• build(deps): bump chainguard-dev/actions from 1.5.9 to 1.5.11 by @dependabot[bot] in #1819
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1823
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 in /.github/actions by @dependabot[bot] in #1824
• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1822
• build(deps): bump cloud.google.com/go/storage from 1.56.1 to 1.59.0 by @dependabot[bot] in #1825
• build(deps): bump chainguard.dev/apko from 1.0.1 to 1.0.2 in the chainguard group by @dependabot[bot] in #1826
• build(deps): bump github.com/github/go-spdx/v2 from 2.3.5 to 2.3.6 by @dependabot[bot] in #1827
• build(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.7.0 by @dependabot[bot] in #1828
• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1830

Full Changelog: v0.38.27...v0.38.28

v0.38.27

What's Changed

• build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1817

Full Changelog: v0.38.26...v0.38.27

v0.38.26

What's Changed

• bump.go: Ignore bot-generated CVE/GHSA comments by @sergiodj in #1813
• build(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 by @dependabot[bot] in #1815

New Contributors

• @sergiodj made their first contribution in #1813

Full Changelog: v0.38.25...v0.38.26

v0.38.25

What's Changed

• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 in /.github/actions by @dependabot[bot] in #1808
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #1807
• build(deps): bump step-security/harden-runner from 2.13.2 to 2.13.3 by @dependabot[bot] in #1806
• build(deps): bump octo-sts/action from 1.0.3 to 1.1.1 by @dependabot[bot] in #1814

Full Changelog: v0.38.24...v0.38.25

v0.38.24

What's Changed

• bug: update grype to fix java jar suffix issue by @kbsteere in #1809

New Contributors

• @kbsteere made their first contribution in #1809

Full Changelog: v0.38.23...v0.38.24