v0.38.15

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.12 to 1.4.13 by @dependabot[bot] in #1747
• build(deps): bump the chainguard group with 3 updates by @dependabot[bot] in #1746
• build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9 by @dependabot[bot] in #1745
• build(deps): bump octo-sts/action from 1.0.0 to 1.0.1 by @dependabot[bot] in #1744
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #1749
• build(deps): bump github.com/anchore/grype from 0.98.0 to 0.99.1 by @dependabot[bot] in #1748
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #1752
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 in /.github/actions by @dependabot[bot] in #1753
• feat(pkg/sbom/cpe.go): Add exception for gitlab-operator to avoid matching as gitlab-* package and gitlab product by @philroche in #1755
• build(deps): bump github.com/charmbracelet/bubbletea from 1.3.6 to 1.3.7 by @dependabot[bot] in #1756

Full Changelog: v0.38.14...v0.38.15

v0.38.14

What's Changed

• build(deps): bump the chainguard group with 4 updates by @dependabot[bot] in #1737
• build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #1738
• build(deps): bump cloud.google.com/go/storage from 1.56.0 to 1.56.1 by @dependabot[bot] in #1732
• build(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in #1742

Full Changelog: v0.38.13...v0.38.14

v0.38.13

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.11 to 1.4.12 by @dependabot[bot] in #1733
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #1734
• chore(sbom): resolve warning for directory source by @luhring in #1736

Full Changelog: v0.38.12...v0.38.13

v0.38.12

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.9 to 1.4.10 by @dependabot[bot] in #1728
• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1727
• build(deps): bump chainguard-dev/actions from 1.4.10 to 1.4.11 by @dependabot[bot] in #1729
• build(deps): bump github.com/chainguard-dev/advisory-schema from 0.37.17 to 0.37.18 in the chainguard group by @dependabot[bot] in #1730
• build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 by @dependabot[bot] in #1731

Full Changelog: v0.38.11...v0.38.12

v0.38.11

What's Changed

• withdraw: add option to read from file by @javacruft in #1716
• build(deps): bump github.com/anchore/syft from 1.29.1 to 1.30.0 by @dependabot[bot] in #1718
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 in /.github/actions by @dependabot[bot] in #1721
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1717
• build(deps): bump the chainguard group across 1 directory with 4 updates by @dependabot[bot] in #1722
• build(deps): bump chainguard-dev/actions from 1.4.8 to 1.4.9 by @dependabot[bot] in #1720
• build(deps): bump github.com/anchore/grype from 0.97.1 to 0.97.2 by @dependabot[bot] in #1723
• build(deps): bump github.com/anchore/syft from 1.30.0 to 1.31.0 by @dependabot[bot] in #1724
• build(deps): bump github.com/anchore/grype from 0.97.2 to 0.98.0 by @dependabot[bot] in #1725
• build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @dependabot[bot] in #1726
• build(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2 by @dependabot[bot] in #1714

New Contributors

• @javacruft made their first contribution in #1716

Full Changelog: v0.38.10...v0.38.11

v0.38.10

What's Changed

• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1710
• build(deps): bump chainguard-dev/actions from 1.4.7 to 1.4.8 by @dependabot[bot] in #1709
• build(deps): bump sigs.k8s.io/release-utils from 0.12.0 to 0.12.1 by @dependabot[bot] in #1715

Full Changelog: v0.38.9...v0.38.10

v0.38.9

What's Changed

• build(deps): bump github.com/anchore/grype from 0.97.0 to 0.97.1 by @dependabot[bot] in #1708

Full Changelog: v0.38.8...v0.38.9

v0.38.8

What's Changed

• build(deps): bump github.com/anchore/grype from 0.96.1 to 0.97.0 by @dependabot[bot] in #1705
• build(deps): bump chainguard.dev/melange from 0.30.2 to 0.30.3 in the chainguard group by @dependabot[bot] in #1704
• build(deps): bump cloud.google.com/go/storage from 1.55.0 to 1.56.0 by @dependabot[bot] in #1695

Full Changelog: v0.38.7...v0.38.8

v0.38.7

What's Changed

• Bump apko and melange + handle apko field renames by @kevinmdavis in #1703

New Contributors

• @kevinmdavis made their first contribution in #1703

Full Changelog: v0.38.6...v0.38.7

v0.38.6

What's Changed

• chore: bump yam to 0.2.26 by @kranurag7 in #1696
• lint: add rule to make sure update identifier matches git repo by @konradzapalowicz in #1693
• build(deps): bump chainguard-dev/actions from 1.4.6 to 1.4.7 by @dependabot[bot] in #1698
• build(deps): bump the chainguard group across 1 directory with 3 updates by @dependabot[bot] in #1694

Full Changelog: v0.38.5...v0.38.6