Skip to content

Release v0.7.0
Compare
Choose a tag to compare
@jonjohnsonjr jonjohnsonjr released this 14 May 17:30
· 829 commits to main since this release
v0.7.0
5cbb58a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

What's Changed

  • Find shbangs to generate depends by @smoser in #1110
  • build(deps): bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @dependabot in #1135
  • build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #1137
  • build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 by @dependabot in #1138
  • build(deps): bump github.com/docker/cli from 26.0.0+incompatible to 26.0.1+incompatible by @dependabot in #1140
  • build(deps): bump github.com/docker/docker from 26.0.0+incompatible to 26.0.1+incompatible by @dependabot in #1139
  • presubmit: remove gdk-pixbuf by @imjasonh in #1143
  • Revert "presubmit: remove gdk-pixbuf" by @imjasonh in #1147
  • verify SPDX SBOMs using spdx-tools-java by @imjasonh in #1146
  • Fix sca detection case for env with multiple arguments. by @dlorenc in #1148
  • Update shbang collection to ignore 'python' and support simple 'env -S'. by @smoser in #1159
  • ensure shbang check only checks valid shbangs by @joshrwolf in #1160
  • build(deps): bump github.com/docker/cli from 26.0.1+incompatible to 26.0.2+incompatible by @dependabot in #1157
  • build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #1149
  • build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #1151
  • build(deps): bump google.golang.org/api from 0.172.0 to 0.176.1 by @dependabot in #1167
  • build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1150
  • build(deps): bump github.com/chainguard-dev/yam from 0.0.3 to 0.0.4 by @dependabot in #1154
  • build(deps): bump github.com/docker/docker from 26.0.1+incompatible to 26.1.0+incompatible by @dependabot in #1170
  • build(deps): bump actions/download-artifact from 4.1.5 to 4.1.6 by @dependabot in #1168
  • build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #1169
  • build(deps): bump github.com/docker/cli from 26.0.2+incompatible to 26.1.0+incompatible by @dependabot in #1171
  • config: allow scriplets in subpackages with range replacements by @xnox in #1165
  • Drop -release from pc versions by @jonjohnsonjr in #1173
  • fix(cargo): Install all built binaries if output isn't defined by @EyeCantCU in #1174
  • sbom: set supplier in addition to originator by @imjasonh in #1184
  • Add melange scan by @jonjohnsonjr in #1175
  • build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1176
  • build(deps): bump actions/download-artifact from 4.1.6 to 4.1.7 by @dependabot in #1177
  • build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in #1178
  • build(deps): bump dagger.io/dagger from 0.11.0 to 0.11.2 by @dependabot in #1183
  • build(deps): bump go.opentelemetry.io/otel/sdk from 1.25.0 to 1.26.0 by @dependabot in #1182
  • build(deps): bump github.com/chainguard-dev/yam from 0.0.4 to 0.0.5 by @dependabot in #1181
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.25.0 to 1.26.0 by @dependabot in #1179
  • Bump go-apk by @jonjohnsonjr in #1185
  • add global --gcplog flag to emit GCP-compatible JSON logs by @imjasonh in #1186
  • pipelines/go: add back symbols tables by @xnox in #1142
  • Only consider that are in a PATH dir from generateCmdProviders by @smoser in #1164
  • Allow symlinks to provide cmd: by @smoser in #1188
  • build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 by @dependabot in #1197
  • build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #1196
  • build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #1195
  • build(deps): bump google.golang.org/api from 0.176.1 to 0.177.0 by @dependabot in #1194
  • build(deps): bump github.com/docker/cli from 26.1.0+incompatible to 26.1.1+incompatible by @dependabot in #1191
  • build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @dependabot in #1192
  • build(deps): bump github.com/chainguard-dev/yam from 0.0.5 to 0.0.6 by @dependabot in #1189
  • build(deps): bump github.com/docker/docker from 26.1.0+incompatible to 26.1.2+incompatible by @dependabot in #1199
  • build(deps): bump golang.org/x/text from 0.14.0 to 0.15.0 by @dependabot in #1193
  • Extract melange sign to a library by @tcnghia in #1198
  • Revert "Allow symlinks to provide cmd:" by @joshrwolf in #1200
  • Bump apko by @jonjohnsonjr in #1201
  • Make unit tests faster by @jonjohnsonjr in #1202
  • Add buildmode to go/build by @jonjohnsonjr in #1210

Full Changelog: v0.6.11...v0.7.0

Contributors

smoser, xnox, and 7 other contributors
Assets 20
Loading