Release v0.6.3

What's Changed

• Don't write APK to temp file during signing by @jonjohnsonjr in #1039

Full Changelog: v0.6.2...v0.6.3

Release v0.6.2

What's Changed

• Experimental Dagger Runner by @jonjohnsonjr in #987
• Add a --trace flag to melange build by @jonjohnsonjr in #1026
• label containers created by docker runner for easier external management by @joshrwolf in #1028
• add package name to docker labels by @joshrwolf in #1029
• apply package substitutions in test.environment.contents.packages by @rawlingsj in #1037
• Add --package-append flag to build by @jonjohnsonjr in #1038

Full Changelog: v0.6.1...v0.6.2

Release v0.6.1

What's Changed

• Allow substitutions in dependencies.replaces by @jonjohnsonjr in #1010
• Fix context.Background use by @jonjohnsonjr in #1018
• Remove images even with cancelled ctx by @jonjohnsonjr in #1019
• Clean up apko-temp dirs by @jonjohnsonjr in #1021
• version-transform and var-transform documentation by @mesaglio in #973
• Remove breakpoint labels by @jonjohnsonjr in #1024
• omit arch log key when building one arch by @imjasonh in #1025

Full Changelog: v0.6.0...v0.6.1

Release v0.6.0

What's Changed

• fix go-build example by @imjasonh in #999
• Make debugging melange builds less terrible by @jonjohnsonjr in #996
• move runner determination to pkg/cli by @imjasonh in #1000
• Continue interactive execution on exit 0 by @jonjohnsonjr in #1005
• update dario/mergo by @imjasonh in #1001
• Make it easier to find docs-repo on ci failure by @jonjohnsonjr in #998
• Do more cleanup with --rm by @jonjohnsonjr in #1006
• Mostly fix interactive interrupt signal handling by @jonjohnsonjr in #1008
• Split pkg/container up into smaller packages by @jonjohnsonjr in #1009

Full Changelog: v0.5.10...v0.6.0

Release v0.5.10

What's Changed

• move some logs to debug by @imjasonh in #995
• Add --die-with-parent to bwrap flags by @jonjohnsonjr in #997
• feat: GOEXPERIMENT support to go/build and go/install pipelines by @lyoung-confluent in #991

New Contributors

• @lyoung-confluent made their first contribution in #991

Full Changelog: v0.5.9...v0.5.10

Release v0.5.9

What's Changed

• build(deps): bump github.com/docker/docker from 25.0.1+incompatible to 25.0.2+incompatible by @dependabot in #980
• build(deps): bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @dependabot in #978
• build(deps): bump cloud.google.com/go/storage from 1.36.0 to 1.37.0 by @dependabot in #979
• Cancel context on interrupt signal by @jonjohnsonjr in #992
• Split options into separate files by @jonjohnsonjr in #993
• use charm logger by @imjasonh in #988
• Add WaitDelay to bubblewrap cmd by @jonjohnsonjr in #994

Full Changelog: v0.5.8...v0.5.9

Release v0.5.8

What's Changed

• Exclude "com.docker.grpcfuse.ownership" xattr by @jonjohnsonjr in #981
• Fix race condition in log monitoring by @jonjohnsonjr in #982
• eliminate some more logger invocations by @imjasonh in #983
• Add Close() method to container runners by @jonjohnsonjr in #984
• If arch is not specified, test all. by @vaikas in #985
• Don't use goroutines for monitoring logs by @jonjohnsonjr in #986
• Respond to cancelled context while streaming logs by @jonjohnsonjr in #989
• Add --rm flag (and options) to Build by @jonjohnsonjr in #990

Full Changelog: v0.5.7...v0.5.8

Release v0.5.7

What's Changed

• Take advantage of Octo STS to publish homebrew updates. by @mattmoor in #956
• Pin to digest for setup-go in melange by @jedsalazar in #940
• drop the lima runner by @imjasonh in #958
• Don't include libexec directories in SCA includes by @jonjohnsonjr in #959
• Fix aws-c-s3 SCA by @jonjohnsonjr in #960
• unexport some methods in pkg/sbom by @imjasonh in #961
• warn on invalid license, log SCA findings by @imjasonh in #962
• Switch to octo-sts-action by @mattmoor in #968
• Bump apko to v0.14.0 by @jonjohnsonjr in #969
• Fix missing no-depends check by @jonjohnsonjr in #971
• Embed melange version in .PKGINFO by @jonjohnsonjr in #972
• build(deps): bump google.golang.org/api from 0.154.0 to 0.161.0 by @dependabot in #970
• build(deps): bump actions/upload-artifact from 4.0.0 to 4.3.0 by @dependabot in #967
• build(deps): bump github.com/chainguard-dev/yam from 0.0.0-20230807153807-4de7c531f3e1 to 0.0.1 by @dependabot in #947
• build(deps): bump actions/download-artifact from 4.1.0 to 4.1.1 by @dependabot in #923
• build(deps): bump github.com/kubescape/go-git-url from 0.0.26 to 0.0.27 by @dependabot in #917
• stop logging tons of "detected git commit for build configuration" wh… by @rawlingsj in #974
• melange bump: only update expected commit shas for the main git-checkout by @rawlingsj in #975
• test: skip when executing on an unsupported arch by @imjasonh in #976
• Pass the correct env.env to the container. by @vaikas in #977

New Contributors

• @jedsalazar made their first contribution in #940

Full Changelog: v0.5.6...v0.5.7

Release v0.5.6

What's Changed

• Bypass warning about detached head by @imjasonh in #906
• Add a python/test pipeline. by @vaikas in #907
• meson/configure: don't download subprojects by default by @imjasonh in #909
• add *_config pattern to split/dev pipeline by @joemiller in #879
• Add --test-package-append that you can specify extra test packages for each test. by @vaikas in #910
• Add python/import test pipeline, as well as e2e tests for python test pipelines. by @vaikas in #911
• Tiny cleanup: Move test pipelines to where others are. Remove unnecessary test packages. by @vaikas in #912
• build(deps): bump github.com/cloudflare/circl from 1.3.6 to 1.3.7 by @dependabot in #918
• Convert some sca code to early return style by @jonjohnsonjr in #921
• Take an fs as an argument to RetrieveWorkspace by @jonjohnsonjr in #926
• Move more mutations into parameters by @jonjohnsonjr in #927
• Drop mutable imgRef from build.Build by @jonjohnsonjr in #928
• Remove some more struct mutating and shadowing by @jonjohnsonjr in #929
• Replace packages in APKINDEX with same version by @jonjohnsonjr in #930
• Use errgroup over github.com/korovkin/limiter by @jonjohnsonjr in #931
• Fix sbom loopvar issue by @jonjohnsonjr in #933
• Make BuildGuest more similar for Build and Test by @jonjohnsonjr in #932
• Allow execable shared objects if name has ".so." by @jonjohnsonjr in #934
• drop pkg/logger and use slog by @imjasonh in #919
• Make "unable to detect git commit" a debug message by @imjasonh in #936
• Allow vendored pkgconfig deps by @jonjohnsonjr in #935
• Audit the permissions of workflows. by @mattmoor in #937
• add e2e test that packages can be installed with apk by @imjasonh in #939
• Fail if unknown variable is used in substitution by @jonjohnsonjr in #942
• sort with key/values by @imjasonh in #943

Full Changelog: v0.5.5...v0.5.6

Release v0.5.5

What's Changed

• update release to add some clarification regarding the homebrew by @cpanato in #876
• Pull in go-apk with provider_priority ini fix. by @mattmoor in #878
• Set a default env var for GOMODCACHE. by @dlorenc in #880
• convert: sort packages alphabetically by @imjasonh in #889
• Mark update.manual as an optional field. by @wlynch in #877
• build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0 by @dependabot in #897
• build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.11 by @dependabot in #898
• build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #886
• build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.11.0 by @dependabot in #881
• build(deps): bump github.com/kubescape/go-git-url from 0.0.25 to 0.0.26 by @dependabot in #884
• build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 by @dependabot in #887
• build(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 by @dependabot in #893
• bump upload/download github actions by @cpanato in #900
• build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #883
• build(deps): bump google.golang.org/api from 0.152.0 to 0.154.0 by @dependabot in #892
• build(deps): bump github.com/lima-vm/lima from 0.18.0 to 0.19.1 by @dependabot in #895

Full Changelog: v0.5.4...v0.5.5