v0.38.27

What's Changed

• build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1817

Full Changelog: v0.38.26...v0.38.27

v0.38.26

What's Changed

• bump.go: Ignore bot-generated CVE/GHSA comments by @sergiodj in #1813
• build(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 by @dependabot[bot] in #1815

New Contributors

• @sergiodj made their first contribution in #1813

Full Changelog: v0.38.25...v0.38.26

v0.38.25

What's Changed

• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 in /.github/actions by @dependabot[bot] in #1808
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #1807
• build(deps): bump step-security/harden-runner from 2.13.2 to 2.13.3 by @dependabot[bot] in #1806
• build(deps): bump octo-sts/action from 1.0.3 to 1.1.1 by @dependabot[bot] in #1814

Full Changelog: v0.38.24...v0.38.25

v0.38.24

What's Changed

• bug: update grype to fix java jar suffix issue by @kbsteere in #1809

New Contributors

• @kbsteere made their first contribution in #1809

Full Changelog: v0.38.23...v0.38.24

v0.38.23

What's Changed

• build(deps): bump actions/checkout from 5.0.1 to 6.0.0 in /.github/actions by @dependabot[bot] in #1799
• build(deps): bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #1798
• build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 by @dependabot[bot] in #1797
• build(deps): bump github.com/anchore/stereoscope from 0.1.9 to 0.1.13 by @dependabot[bot] in #1796
• build(deps): bump the chainguard group with 4 updates by @dependabot[bot] in #1795
• build(deps): bump github.com/containerd/containerd/v2 from 2.1.1 to 2.1.5 by @dependabot[bot] in #1784
• build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.2 by @dependabot[bot] in #1783

Full Changelog: v0.38.22...v0.38.23

v0.38.22

What's Changed

• build(deps): bump the chainguard group across 1 directory with 4 updates by @dependabot[bot] in #1763
• build(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in #1788
• build(deps): bump chainguard-dev/actions from 1.5.7 to 1.5.9 by @dependabot[bot] in #1789
• build(deps): bump actions/checkout from 5.0.0 to 5.0.1 in /.github/actions by @dependabot[bot] in #1790
• build(deps): bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #1791
• build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #1792
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #1793
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 in /.github/actions by @dependabot[bot] in #1794
• build(deps): bump github.com/lucasb-eyer/go-colorful from 1.2.0 to 1.3.0 by @dependabot[bot] in #1758
• build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.32.0 by @dependabot[bot] in #1773
• build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10 by @dependabot[bot] in #1750

Full Changelog: v0.38.21...v0.38.22

v0.38.21

What's Changed

• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #1781
• build(deps): bump chainguard-dev/actions from 1.5.6 to 1.5.7 by @dependabot[bot] in #1780
• build(deps): bump octo-sts/action from 1.0.1 to 1.0.3 by @dependabot[bot] in #1779
• feat(pkg/sbom/cpe.go): include gitlab-operator-fips in the exception for gitlab-* cve matching by @sanghanan in #1782

New Contributors

• @sanghanan made their first contribution in #1782

Full Changelog: v0.38.20...v0.38.21

v0.38.20

What's Changed

• lint: add linter for unused var-transform variables by @stevebeattie in #1777

New Contributors

• @stevebeattie made their first contribution in #1777

Full Changelog: v0.38.19...v0.38.20

v0.38.19

What's Changed

• build(deps): bump chainguard-dev/actions from 1.5.1 to 1.5.4 by @dependabot[bot] in #1775
• build(deps): bump chainguard-dev/actions from 1.5.4 to 1.5.6 by @dependabot[bot] in #1776

Full Changelog: v0.38.18...v0.38.19

v0.38.18

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.15 to 1.5.1 by @dependabot[bot] in #1768

Full Changelog: v0.38.17...v0.38.18