v0.21.3

What's Changed

• Adds local file support to the crane index subcommand by @edwardthiele in #2223
• migrate to github.com/moby/moby modules by @thaJeztah in #2228
• Bump the go-deps group across 4 directories with 7 updates by @dependabot[bot] in #2233
• Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by @dependabot[bot] in #2220
• mutate: reject path traversal and symlink escape in Extract by @KevinZhao in #2227
• tarball: detect symlink cycles in extractFileFromTar by @vnykmshr in #2232
• bump golang to 1.25.7 by @Subserial in #2236

New Contributors

• @edwardthiele made their first contribution in #2223
• @thaJeztah made their first contribution in #2228
• @KevinZhao made their first contribution in #2227
• @vnykmshr made their first contribution in #2232

Full Changelog: v0.21.2...v0.21.3