v0.37.7

What's Changed

• build(deps): bump github.com/anchore/grype from 0.92.2 to 0.94.0 by @dependabot in #1641

Full Changelog: v0.37.6...v0.37.7

v0.37.5

What's Changed

• build(deps): bump chainguard-dev/actions from 1.1.2 to 1.1.3 by @dependabot in #1631
• build(deps): bump github.com/go-git/go-git/v5 from 5.16.0 to 5.16.2 by @dependabot in #1630
• build(deps): bump the chainguard group across 1 directory with 2 updates by @dependabot in #1629
• build(deps): bump golang.org/x/time from 0.11.0 to 0.12.0 by @dependabot in #1628
• build(deps): bump cloud.google.com/go/storage from 1.54.0 to 1.55.0 by @dependabot in #1622
• build(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 by @dependabot in #1627
• build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot in #1626
• build(deps): bump the chainguard group across 1 directory with 2 updates by @dependabot in #1637
• build(deps): bump github.com/anchore/stereoscope from 0.1.4 to 0.1.5 by @dependabot in #1634
• build(deps): bump step-security/harden-runner from 2.12.0 to 2.12.1 by @dependabot in #1638
• build(deps): bump github.com/samber/lo from 1.50.0 to 1.51.0 by @dependabot in #1636
• feat: add deprecate notice to advisory commands in wolfictl by @rawlingsj in #1639
• build(deps): bump github.com/anchore/syft from 1.26.1 to 1.27.0 by @dependabot in #1635
• build(deps): bump chainguard-dev/actions from 1.1.3 to 1.2.0 by @dependabot in #1642
• build(deps): bump github.com/anchore/syft from 1.27.0 to 1.27.1 by @dependabot in #1640

Full Changelog: v0.37.4...v0.37.5

v0.37.4

What's Changed

• build(deps): bump chainguard-dev/actions from 1.1.1 to 1.1.2 by @dependabot in #1620
• build(deps): bump github.com/cli/go-gh/v2 from 2.12.0 to 2.12.1 by @dependabot in #1619
• build(deps): bump the chainguard group across 1 directory with 3 updates by @dependabot in #1621
• build(deps): bump github.com/anchore/syft from 1.25.1 to 1.26.1 by @dependabot in #1613
• build(deps): bump github.com/containerd/containerd/v2 from 2.0.4 to 2.0.5 by @dependabot in #1612
• build(deps): bump github.com/anchore/grype from 0.92.1 to 0.92.2 by @dependabot in #1611
• build(deps): bump chainguard.dev/melange from 0.26.4 to 0.26.5 in the chainguard group by @dependabot in #1623

Full Changelog: v0.37.3...v0.37.4

v0.37.3

What's Changed

• build(deps): bump chainguard-dev/actions from 1.1.0 to 1.1.1 by @dependabot in #1616
• Improve release workflow by @cpanato in #1606
• build(deps): bump chainguard-dev/actions from 1.0.9 to 1.1.1 by @dependabot in #1618

Full Changelog: v0.37.2...v0.37.3

v0.29.3

What's Changed

• build(deps): bump golangci/golangci-lint-action from 6.4.1 to 6.5.0 by @dependabot in #1451
• build(deps): bump step-security/harden-runner from 2.10.4 to 2.11.0 by @dependabot in #1452
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #1450
• build(deps): bump the chainguard group with 3 updates by @dependabot in #1449
• go.mod: upgrade to go 1.24.0 by @xnox in #1454
• bump melange v0.21.0 to pick up annotations by @rawlingsj in #1456
• build(deps): bump chainguard.dev/melange from 0.20.1 to 0.21.0 in the chainguard group by @dependabot in #1455
• fix(adv): extend event max age from 3 to 30 days by @luhring in #1457

Full Changelog: v0.29.2...v0.29.3

v0.29.1

What's Changed

• chore(adv): remove apostrophe because it breaks go get by @luhring in #1446

Full Changelog: v0.29.0...v0.29.1

v0.29.0

What's Changed

• bump golangci-lint by @cpanato in #1441
• feat(adv): rebase command and library functionality by @luhring in #1436
• feat(sbom,scan): wire up Anchore logging into our slog instance by @luhring in #1442
• build(deps): bump github.com/charmbracelet/bubbletea from 1.2.4 to 1.3.3 by @dependabot in #1443

Full Changelog: v0.28.2...v0.29.0

v0.28.2

What's Changed

• build(deps): bump chainguard.dev/melange from 0.19.4 to 0.19.5 in the chainguard group by @dependabot in #1439
• build(deps): bump golangci/golangci-lint-action from 6.3.0 to 6.3.2 by @dependabot in #1440

Full Changelog: v0.28.1...v0.28.2

v0.27.8

What's Changed

• build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.4 by @dependabot in #1403
• build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 in /.github/actions by @dependabot in #1405
• build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by @dependabot in #1404
• build(deps): bump chainguard.dev/melange from 0.19.0 to 0.19.2 in the chainguard group by @dependabot in #1406
• build(deps): bump cloud.google.com/go/storage from 1.49.0 to 1.50.0 by @dependabot in #1395
• build(deps): bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in #1397
• build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @dependabot in #1402
• build(deps): bump github.com/anchore/stereoscope from 0.0.12 to 0.0.13 by @dependabot in #1407
• build(deps): bump github.com/anchore/grype from 0.86.1 to 0.87.0 by @dependabot in #1410
• wolfictl: strip urls from key names when calling apk.GetRepositoryIndexes by @tcnghia in #1414
• Update apko to latest by @tcnghia in #1415

New Contributors

• @tcnghia made their first contribution in #1414

Full Changelog: v0.27.7...v0.27.8

v0.27.1

What's Changed

• build(deps): bump golang.org/x/term from 0.26.0 to 0.27.0 by @dependabot in #1353
• build(deps): bump github.com/chainguard-dev/yam from 0.2.3 to 0.2.4 in the chainguard group across 1 directory by @dependabot in #1355
• build(deps): bump golang.org/x/text from 0.20.0 to 0.21.0 by @dependabot in #1351
• build(deps): bump chainguard.dev/melange from 0.17.3 to 0.17.4 in the chainguard group by @dependabot in #1357
• build(deps): bump cloud.google.com/go/storage from 1.47.0 to 1.48.0 by @dependabot in #1358
• Drop wolfictl build and wolfictl test by @imjasonh in #1359
• fix(adv): validate that advisory IDs are CGA IDs by @luhring in #1350
• build(deps): bump github.com/anchore/grype from 0.85.0 to 0.86.0 by @dependabot in #1360
• fix wolfictl text check by @imjasonh in #1364
• build(deps): bump chainguard.dev/apko from 0.20.1 to 0.20.2 in the chainguard group by @dependabot in #1366
• build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 in /.github/actions by @dependabot in #1368
• build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by @dependabot in #1367
• build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 by @dependabot in #1369
• build(deps): bump the chainguard group across 1 directory with 2 updates by @dependabot in #1371

Full Changelog: v0.27.0...v0.27.1