Release v0.19.0

What's Changed

• build(deps): bump github.com/invopop/jsonschema from 0.12.0 to 0.13.0 by @dependabot in #1736
• build(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.1 by @dependabot in #1734
• build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 by @dependabot in #1735
• build(deps): bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0 by @dependabot in #1727
• go/build pipeline: Move go mod tidy after cd to modroot dir AND Validate existence of go.mod in modroot by @debasishbsws in #1716
• build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0 by @dependabot in #1733
• minor go cleanup and some performance improvements by @ajayk in #1730
• feat: add support to add and drop linux capabilities by @maxgio92 in #1702

Full Changelog: v0.18.3...v0.19.0

Release v0.18.3

What's Changed

• build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 in the actions group by @dependabot in #1723

Full Changelog: v0.18.2...v0.18.3

Release v0.18.2

What's Changed

• build(deps): bump the gomod group with 2 updates by @dependabot in #1712
• bump: double-quote bumped version strings, avoid trailing newline by @imjasonh in #1714
• fix(qemu): improve logging, make connection check less spammy by @89luca89 in #1701
• Fix numpy-test to work across python 3.12 to 3.13 transition. by @smoser in #1715
• build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 in the actions group by @dependabot in #1713
• build(deps): bump the gomod group with 2 updates by @dependabot in #1719
• build(deps): bump google.golang.org/api from 0.211.0 to 0.214.0 by @dependabot in #1720
• build(deps): bump cloud.google.com/go/storage from 1.48.0 to 1.49.0 by @dependabot in #1721
• update apko to 0.22.4 by @k4leung4 in #1722

Full Changelog: v0.18.1...v0.18.2

Release v0.18.1

What's Changed

• remove unnecessary util.Dedup and util.RightJoinMap methods by @imjasonh in #1705

Full Changelog: v0.18.0...v0.18.1

Release v0.18.0

What's Changed

• feat(pipelines/cargo): add support for rustflags by @maxgio92 in #1698
• pipelines/split/dev - grab files in /usr/share/cmake by @smoser in #1693
• sign: switch to SHA2-256 signature by default by @xnox in #1706
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.32.0 to 1.33.0 by @dependabot in #1709
• build(deps): bump dagger.io/dagger from 0.15.0 to 0.15.1 in the gomod group by @dependabot in #1707
• build(deps): bump chainguard.dev/apko from 0.21.0 to 0.22.1 by @dependabot in #1711

Full Changelog: v0.17.7...v0.18.0

Release v0.17.7

What's Changed

• build(deps): bump dagger.io/dagger from 0.14.0 to 0.15.0 by @dependabot in #1694
• Handle WalkDir errors by @jonjohnsonjr in #1696
• Bump apko and fix the thing I broke by @jonjohnsonjr in #1697

Full Changelog: v0.17.6...v0.17.7

Release v0.17.6

What's Changed

• Bump apko to v0.20.2 by @jonjohnsonjr in #1692

Full Changelog: v0.17.5...v0.17.6

Release v0.17.5

What's Changed

• build(deps): bump cloud.google.com/go/storage from 1.47.0 to 1.48.0 by @dependabot in #1684
• drop spammy slog attributes by @imjasonh in #1691

Full Changelog: v0.17.4...v0.17.5

Release v0.17.4

What's Changed

• melange/update block: provide config option to indicate that automated pull requests should be merged in order rather than superseding and closing previous unmerged PRs by @rawlingsj in #1681
• build(deps): bump github.com/chainguard-dev/yam from 0.2.3 to 0.2.4 in the gomod group by @dependabot in #1682
• build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0 by @dependabot in #1689
• build(deps): bump github.com/chainguard-dev/clog from 1.5.1-0.20240811185937-4c523ae4593f to 1.5.1 by @dependabot in #1688

Full Changelog: v0.17.3...v0.17.4

Release v0.17.3

What's Changed

• fix(sca): Revert recent SCA changes for Ruby by @EyeCantCU in #1679

Full Changelog: v0.17.2...v0.17.3