Release v0.11.0

What's Changed

• refactor Keygen opts to a struct by @imjasonh in #1364
• better SCA e2e tests, fix no-provides bug by @imjasonh in #1369
• drop lima runner by @imjasonh in #1373
• remove defunct reference to k8s runner by @imjasonh in #1374
• fix(pipelines): Use contextdir instead of destdir in a few places by @EyeCantCU in #1376
• fix(cargo/build): test for non-zero length by @jalmeroth in #1333
• don't SCA-generate so: or pc: provides for libs not directly in lib dirs by @imjasonh in #1372
• Add update.exclude-reason field. by @wlynch in #1371
• Apply variables to workdir within a range by @jdolitsky in #1383

New Contributors

• @jalmeroth made their first contribution in #1333

Full Changelog: v0.10.4...v0.11.0

Release v0.10.4

What's Changed

• build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 by @dependabot in #1347
• build(deps): bump google.golang.org/api from 0.186.0 to 0.187.0 by @dependabot in #1346
• build(deps): bump chainguard.dev/apko from 0.15.1-0.20240702145404-20f57d2660cb to 0.16.0 by @dependabot in #1348
• build(deps): bump cloud.google.com/go/storage from 1.42.0 to 1.43.0 by @dependabot in #1350
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.27.0 to 1.28.0 by @dependabot in #1349
• build(deps): bump the actions group with 2 updates by @dependabot in #1354
• var-transforms: support var transform substitions across runtimes and… by @ajayk in #1356
• python/import - fix a bug in 'imports', do not require specifying python by @smoser in #1357
• build(deps): bump the gomod group with 2 updates by @dependabot in #1355
• python/import pipeline - find python3.7, python3.8, python3.9 by @smoser in #1358
• python/pipelines - resolve symlink to full path. by @smoser in #1360
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in the go_modules group by @dependabot in #1361
• Fix env overrides for interactive builds by @jonjohnsonjr in #1362
• expose keygen options by @k4leung4 in #1363

Full Changelog: v0.10.3...v0.10.4

Release v0.10.3

What's Changed

• Updates for go/dependabot/golangci-lint by @cpanato in #1345

Full Changelog: v0.10.2...v0.10.3

Release v0.10.2

What's Changed

• goreleaser pipeline: --skip flag refactor by @hectorj2f in #1344
• build(deps): bump github.com/chainguard-dev/yam from 0.0.9 to 0.0.10 by @dependabot in #1336
• build(deps): bump google.golang.org/api from 0.185.0 to 0.186.0 by @dependabot in #1337

New Contributors

• @hectorj2f made their first contribution in #1344

Full Changelog: v0.10.1...v0.10.2

Release v0.10.1

What's Changed

• python/import pipeline allow setting python binary by @pnasrat in #1300
• Add opts to make-install pipeline by @jonjohnsonjr in #1330
• Fail on invalid pipeline inputs by @jonjohnsonjr in #1329
• Fix ${{host.triplet.rust}} default value by @jonjohnsonjr in #1331
• wolfictl bump : handled mangled vars in updateGitCheckout tags by @ajayk in #1334
• Support multiple python imports by @krishjainx in #1332
• build(deps): bump dagger.io/dagger from 0.11.6 to 0.11.9 by @dependabot in #1339
• build(deps): bump github.com/docker/cli from 26.1.4+incompatible to 27.0.3+incompatible by @dependabot in #1338
• build(deps): bump github.com/docker/docker from 27.0.0+incompatible to 27.0.3+incompatible by @dependabot in #1335
• Revert "Use current user's ID when building via Docker" by @joshrwolf in #1340
• use apko Authenticator by @imjasonh in #1341
• support var-transforms in subpackage names by @imjasonh in #1343

Full Changelog: v0.10.0...v0.10.1

Release v0.10.0

What's Changed

• git-checkout: fix recurse='true' does nothing by @xnox in #1310
• Pipelines should inherit workdir from parents by @jonjohnsonjr in #1312
• compile: Fix miscompilation of subpkg tests by @jonjohnsonjr in #1313
• Use current user's ID when building via Docker by @egibs in #1298
• lint: support linting existence of info dirs by @imjasonh in #1315
• rewrite linting by @imjasonh in #1322
• feat - add flag to go/build to run go mod tidy by @ritster in #1303
• Fix/e2e tests by @smoser in #1314
• Restore signalcontext by @jonjohnsonjr in #1323
• fix stupid bug in linter logging by @imjasonh in #1324
• enforce some more lint checks by @imjasonh in #1325
• convert some Infofs to Warnfs by @imjasonh in #1326
• Add flag to preserve original PyPI URIs by @egibs in #1281
• Add git-cherry-pick pipeline by @krishjainx in #1278
• debug: Populate history file via mounts by @jonjohnsonjr in #1328

deps

• build(deps): bump github.com/chainguard-dev/clog from 1.3.1 to 1.4.0 by @dependabot in #1316
• build(deps): bump ko-build/setup-ko from 0.6 to 0.7 by @dependabot in #1320
• build(deps): bump github.com/github/go-spdx/v2 from 2.2.0 to 2.3.1 by @dependabot in #1317
• build(deps): bump google.golang.org/api from 0.184.0 to 0.185.0 by @dependabot in #1318
• build(deps): bump github.com/chainguard-dev/yam from 0.0.8 to 0.0.9 by @dependabot in #1319

New Contributors

• @egibs made their first contribution in #1298
• @ritster made their first contribution in #1303

Full Changelog: v0.9.0...v0.10.0

Release v0.9.0

What's Changed

• Quote issues when evaluating the depth condition by @dakaneye in #1268
• build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.11 to 2.5.14 in the go_modules group by @dependabot in #1271
• test: Drop seemingly useless mkdir -p by @jonjohnsonjr in #1276
• Remove dead tarfilter code by @jonjohnsonjr in #1279
• Add build flag to override host libc flavor by @jonjohnsonjr in #1270
• Separate compilation from execution by @jonjohnsonjr in #1267
• Remove build.PipelineBuild as a concept by @jonjohnsonjr in #1280
• Remove ability to set logging policy by @krishjainx in #1274
• unbreak build at head from log policy removal by @k4leung4 in #1288
• build(deps): bump chainguard.dev/apko from 0.14.8 to 0.14.9 by @dependabot in #1282
• build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 by @dependabot in #1286
• build(deps): bump k8s.io/apimachinery from 0.30.1 to 0.30.2 by @dependabot in #1287
• build(deps): bump google.golang.org/api from 0.183.0 to 0.184.0 by @dependabot in #1285
• build(deps): bump cloud.google.com/go/storage from 1.41.0 to 1.42.0 by @dependabot in #1284
• Populate history for --interactive builds by @jonjohnsonjr in #1289
• chore(autoconf/configure): Generate configuration with autoreconf when configuration doesn't exist by @EyeCantCU in #1290
• Check for nil everywhere in Compile by @jonjohnsonjr in #1292
• stop using deprecated flags for goreleaser by @k4leung4 in #1269
• git-checkout - try harder if getting hash from tag fails. by @smoser in #1277
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #1293
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #1294
• build(deps): bump github.com/chainguard-dev/yam from 0.0.7 to 0.0.8 by @dependabot in #1295
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #1296
• Fix missing commit in ranged subpackages by @jonjohnsonjr in #1304
• melange numpy test include python-3.12 by @pnasrat in #1308
• add go/bump as a default pipeline by @willswire in #1058
• Bump apko to v0.15.0 by @jonjohnsonjr in #1309

New Contributors

• @pnasrat made their first contribution in #1308
• @willswire made their first contribution in #1058

Full Changelog: v0.8.6...v0.9.0

Release v0.8.6

What's Changed

• Remove depth option from git clone if inputs.depth is set to -1 by @dakaneye in #1260
• fix: error out when pipeline contains with but no uses by @krishjainx in #1264
• Add ${{build.goarch}} substitution by @jonjohnsonjr in #1242
• build(deps): bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #1266

New Contributors

• @dakaneye made their first contribution in #1260

Full Changelog: v0.8.5...v0.8.6

Release v0.8.5

What's Changed

• go/build: remove subpackage input by @xnox in #1258
• Add a new property to maven pombump pipeline that defaults to pom.xml and allows an override by @krishjainx in #1259

New Contributors

• @krishjainx made their first contribution in #1259

Full Changelog: v0.8.4...v0.8.5

Release v0.8.4

What's Changed

• Add --env-file to melange test by @jonjohnsonjr in #1239
• Speed up presubmit by @jonjohnsonjr in #1240
• Drop version from .PKGINFO by @jonjohnsonjr in #1241
• build(deps): bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #1246
• build(deps): bump dagger.io/dagger from 0.11.4 to 0.11.6 by @dependabot in #1248
• build(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 by @dependabot in #1247
• support HTTP auth by @imjasonh in #1250
• build(deps): bump chainguard.dev/apko from 0.14.3 to 0.14.7 by @dependabot in #1249
• build(deps): bump golang.org/x/text from 0.15.0 to 0.16.0 by @dependabot in #1251
• build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #1252
• build(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 by @dependabot in #1253
• Drop go-apk to pull in faster pkginfo access by @jonjohnsonjr in #1256
• build(deps): bump chainguard.dev/apko from 0.14.8-0.20240605215612-95e33993764a to 0.14.8 by @dependabot in #1257

Full Changelog: v0.8.3...v0.8.4