What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.15 to 1.5.1 by @dependabot[bot] in #1768

Full Changelog: v0.38.17...v0.38.18

What's Changed

• build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in #1766
• build(deps): bump chainguard-dev/actions from 1.4.14 to 1.4.15 by @dependabot[bot] in #1767

Full Changelog: v0.38.16...v0.38.17

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.13 to 1.4.14 by @dependabot[bot] in #1762
• Expose the DB built age as a func by @tcnghia in #1765

Full Changelog: v0.38.15...v0.38.16

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.12 to 1.4.13 by @dependabot[bot] in #1747
• build(deps): bump the chainguard group with 3 updates by @dependabot[bot] in #1746
• build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9 by @dependabot[bot] in #1745
• build(deps): bump octo-sts/action from 1.0.0 to 1.0.1 by @dependabot[bot] in #1744
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #1749
• build(deps): bump github.com/anchore/grype from 0.98.0 to 0.99.1 by @dependabot[bot] in #1748
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #1752
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 in /.github/actions by @dependabot[bot] in #1753
• feat(pkg/sbom/cpe.go): Add exception for gitlab-operator to avoid matching as gitlab-* package and gitlab product by @philroche in #1755
• build(deps): bump github.com/charmbracelet/bubbletea from 1.3.6 to 1.3.7 by @dependabot[bot] in #1756

Full Changelog: v0.38.14...v0.38.15

What's Changed

• build(deps): bump the chainguard group with 4 updates by @dependabot[bot] in #1737
• build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #1738
• build(deps): bump cloud.google.com/go/storage from 1.56.0 to 1.56.1 by @dependabot[bot] in #1732
• build(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in #1742

Full Changelog: v0.38.13...v0.38.14

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.11 to 1.4.12 by @dependabot[bot] in #1733
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #1734
• chore(sbom): resolve warning for directory source by @luhring in #1736

Full Changelog: v0.38.12...v0.38.13

What's Changed

• build(deps): bump chainguard-dev/actions from 1.4.9 to 1.4.10 by @dependabot[bot] in #1728
• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1727
• build(deps): bump chainguard-dev/actions from 1.4.10 to 1.4.11 by @dependabot[bot] in #1729
• build(deps): bump github.com/chainguard-dev/advisory-schema from 0.37.17 to 0.37.18 in the chainguard group by @dependabot[bot] in #1730
• build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 by @dependabot[bot] in #1731

Full Changelog: v0.38.11...v0.38.12

What's Changed

• withdraw: add option to read from file by @javacruft in #1716
• build(deps): bump github.com/anchore/syft from 1.29.1 to 1.30.0 by @dependabot[bot] in #1718
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 in /.github/actions by @dependabot[bot] in #1721
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1717
• build(deps): bump the chainguard group across 1 directory with 4 updates by @dependabot[bot] in #1722
• build(deps): bump chainguard-dev/actions from 1.4.8 to 1.4.9 by @dependabot[bot] in #1720
• build(deps): bump github.com/anchore/grype from 0.97.1 to 0.97.2 by @dependabot[bot] in #1723
• build(deps): bump github.com/anchore/syft from 1.30.0 to 1.31.0 by @dependabot[bot] in #1724
• build(deps): bump github.com/anchore/grype from 0.97.2 to 0.98.0 by @dependabot[bot] in #1725
• build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @dependabot[bot] in #1726
• build(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2 by @dependabot[bot] in #1714

New Contributors

• @javacruft made their first contribution in #1716

Full Changelog: v0.38.10...v0.38.11

What's Changed

• build(deps): bump the chainguard group with 2 updates by @dependabot[bot] in #1710
• build(deps): bump chainguard-dev/actions from 1.4.7 to 1.4.8 by @dependabot[bot] in #1709
• build(deps): bump sigs.k8s.io/release-utils from 0.12.0 to 0.12.1 by @dependabot[bot] in #1715

Full Changelog: v0.38.9...v0.38.10

What's Changed

• build(deps): bump github.com/anchore/grype from 0.97.0 to 0.97.1 by @dependabot[bot] in #1708

Full Changelog: v0.38.8...v0.38.9