Release v0.37.3

What's Changed

• build(deps): bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 in the gomod group by @dependabot[bot] in #2283
• git pipeline: fix cherry-picking multiple commits by @stevebeattie in #2284

Full Changelog: v0.37.2...v0.37.3

Release v0.37.2

What's Changed

• build(deps): bump chainguard.dev/apko from 0.30.31 to 0.30.34 in the gomod group by @dependabot[bot] in #2281

Full Changelog: v0.37.1...v0.37.2

Release v0.37.1

What's Changed

• build(deps): bump step-security/harden-runner from 2.13.3 to 2.14.0 in the actions group by @dependabot[bot] in #2269
• build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #2270
• build(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 by @dependabot[bot] in #2272
• build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #2273
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.38.0 to 1.39.0 by @dependabot[bot] in #2275
• build(deps): bump the gomod group across 1 directory with 5 updates by @dependabot[bot] in #2279
• build(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 by @dependabot[bot] in #2274
• build(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 by @dependabot[bot] in #2276
• pkg: Emit appCpe stanza in package notes metadata by @xnox in #2280

Full Changelog: v0.37.0...v0.37.1

Release v0.37.0

What's Changed

• feat: add TESTING environment variable feature gate for microvm-init by @antitree in #2264
• linter:tempdir: Consider directories too by @cjwatson in #2239

New Contributors

• @antitree made their first contribution in #2264
• @cjwatson made their first contribution in #2239

Full Changelog: v0.36.0...v0.37.0

Release v0.36.0

What's Changed

• git-checkout: Invoke git fetch with --unshallow by @sergiodj in #2258
• feat: add test resource configuration and CLI flags by @javacruft in #2244
• build(deps): bump the gomod group with 3 updates by @dependabot[bot] in #2259
• build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 by @dependabot[bot] in #2260
• build(deps): bump the actions group with 3 updates by @dependabot[bot] in #2262
• build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0 by @dependabot[bot] in #2261
• fix(bump & cache): Do not fail when main pipeline is not present by @EyeCantCU in #2263

Full Changelog: v0.35.1...v0.36.0

Release v0.35.1

What's Changed

• build(deps): bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #2253
• build(deps): bump docker/setup-docker-action from 4.5.0 to 4.6.0 in the actions group by @dependabot[bot] in #2246
• build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.1.1+incompatible by @dependabot[bot] in #2248
• build: derive logger from incoming context by @wlynch in #2255
• rebuild: move impl into func by @wlynch in #2256
• Convert instances of new logger creation to clog.FromContext by @wlynch in #2257

Full Changelog: v0.35.0...v0.35.1

Release v0.35.0

What's Changed

• feat: Add sparse-checkout support with multiple directory support by @kbsteere in #2254

Full Changelog: v0.34.3...v0.35.0

Release v0.34.3

What's Changed

• Refactor Build to generate build options from flag struct. by @wlynch in #2250

Full Changelog: v0.34.2...v0.34.3

Release v0.34.2

What's Changed

• build(deps): bump the gomod group with 4 updates by @dependabot[bot] in #2242
• build(deps): bump the actions group with 2 updates by @dependabot[bot] in #2240
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #2241
• sca: scan linux kernels for version strings by @a-crate in #2237
• fix(sca): handle broken shebang properly by @wojciechka in #2245
• spdx: Refactor SPDX SBOM generation to return SBOM directly by @wlynch in #2251
• sca: scan linux modules for vermagic by @a-crate in #2249

Full Changelog: v0.34.1...v0.34.2

Release v0.34.1

What's Changed

• Refactor sbom generation into its own package. by @wlynch in #2218
• Refactor build, rebuild, test commands for flag parsing. by @wlynch in #2243

Full Changelog: v0.34.0...v0.34.1