v0.5.0

What's Changed

• ci: add Go 1.27rc1 to test matrix by @mwaldheim in #34
• chore(deps): Bump docker/build-push-action from 6.16.0 to 7.3.0 by @dependabot[bot] in #28
• chore(deps): Bump docker/login-action from 3.4.0 to 4.2.0 by @dependabot[bot] in #29
• chore(deps): Bump sigstore/cosign-installer from 3.8.2 to 4.1.2 by @dependabot[bot] in #30
• chore(deps): Bump aquasecurity/trivy-action from 0.24.0 to 0.36.0 by @dependabot[bot] in #31
• feat: contributor recognition — first-time contributors and release MVP by @mwaldheim in #35
• fix(ci): extract semrel release tarball into a dedicated subdir by @mwaldheim in #37

Full Changelog: v0.4.1...v0.5.0