v1.4.2

Security rebuild: built with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). No functional code changes.

What's Changed

• chore(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 by @dependabot[bot] in #138
• Bump CodeQL version to 4.38.0 by @JaredHatfield in #140
• chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 by @dependabot[bot] in #144
• chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 by @dependabot[bot] in #142
• chore(deps): bump unitvectory-labs/kuberollouttrigger-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #143
• chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 by @dependabot[bot] in #141
• chore(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 by @dependabot[bot] in #148
• chore(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 by @dependabot[bot] in #145
• gitrepoforge: apply desired state for goenvecho by @JaredHatfield in #149
• chore(deps): bump the codeql group with 2 updates by @dependabot[bot] in #150
• chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #151
• Add official govulncheck SARIF scanning by @JaredHatfield in #152
• Fix govulncheck SARIF upload failures by @JaredHatfield in #154
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #153
• Update Go version to v1.27.2 by @JaredHatfield in #155
• chore(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 by @dependabot[bot] in #158
• chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #157
• Update Go version to v1.27.2 by @JaredHatfield in #159

Full Changelog: v1.4.1...v1.4.2