v0.3.3

Security rebuild: built with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). No functional code changes.

What's Changed

• chore(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 by @dependabot[bot] in #146
• Bump CodeQL version to 4.38.0 by @JaredHatfield in #147
• chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 by @dependabot[bot] in #149
• chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 by @dependabot[bot] in #152
• chore(deps): bump unitvectory-labs/kuberollouttrigger-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #151
• chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 by @dependabot[bot] in #150
• chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 by @dependabot[bot] in #148
• chore(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 by @dependabot[bot] in #155
• chore(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 by @dependabot[bot] in #156
• gitrepoforge: apply desired state for gologhttpbinary by @JaredHatfield in #157
• chore(deps): bump the codeql group with 2 updates by @dependabot[bot] in #158
• chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #159
• Add official govulncheck SARIF scanning by @JaredHatfield in #160
• Fix govulncheck SARIF upload failures by @JaredHatfield in #162
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #161
• Update Go version to v1.27.2 by @JaredHatfield in #163
• chore(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 by @dependabot[bot] in #166
• chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #165
• Update Go version to v1.27.2 by @JaredHatfield in #167

Full Changelog: v0.3.2...v0.3.3