v0.3.7

What's Changed

• Pin github/codeql-action to SHA by @JaredHatfield in #189
• gitrepoforge: onboard lockboxkms by @JaredHatfield in #190
• chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #193
• chore(deps): bump google.golang.org/api from 0.285.0 to 0.286.0 by @dependabot[bot] in #192
• chore(deps): bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in #191
• chore(deps): bump actions/cache from 6.0.0 to 6.1.0 by @dependabot[bot] in #194
• chore(deps): bump google.golang.org/api from 0.286.0 to 0.287.0 by @dependabot[bot] in #197
• chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #195
• chore(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot[bot] in #196
• gitrepoforge: apply desired state for lockboxkms by @JaredHatfield in #198
• Update Go version to v1.26.5 by @JaredHatfield in #199
• chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 by @dependabot[bot] in #202
• chore(deps): bump google.golang.org/api from 0.287.0 to 0.287.1 by @dependabot[bot] in #200
• Bump CodeQL version to 4.37.0 by @JaredHatfield in #205
• gitrepoforge: apply desired state for lockboxkms by @JaredHatfield in #206
• chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #209
• chore(deps): bump google.golang.org/api from 0.287.1 to 0.288.0 by @dependabot[bot] in #207
• Bump CodeQL version to 4.37.1 by @JaredHatfield in #210
• chore(deps): bump cloud.google.com/go/kms from 1.31.0 to 1.32.0 by @dependabot[bot] in #208
• chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #211
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #213
• chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 by @dependabot[bot] in #214
• Bump CodeQL version to 4.37.3 by @JaredHatfield in #218
• chore(deps): bump google.golang.org/api from 0.288.0 to 0.289.0 by @dependabot[bot] in #212
• chore(deps): bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot[bot] in #221
• Add ChromaDB repo indexer GitHub Action by @JaredHatfield in #222
• fix: set persist-credentials: false in checkout step by @JaredHatfield in #223
• chore(deps): bump google.golang.org/api from 0.289.0 to 0.291.0 by @dependabot[bot] in #220
• chore(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 by @dependabot[bot] in #227
• Bump CodeQL version to 4.37.6 by @JaredHatfield in #228
• chore: add semgrep GitHub action by @JaredHatfield in #229
• fix: correct semgrep GitHub action workflow by @JaredHatfield in #230
• chore(deps): bump google.golang.org/api from 0.291.0 to 0.292.0 by @dependabot[bot] in #224
• chore(deps): bump cloud.google.com/go/kms from 1.32.0 to 1.33.0 by @dependabot[bot] in #219
• gitrepoforge: apply desired state for lockboxkms by @JaredHatfield in #231
• chore(deps): bump UnitVectorY-Labs/chromadb-repo-indexer from 1.1.0 to 1.1.1 by @dependabot[bot] in #236
• chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #235
• chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 by @dependabot[bot] in #233
• chore(deps): bump google.golang.org/api from 0.292.0 to 0.293.0 by @dependabot[bot] in #232
• chore(deps): bump UnitVectorY-Labs/chromadb-repo-indexer from 1.1.1 to 1.2.0 by @dependabot[bot] in #237
• chore(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 by @dependabot[bot] in #238
• chore(deps): bump golang from 1.26.5 to 1.26.6 by @dependabot[bot] in #239
• chore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 by @dependabot[bot] in #243
• chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #242
• Bump CodeQL version to 4.37.7 by @JaredHatfield in #244
• chore(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 by @dependabot[bot] in #247
• Bump CodeQL version to 4.37.9 by @JaredHatfield in #249
• Update Go version to v1.27.1 by @JaredHatfield in #253

Full Changelog: v0.3.6...v0.3.7