v3.1.0

• feat: Add Sigstore signing support for container images (upstream redhat-actions#120)
• feat: Add podman remote mode support (upstream redhat-actions#122)
• feat: Add podman-args input for global podman flags (upstream redhat-actions#121)
• fix: Default tag fallback to latest (upstream redhat-actions#109)
• fix: Lowercase registry input for OCI compliance (upstream redhat-actions#110, redhat-actions#121)
• fix: Complete URL substring sanitization in getFullDockerImageName (upstream redhat-actions#124)
• fix: Preserve tag casing per OCI spec (upstream redhat-actions#121)
• ci: Add workflow to rebuild bundle on Dependabot PRs (upstream redhat-actions#128)
• ci: Bump redhat-actions/podman-login from v1 to v2 (upstream redhat-actions#127)
• ci: Add test job and native node test runner
• chore(deps): Bump eslint from 10.6.0 to 10.8.1
• chore(deps): Bump typescript-eslint/@typescript-eslint/* to 8.66.0
• chore(deps): Bump @types/node to 26.2.0

v3.0.3

• chore(deps): Bump undici from 6.27.0 to 6.28.0 (#2)
• chore(ci): Group Dependabot updates into single PRs per family (GitHub Actions, devcontainers, npm)
• chore(ci): Limit push-triggered workflows to main and add concurrency groups to avoid duplicate runs
• chore(deps): Bump js-yaml from 4.3.0 to 4.3.1 (#3)

v3.0.2

Full Changelog: v3.0.1...v3.0.2

v3.0.1

v3.0.1

• fix: CodeQL alert: incomplete URL substring sanitization in getFullDockerImageName

v3.0.0

v3.0.0

• chore(ci): Pinned all GitHub Actions by commit SHA with version comments
• chore(ci): Replaced ubuntu-latest with ubuntu-24.04 across all workflows
• chore(ci): Added explicit permissions: blocks to all workflows
• chore(ci): Replaced CRDA vulnerability scan with CodeQL, Trivy, and Scorecards workflows
• chore(ci): Added path-filtered job gating with dorny/paths-filter to all test workflows
• chore(ci): Removed Quay.io test workflows
• chore(ci): Switched GHCR pushes to repo-scoped namespace (ghcr.io/${{ github.repository }})
• chore: Switched from redhat-actions/common to aardbol-actions/common action references
• chore: Bumped @actions/core to v3, @actions/exec to v3, @actions/io to v3
• chore: Bumped ini to v7, eslint to v10, typescript to v6, @vercel/ncc to 0.44
• chore: Switched to @aardbol-actions scoped packages (action-io-generator, tsconfig)
• chore: Migrated from legacy .eslintrc.js to flat config (eslint.config.js)
• chore: Added SECURITY.md, .editorconfig, .pre-commit-config.yaml, .github/dependabot.yml
• chore: Updated tsconfig.json extends to @aardbol-actions/tsconfig
• chore: Set minimum Node engine to 24
• fix: fs.promises.rmdir deprecation in source