v0.14.0

Added Features

• track git refs for go-install and go-build [PR #356 @wagoodman]
• support bun and tsc style github releases [PR #355 @wagoodman]

Bug Fixes

• build local go modules from inside the module directory [PR #357 @wagoodman]

Additional Changes

• bump go-make module and action together [PR #348 @wagoodman]
• add COPYRIGHT and CONTRIBUTORS.md files [PR #347 @wagoodman]

Dependencies

13 dependency changes (11 updated, 1 added, 1 removed). 6 vulnerabilities remediated.

🟢 Remediated (6)

• GHSA-259r-337f-4rfw (High) — github.com/klauspost/compress
• GO-2026-6603 (High) — golang.org/x/net
• GO-2026-6610 (High) — golang.org/x/net
• GO-2026-6611 (High) — golang.org/x/net
• GO-2026-6612 (Critical) — golang.org/x/net
• GO-2026-6617 (High) — golang.org/x/net

Updated (11 packages)

• github.com/chainguard-dev/yam v0.2.65 → v0.2.69
• github.com/go-git/go-billy/v5 v5.9.0 → v5.9.2
• github.com/go-git/go-git/v5 v5.19.3-0.4253959 → v5.19.3
• github.com/klauspost/compress v1.18.0 → v1.18.7 (🟢 remediated GHSA-259r-337f-4rfw)
• github.com/pjbgf/sha1cd v0.6.0 → v0.7.0
• golang.org/x/crypto v0.57.0 → v0.58.0
• golang.org/x/net v0.59.0 → v0.61.0 (🟢 remediated GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617)
• golang.org/x/sync v0.23.0 → v0.24.0
• golang.org/x/sys v0.48.0 → v0.49.0
• golang.org/x/term v0.46.0 → v0.47.0
• golang.org/x/text v0.42.0 → v0.43.0

Added (1 package)

• golang.org/x/mod v0.41.0

Removed (1 package)

• github.com/klauspost/cpuid/v2 v2.3.0

(Full Changelog)