v0.10.0

What's Changed

• fix(ci): ncc in-job so lockfile PRs do not need committed dist by @DerekRoberts in #238
• docs: drop syntax and fork guides from the suite README by @DerekRoberts in #239
• chore(deps): lock file maintenance by @renovate[bot] in #236
• feat(workflow-notifier): comment on one open issue per title by @DerekRoberts in #241
• feat(image-tracker): opt-in tags input with guarded latest by @DerekRoberts in #244
• feat(scan-url): action to scan URL with ZAP and Nuclei by @DerekRoberts in #245
• chore(test-and-analyse): point package.json repository at bcgov/actions by @DerekRoberts in #250
• docs: move assistant rules to tool-neutral AGENTS.md by @DerekRoberts in #254
• chore(deps): update dependency bcgov/renovate-config to v2026.9.26 by @renovate[bot] in #257
• chore(deps): update sonarsource/sonarqube-scan-action digest to ba9859e by @renovate[bot] in #256
• feat(pr-validate): lint workflows with actionlint by @DerekRoberts in #259
• fix(test): expect the PR for the labeled image by @DerekRoberts in #260
• test(diff-triggers): assert against a fixture commit, not the PR's changes by @DerekRoberts in #255
• chore(pr-description-add): point package.json repository at bcgov/actions by @DerekRoberts in #261
• refactor(test-and-analyse): run the reporter on the Actions Node 24 runtime by @DerekRoberts in #262
• test(scan-url): scan quickstart frontend and backend together by @DerekRoberts in #263
• chore(deps): lock file maintenance by @renovate[bot] in #267
• chore(deps): update sonarsource/sonarqube-scan-action digest to d209202 by @renovate[bot] in #268
• ci(test): run test suite on pull requests only by @DerekRoberts in #275
• feat(builder): publish arm64 images as their own package by @DerekRoberts in #274
• feat(test-and-analyse): optional Semgrep scan by @DerekRoberts in #266
• feat(ghcr-cleanup): delete unused images by @DerekRoberts in #276
• docs(agents): README usage examples follow quickstart-openshift by @DerekRoberts in #277
• fix(pr-validate): accept ubuntu-26.04 and caller runner labels in actionlint by @DerekRoberts in #278
• docs: migration guides for retiring builder and test-and-analyse repos by @DerekRoberts in #279
• docs: drop deprecation wording from the replacement actions by @DerekRoberts in #282
• chore(deps): lock file maintenance by @renovate[bot] in #284
• feat!: pre-v1.0 cleanup (diff-triggers, test-and-analyse docs, remove sysdig-monitor) by @DerekRoberts in #286
• docs: drop experimental notes; sysdig-monitor is stable by @DerekRoberts in #287
• ci: skip action tests on Markdown-only changes by @DerekRoberts in #288
• ci: add Validate Results job to pr-validate by @DerekRoberts in #289
• feat(get-pr): restore get-pr as a drop-in for bcgov/action-get-pr by @DerekRoberts in #290
• ci: keep dist off main and add it only on release commits by @DerekRoberts in #294

Full Changelog: v0.7.1...v0.10.0