v0.9.0

What's Changed

• fix(ci): ncc in-job so lockfile PRs do not need committed dist by @DerekRoberts in #238
• docs: drop syntax and fork guides from the suite README by @DerekRoberts in #239
• chore(deps): lock file maintenance by @renovate[bot] in #236
• feat(workflow-notifier): comment on one open issue per title by @DerekRoberts in #241
• feat(image-tracker): opt-in tags input with guarded latest by @DerekRoberts in #244
• feat(scan-url): action to scan URL with ZAP and Nuclei by @DerekRoberts in #245
• chore(test-and-analyse): point package.json repository at bcgov/actions by @DerekRoberts in #250
• docs: move assistant rules to tool-neutral AGENTS.md by @DerekRoberts in #254
• chore(deps): update dependency bcgov/renovate-config to v2026.9.26 by @renovate[bot] in #257
• chore(deps): update sonarsource/sonarqube-scan-action digest to ba9859e by @renovate[bot] in #256
• feat(pr-validate): lint workflows with actionlint by @DerekRoberts in #259
• fix(test): expect the PR for the labeled image by @DerekRoberts in #260
• test(diff-triggers): assert against a fixture commit, not the PR's changes by @DerekRoberts in #255
• chore(pr-description-add): point package.json repository at bcgov/actions by @DerekRoberts in #261
• refactor(test-and-analyse): run the reporter on the Actions Node 24 runtime by @DerekRoberts in #262
• test(scan-url): scan quickstart frontend and backend together by @DerekRoberts in #263
• chore(deps): lock file maintenance by @renovate[bot] in #267
• chore(deps): update sonarsource/sonarqube-scan-action digest to d209202 by @renovate[bot] in #268
• ci(test): run test suite on pull requests only by @DerekRoberts in #275
• feat(builder): publish arm64 images as their own package by @DerekRoberts in #274
• feat(test-and-analyse): optional Semgrep scan by @DerekRoberts in #266
• feat(ghcr-cleanup): delete unused images by @DerekRoberts in #276
• docs(agents): README usage examples follow quickstart-openshift by @DerekRoberts in #277
• fix(pr-validate): accept ubuntu-26.04 and caller runner labels in actionlint by @DerekRoberts in #278

Full Changelog: v0.7.1...v0.9.0