v0.9.18

What's Changed

• chore(deps): bump which from 7.0.3 to 8.0.0 by @dependabot in #457
• fix: upload-sarif comment formatting by @RoyalOughtness in #465
• chore: bump cosign to 2.5.1 by @RoyalOughtness in #464
• chore(deps): bump yaml-rust2 from 0.10.2 to 0.10.3 by @dependabot in #463
• chore(deps): bump clap_complete from 4.5.52 to 4.5.54 by @dependabot in #462
• chore(deps): bump clap from 4.5.39 to 4.5.40 by @dependabot in #461
• chore(deps): bump bon from 3.6.3 to 3.6.4 by @dependabot in #460
• chore(deps): bump reqwest from 0.12.19 to 0.12.20 by @dependabot in #459
• chore: bump cosign to 2.5.2 by @RoyalOughtness in #466
• fix: Allow repos that don't have a files/ directory by @gmpinder in #469
• chore(deps): bump clap_complete_nushell from 4.5.6 to 4.5.7 by @dependabot in #475
• chore(deps): bump shadow-rs from 1.1.1 to 1.2.0 by @dependabot in #474
• chore(deps): bump astral-sh/setup-uv from 6.1.0 to 6.3.0 by @dependabot in #473
• chore(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot in #472
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.12.0 to 1.13.0 by @dependabot in #471
• chore(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in #470
• feat: Add the ability to set environment variables for module calls by @gmpinder in #442
• chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot in #479
• chore(deps): bump github/codeql-action from 3.29.0 to 3.29.1 by @dependabot in #478
• chore(deps): bump astral-sh/setup-uv from 6.3.0 to 6.3.1 by @dependabot in #477
• chore(deps): bump indexmap from 2.9.0 to 2.10.0 by @dependabot in #476

Full Changelog: v0.9.17...v0.9.18