v0.9.36

What's Changed

• chore: bump cosign to 3.0.6 by @RoyalOughtness in #748
• fix: update rust-overlay to a more recent version in flake.lock by @esteve in #745
• chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #741
• chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #742
• chore(deps): bump regclient/actions from c1f0aebc5919e68a6eb528c75c0410dc48fa392e to 7c7e6f032ce752dc58585af38e242635f4e7cd8e by @dependabot[bot] in #740
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.15.2 to 1.15.4 by @dependabot[bot] in #739
• chore(deps): bump which from 8.0.0 to 8.0.2 by @dependabot[bot] in #738
• chore(deps): bump nix from 0.30.1 to 0.31.2 by @dependabot[bot] in #736
• chore(deps): bump clap from 4.5.57 to 4.5.60 by @dependabot[bot] in #735
• chore(deps): bump anyhow from 1.0.101 to 1.0.102 by @dependabot[bot] in #734
• chore(deps): bump github/codeql-action from 4.31.9 to 4.32.4 by @dependabot[bot] in #722
• fix(recipe): change serde alias to rename by @alexandregv in #751
• fix: Actually enable squash by @gmpinder in #765
• fix: use 0700 permissions for all temporary directories by @HastD in #766
• fix: Allow container_image_reference to be optional by @gmpinder in #764
• chore(deps): bump rand from 0.9.2 to 0.9.3 in the cargo group across 1 directory by @dependabot[bot] in #761
• chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #759
• chore(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in #758
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.1 by @dependabot[bot] in #757
• chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #756
• chore(deps): bump semver from 1.0.27 to 1.0.28 by @dependabot[bot] in #755
• chore(deps): bump uuid from 1.21.0 to 1.23.1 by @dependabot[bot] in #754
• chore(deps): bump yaml-rust2 from 0.10.4 to 0.11.0 by @dependabot[bot] in #753
• chore(deps): bump lazy-regex from 3.5.1 to 3.6.0 by @dependabot[bot] in #752
• chore(deps): bump extractions/setup-just from 3.1.0 to 4.0.0 by @dependabot[bot] in #760
• chore(deps): bump rustls-webpki from 0.103.10 to 0.103.13 in the cargo group across 1 directory by @dependabot[bot] in #767
• fix: --pull=always, not --pull=true by @HastD in #768
• chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #778
• chore(deps): bump signal-hook from 0.4.3 to 0.4.4 by @dependabot[bot] in #777
• chore(deps): bump tempfile from 3.24.0 to 3.27.0 by @dependabot[bot] in #776
• chore(deps): bump regclient/actions from 7c7e6f032ce752dc58585af38e242635f4e7cd8e to f3c6d87835906c175eb6ccfc18b348b69bb447e7 by @dependabot[bot] in #775
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #774
• chore(deps): bump DeterminateSystems/nix-installer-action from 21 to 22 by @dependabot[bot] in #772
• chore(deps): bump astral-sh/setup-uv from 7.3.1 to 8.1.0 by @dependabot[bot] in #771
• chore(deps): bump clap_complete from 4.6.0 to 4.6.5 by @dependabot[bot] in #770
• chore(deps): bump open from 5.3.3 to 5.3.5 by @dependabot[bot] in #769
• feat: Add environment variable expansion in top-level recipe fields by @gmpinder in #749
• chore(deps): bump regclient/actions from f3c6d87835906c175eb6ccfc18b348b69bb447e7 to c70ad64367908075211b10dcd2ab9fad4bfa1816 by @dependabot[bot] in #787
• chore(deps): bump rayon from 1.11.0 to 1.12.0 by @dependabot[bot] in #782
• chore(deps): bump github/codeql-action from 4.35.2 to 4.35.5 by @dependabot[bot] in #785
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.15.4 to 1.16.1 by @dependabot[bot] in #786
• chore(deps): bump clap from 4.6.0 to 4.6.1 by @dependabot[bot] in #784
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.2 by @dependabot[bot] in #783
• chore(deps): bump yaml-rust2 from 0.10.4 to 0.11.0 by @dependabot[bot] in #781
• chore(deps): bump clap_complete_nushell from 4.5.10 to 4.6.0 by @dependabot[bot] in #780
• feat(recipe): Recipe V2 by @gmpinder in #789
• Fix keylessImage signing by @MaxHerrmannSVA in #801
• chore: bump cosign to v3.1.1 by @RoyalOughtness in #805
• feat: support rechunking using Chunkah by @HastD in #790
• feat: pull with retries before building by @HastD in #809

New Contributors

• @alexandregv made their first contribution in #751
• @MaxHerrmannSVA made their first contribution in #801

Full Changelog: v0.9.35...v0.9.36