Release v0.14.1

What's Changed

• Make apko dot show errors by @jonjohnsonjr in #1024
• build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #978
• build(deps): bump github.com/sigstore/cosign/v2 from 2.2.1 to 2.2.3 by @dependabot in #1026
• build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.4.0 by @dependabot in #1025
• build(deps): bump github/codeql-action from 2.22.6 to 3.23.2 by @dependabot in #1018
• build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.19.0 by @dependabot in #1021
• build(deps): bump github.com/chainguard-dev/clog from 1.2.3-0.20240116182827-04bee692f7a8 to 1.3.0 by @dependabot in #1019
• use charm logger by @imjasonh in #1028
• Plumb ctx through daemon package by @jonjohnsonjr in #1029
• Cancel context on interrupt signal by @jonjohnsonjr in #1030
• move some logs to debug, avoid duplicate work/logs by @imjasonh in #1034
• Preserve APK hardlinks by @jonjohnsonjr in #1038
• Make sure we clean up after ourselves by @jonjohnsonjr in #1040
• Allow apko dot to be cancelled by @jonjohnsonjr in #1031
• Drop creating group log by @jonjohnsonjr in #1045
• Store checksum of apko-config in the lock-file to detect changes in origin. by @sfc-gh-ptabor in #1012
• build(deps): bump github.com/chainguard-dev/clog from 1.3.0 to 1.3.1 by @dependabot in #1033
• build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in #1035
• build(deps): bump github/codeql-action from 3.23.2 to 3.24.5 by @dependabot in #1048
• build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in #1041
• build(deps): bump go.opentelemetry.io/otel from 1.22.0 to 1.24.0 by @dependabot in #1049
• Bump go-apk by @jonjohnsonjr in #1050
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1055
• build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in #1053
• Bump go-apk by @jonjohnsonjr in #1059
• build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in #1058
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #1061
• build(deps): bump k8s.io/apimachinery from 0.28.3 to 0.29.2 by @dependabot in #1043
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #1064
• Add more spans around potentially slow ops by @jonjohnsonjr in #1065
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #1066
• build(deps): bump github/codeql-action from 3.24.7 to 3.24.8 by @dependabot in #1067
• Add Harden Runner audit configs by @jedsalazar in #1062
• build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #1072
• ignore Files when generating SBOMs by @imjasonh in #1073
• build(deps): bump github.com/charmbracelet/log from 0.3.2-0.20240205220859-7a3834f9b367 to 0.4.0 by @dependabot in #1074
• build(deps): bump github/codeql-action from 3.24.8 to 3.24.9 by @dependabot in #1075
• build(deps): bump sigs.k8s.io/release-utils from 0.7.7 to 0.8.0 by @dependabot in #1078
• build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in #1077
• build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #1085
• build(deps): bump go.opentelemetry.io/otel from 1.24.0 to 1.25.0 by @dependabot in #1084
• build(deps): bump sigs.k8s.io/release-utils from 0.8.0 to 0.8.1 by @dependabot in #1083
• build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #1081
• build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 by @dependabot in #1080
• Prepare testdata for "apko on top of base image" by @sfc-gh-mhazy in #1076
• build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #1087
• build(deps): bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @dependabot in #1088
• build(deps): bump github/codeql-action from 3.24.10 to 3.25.0 by @dependabot in #1089
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 in the go_modules group by @dependabot in #1094
• build(deps): bump github/codeql-action from 3.25.0 to 3.25.1 by @dependabot in #1092
• feat(user): Allow overriding the default shell by @EyeCantCU in #1097
• Base image support in build and lock by @sfc-gh-mhazy in #1086
• build(deps): bump github/codeql-action from 3.25.1 to 3.25.2 by @dependabot in #1099
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1098
• build(deps): bump github/codeql-action from 3.25.2 to 3.25.3 by @dependabot in #1103
• build(deps): bump go.opentelemetry.io/otel from 1.25.0 to 1.26.0 by @dependabot in #1102
• build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in #1101
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1100
• spdx: remove more mentions of files by @imjasonh in #1095
• build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @dependabot in #1104
• build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #1105
• build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #1106
• fix: remove default supplier for index SBOMs by @imjasonh in #1110

New Contributors

• @jedsalazar made their first contribution in #1062
• @sfc-gh-mhazy made their first contribution in #1076
• @EyeCantCU made their first contribution in #1097

Full Changelog: v0.14.0...v0.14.1