v0.28.0

What's Changed

• docs: stop role and environment create examples promising an editor by @tas50 in #292
• fix: refuse a --file whose name doesn't match the positional name by @tas50 in #294
• fix: reject unknown fields in --file like the editor does by @tas50 in #293
• fix: confine golden generator fixture paths to testdata by @tas50 in #295
• build(deps): bump github/codeql-action/upload-sarif from 4.39.1 to 4.39.3 in the github-actions group by @dependabot[bot] in #297
• build(deps): bump hashicorp/aws from 6.71.0 to 6.72.0 in /integration/terraform by @dependabot[bot] in #299
• build(deps): bump github.com/cinc-project/cinc-server-ng from 0.17.0 to 0.18.0 in /integration in the integration-dependencies group by @dependabot[bot] in #298
• fix: parse semverse versions without nested regex quantifiers by @tas50 in #296
• ci: fail clearly when DOCS_BOT_TOKEN is missing or expired by @tas50 in #300
• chore: update dependencies by @tas50 in #301
• feat(policy): push fetches only the cookbooks the server lacks by @tas50 in #302

Full Changelog: v0.27.1...v0.28.0