v0.13.1

Changelog

• e6f9cb2 Merge pull request #102 from frostyard/claude/nspawn-collaboration-021e66
• 95a4800 build(deps): bump github.com/frostyard/std from 0.4.0 to 0.5.0 in the gomod group (#95)
• e2cbed0 build(deps): bump github.com/godbus/dbus/v5 from 5.2.2 to 5.2.4 (#86)
• e617966 build(deps): bump github.com/klauspost/compress from v1.18.7 to v1.20.3 (#80)
• 69d0f84 build(deps): bump github.com/sigstore/sigstore-go from 1.3.0 to 1.4.0 (#87)
• d0baa8e build(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 (#85)
• ba20645 build(deps): require golang.org/x/net v0.62.0 (#96)
• 4f1c7e7 build: move to Go 1.27.3 and golangci-lint 2.15.0 (#88)
• 9d5e22c ci(deps): bump actions/setup-python from 7.0.0 to 7.1.0 (#82)
• 86d1b3a ci(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#84)
• eaf781d ci(deps): bump jdx/mise-action from 4.2.5 to 5.2.6 (#83)
• 5140285 ci(release): open a homebrew-tap pull request for the cask (#89)
• 1682e1e ci: call core's pr-triage workflow and move the risk list to levels (v2) (#98)
• 35fcde6 ci: group Dependabot version updates (#94)
• e480414 ci: skip release validation on Dependabot and fork pull requests (#100)
• f2a3300 docs(agents): never replace a shared tool binary to make a gate pass (#90)
• cabcd51 docs: record cloud-init Phase 0 findings and correct the provisioning contract (#101)
• fe437db fix(deps): build with Go 1.27.4 for its security fixes (#103)
• 9ec9ec8 fix(images): build from recipes that carry the machine fixes
• 122b6c7 refactor: share the owned menu entry scan (#92)
• 24f2a1a refactor: simplify the guest reads of app add (#93)