v1.6.2

What's Changed

• Chore(deps): Bump actions/setup-go from 6 to 7 by @dependabot[bot] in #3633
• migration: error instead of panic when an installation has no claims by @AruneshDwivedi in #3627
• Chore(deps): Bump the go-dependencies group with 3 updates by @dependabot[bot] in #3632
• Add local debugging tips to CONTRIBUTING by @kichristensen in #3634
• Document reaching Docker host from a bundle by @kichristensen in #3635
• Resolve dependency to existing installation (inspect only) by @kichristensen in #3631
• Report layer copy progress by @kichristensen in #3636
• Detect credential value changes on apply by @kichristensen in #3637
• Skip image push when digest already matches by @kichristensen in #3638
• Add error handling guide to CONTRIBUTING by @kichristensen in #3643
• Bump go to 1.26.5 by @kichristensen in #3644
• Chore(deps): Bump docker/login-action from 4.4.0 to 4.5.1 by @dependabot[bot] in #3645
• Evaluate bundle def against interface by @kichristensen in #3639
• Validate dependency param/cred mappings during lint by @kichristensen in #3641
• Chore(deps): Bump the go-dependencies group with 2 updates by @dependabot[bot] in #3646
• Guard delete of in-use credential/parameter set by @kichristensen in #3642
• V1.6.0 release blog post by @kichristensen in #3647
• Validate dependency template vars by @kichristensen in #3648
• Clarify review/merge requirements by @kichristensen in #3652
• Merge base+declared interface fully by @kichristensen in #3649
• Warn on unmapped required dependency params by @kichristensen in #3651
• Chore(deps): Bump docker/login-action from 4.5.1 to 4.6.0 by @dependabot[bot] in #3654
• Chore(deps): Bump the go-dependencies group with 5 updates by @dependabot[bot] in #3655
• Delete temp image tag after push by @kichristensen in #3653
• Hard-fail bad v2 dependency wiring by @kichristensen in #3656
• Chore(deps): Bump the go-dependencies group with 12 updates by @dependabot[bot] in #3659
• Add porter-112 lint: block dep outputs in action steps by @kichristensen in #3658
• Chore(deps): Bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 by @dependabot[bot] in #3663
• Chore(deps): Bump the go-dependencies group with 3 updates by @dependabot[bot] in #3662
• Don't hide sensitive output persist failures by @kichristensen in #3661
• Chore(deps): Bump github.com/moby/go-archive from 0.2.1 to 0.3.0 by @dependabot[bot] in #3666
• Do not validate config file schema version for internal plugins by @erikced in #3665
• Define workflow resource by @kichristensen in #3664
• Chore(deps): Bump the go-dependencies group with 3 updates by @dependabot[bot] in #3668
• Bump go to 1.26.6 by @kichristensen in #3669
• Cache init checks across cli runs by @kichristensen in #3667
• Chore(deps): Bump the go-dependencies group with 11 updates by @dependabot[bot] in #3673
• Add declarative bundles page by @kichristensen in #3672
• Enforce mixin and plugin naming rules by @kichristensen in #3671
• Track v2 dependency installation references by @kichristensen in #3670
• Note mixin-sdk-go as future skeletor replacement by @kichristensen in #3674
• Order archive metadata before blobs, skip extraction if already published by @kichristensen in #3675
• Clarify WorkflowStatus is ExecutionPlan by @kichristensen in #3676
• Guard archive peek against path traversal by @kichristensen in #3679
• Retry transient download errors by @kichristensen in #3680
• Build workflow stages from dep graph by @kichristensen in #3677
• Chore(deps): Bump the go-dependencies group with 3 updates by @dependabot[bot] in #3683
• Persist installation interface hash on status by @kichristensen in #3681
• Determine workflow job actions per node by @kichristensen in #3682
• Build job installation records by @kichristensen in #3684
• docs: remove duplicate 'the' in connect-to-registry guide by @mrchatam in #3685
• docs: remove duplicate 'a' in kubernetes-mixin design doc by @mrchatam in #3686
• Create pending runs for jobs by @kichristensen in #3689
• Add semver reference page by @kichristensen in #3692
• Read go version from go.mod by @kichristensen in #3694
• Wire dependency params/creds to execution plan by @kichristensen in #3690
• Chore(deps): Bump github.com/containerd/containerd/v2 from 2.3.4 to 2.3.6 by @dependabot[bot] in #3691
• Fix native macOS installer architecture detection and failure handling by @mstephenholl in #3697
• Skip config secrets for plugin/mixin cmds by @kichristensen in #3696
• Bump x/crypto to v0.56.0 by @kichristensen in #3699
• Verify traces reach telemetry endpoint by @kichristensen in #3702
• Pass telemetry config and trace into the bundle by @kichristensen in #3703
• Mask sensitive values in trace data by @kichristensen in #3705
• Remove image-relocation dependency by @kichristensen in #3706
• Chore(deps): Bump the go-dependencies group across 1 directory with 28 updates by @dependabot[bot] in #3707
• Chore(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #3710
• Chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #3711
• Record runnable plugin command in trace by @kichristensen in #3708
• Print error stack trace in debug mode by @kichristensen in #3709
• chore(deps): bump go to 1.26.9 and x/net to 0.60.0 by @kichristensen in #3713
• Chore(deps): Bump the go-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #3714
• Add dockerfileMode instead of experimental by @kichristensen in #3716
• Support directory param and output type by @kichristensen in #3715
• Chore(deps): Bump the go-dependencies group with 2 updates by @dependabot[bot] in #3717
• fix(ci): support ubuntu-26.04 runners by @kichristensen in #3722
• Chore(deps): Bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #3724
• Create sets from bundle with --reference by @kichristensen in #3718
• Chore(deps): Bump the go-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #3723
• ci: trust loopback registries in smoke template by @kichristensen in #3726
• fix(mongodb_docker): extend startup wait, add diagnostics by @kichristensen in #3727
• Expose PORTER_VERSION to bundles by @cvas22 in #3719
• Chore(deps): Bump docker/login-action from 4.7.0 to 4.8.0 by @dependabot[bot] in #3728
• Chore(deps): Bump the go-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #3729
• ci: build once, shard integration tests by @kichristensen in #3730

New Contributors

• @AruneshDwivedi made their first contribution in #3627
• @mrchatam made their first contribution in #3685
• @mstephenholl made their first contribution in #3697
• @cvas22 made their first contribution in #3719

Full Changelog: v1.6.1...v1.6.2