v0.6.0

Changelog

• a8c0562 Bump actions/setup-go from 6.4.0 to 6.5.0
• 60c72be Bump actions/setup-go from 6.5.0 to 7.0.0
• df3ad91 Bump docker/build-push-action from 7.2.0 to 7.3.0
• ea4eea4 Bump docker/login-action from 4.2.0 to 4.3.0
• df997e5 Bump docker/login-action from 4.3.0 to 4.4.0
• 383d208 Bump docker/metadata-action from 6.1.0 to 6.2.0
• 44041d0 Bump git-pkgs archives, enrichment, purl, registries, vulns (#215)
• 41ef279 Bump github.com/git-pkgs/enrichment from 0.4.1 to 0.6.0
• 96e1132 Bump github.com/git-pkgs/purl from 0.1.13 to 0.1.14
• 13ae397 Bump github.com/git-pkgs/vers from 0.2.6 to 0.3.0
• 5ae5eab Bump github.com/git-pkgs/vulns from 0.1.6 to 0.2.0
• ec3cc35 Bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1
• cdf0756 Bump golang from 1.26.4-alpine to 1.26.5-alpine
• 1a18dd4 Bump golang.org/x/net to v0.56.0
• f7b5dd2 Bump golang.org/x/sync from 0.21.0 to 0.22.0
• 9042269 Bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#216)
• defe1ec Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
• c3f1577 Bump modernc.org/sqlite from 1.53.0 to 1.54.0
• 81d19b7 Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
• d9b7a30 Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0
• cdbd1a9 Canonicalize cooldown lookup PURLs to match config
• 787b76d Fix Composer 404 on minified metadata and add debug logging
• be15a0f Fix cooldown overrides for scoped package PURLs
• 0ae6306 Make upstream HTTP timeout configurable
• 98150ea Name empty path validation subtest
• 5b959d1 Preserve Go proxy fallback for missing modules
• 4146596 Validate filesystem storage paths
• cf37411 fix(upstream): honor npm and Cargo overrides (#200)
• 532e492 fix: proper handling of upstream registry 404s (#209)