v0.5.2

Binary asset sha256 (threat-detect-linux-amd64): sha256:b4ecda6a8f1ee09913c40b58e5e9d3337d2173618d41b1bfdef9207e4e7959b9
Binary asset sha256 (threat-detect-linux-arm64): sha256:f6260a0f9ad72bcb67c7af19c4ce262ca34e2c3d5ccbf912832a8bd277200904
Binary asset sha256 (threat-detect-darwin-x64): sha256:7ed0a68ffbdd927eb2e25f862864602af289ad9cfc85f1385d83d4d52f11251c
Binary asset sha256 (threat-detect-darwin-arm64): sha256:0d4f41134a0839a496ca34f5fbbce44ba89ca0be6d681f960e7c06070b8b04c6

What's Changed

• chore(smokes): pin smoke locks to threat-detect v0.5.1 prerelease by @davidslater in #983
• test(conclude): stop workflow-command markers leaking as CI annotations by @davidslater in #984
• chore(workflows): recompile locks against gh-aw v0.87.8 by @davidslater in #993
• Pin GitHub Actions to commit SHAs by @github-security-bot in #1058
• Validate the release checksum contract for independent pinning by @davidslater in #1099
• chore(workflows): recompile locks against gh-aw v0.89.15 by @davidslater in #1106
• add lane stuff by @davidslater in #1107
• chore(deps): combine Dependabot action updates by @davidslater in #1108
• Preserve the Copilot threat detection result sink by @davidslater with @Copilot in #1105

New Contributors

• @github-security-bot made their first contribution in #1058

Full Changelog: v0.5.1...v0.5.2