v0.27.0-rc1

What's Changed

• fix(api/pipeline): use WithUser on middleware compile by @wass3rw3rk in #1272
• chore(lint): update linter rules by @ecrupper in #1265
• enhance(scm)!: support truly custom webhook address by @ecrupper in #1273
• enhance(compiler)!: return rules unmarshal errors by @ecrupper in #1270
• enhance(pagination)!: remove total results calculation for performance improvement by @ecrupper in #1254
• fix(deps): update all non-major dependencies by @renovate in #1269
• fix(database)!: adjust table types to match database/sql types by @ecrupper in #1260
• fix(linter): migrate to v2 due to breaking changes by @timhuynh94 in #1277
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.2 [security] by @renovate in #1276
• fix(deps): update module github.com/redis/go-redis/v9 to v9.7.3 [security] by @renovate in #1275
• enhance(testing): use a helper function to generate mock rows based on struct tags by @ecrupper in #1285
• chore(go): bump go to 1.24.2 by @wass3rw3rk in #1284
• fix(deps): update module github.com/google/go-github/v69 to v70 by @renovate in #1274
• chore(deps): update go-jose and x/net by @wass3rw3rk in #1286
• chore(deps): update jwx library to v3 by @ecrupper in #1287
• feat(repo)!: custom properties tracking for repository resource and OIDC claim field by @ecrupper in #1281
• fix(compiler): split validate into YAML and Pipeline by @ecrupper in #1268
• chore(deps): migrate urfave/cli from v2 to v3 by @ecrupper in #1290
• fix(deps): update module github.com/google/go-github/v70 to v71 by @renovate in #1289
• fix(deps): update all non-major dependencies by @renovate in #1288
• fix(lint): export returned structs from instantiation funcs and pass context to queue by @ecrupper in #1291
• fix(queue): remove validation of public key from flag set by @ecrupper in #1293
• fix(scm): drop /webhook from addr in update webhook config by @ecrupper in #1296
• fix(compiler): allow for private github.com templates by @ecrupper in #1299
• enhance(settings)!: make dashboard repo limit adjustable by platform admins by @ecrupper in #1303
• feat(ruleset): add eval logic by @JordanSussman in #1301
• fix(queue): validate addr in opts not flags by @ecrupper in #1305
• feat!: role mapping for vela permissions by @ecrupper in #1304
• enhance(github): use visibility field if present in toAPIRepo func by @ecrupper in #1306
• refactor(ruleset)!: improve match code efficiency and properly handle status by @ecrupper in #1255
• chore(deps): bump deps and address urfave v3 breaking changes by @ecrupper in #1307
• enhance: optimize source repos by @ecrupper in #1308
• enhance(log)!: add timestamp field by @wass3rw3rk in #1311
• fix(deps): update all non-major dependencies by @renovate in #1298
• fix(deps): update module github.com/google/go-github/v71 to v72 by @renovate in #1310
• fix(api): pass correct build into Gatekeep helper func by @ecrupper in #1313
• feat(secrets)!: add repository allowlist to org and shared secrets by @ecrupper in #1302
• chore(ci): enhance actions setup by @wass3r in #1312
• fix(scm): listen to custom_property_values event for live updates by @ecrupper in #1315
• fix(secret): use different query for empty allowlist by @ecrupper in #1316
• enhance(oidc)!: stringify int and bool claims by @ecrupper in #1318
• enhance(scm): verify owner access to repos prior to generating install token by @ecrupper in #1317
• fix(scm): set all repo info in custom props handler by @ecrupper in #1319
• chore(ci): use oidc for codecov by @wass3rw3rk in #1321
• feat!: support restart limits for pending builds based on queue length by @ecrupper in #1320
• chore(deps): update deps and fix gorm issue with WHERE map on joins by @ecrupper in #1322
• fix(deps): replace archived yaml and pkg/errors deps by @wass3r in #1323
• fix(deps): update all non-major dependencies by @renovate in #1314
• fix(deps): update module github.com/google/go-github/v72 to v73 by @renovate in #1324
• chore(config): migrate renovate config by @renovate in #1309
• chore(deps): bump go to 1.24.4 by @wass3rw3rk in #1326
• fix(deps): update go.starlark.net digest to d457b45 by @renovate in #1327

Full Changelog: v0.26.4...v0.27.0-rc1