v0.28.0

What's Changed

• enhance(oidc): add jti claim by @ecrupper in #1356
• feat!: remove buildkite dependency by @ecrupper in #1352
• fix(compiler): prevent same-name stages in pipeline configs by @ecrupper in #1360
• fix(api): yaml expand on stage pipelines by @wass3r in #1363
• enhance(api)!: accept installation tokens for MustWrite and MustRead auth using caching by @ecrupper in #1373
• fix(mock): add refresh install token mock by @ecrupper in #1374
• fix(scm): proper expiration set to worker by @ecrupper in #1380
• fix(deps): bump aws-sdk to v2 by @wass3r in #1365
• fix(database)!: use transactions tied to repo counters for hook and build to avoid collisions by @ecrupper in #1353
• fix(scm): fall back on github info if role map missing entry by @ecrupper in #1382
• fix(deps): update module github.com/expr-lang/expr to v1.17.7 [security] by @renovate[bot] in #1379
• chore(build): reduce binary size by @wass3r in #1377
• chore: bump go-github to v81 by @ecrupper in #1383
• fix(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate[bot] in #1370
• feat!: platform setting for enabling/disabling Vela secrets by @ecrupper in #1384
• fix(scm): add deployments as a default perm for deploy events by @ecrupper in #1386
• feat(events)!: support merge queue for GitHub SCM by @ecrupper in #1343
• fix(compiler): add origin secrets to pipeline validate func by @ecrupper in #1388
• enhance(app): add PR and Issue perms for install token by @ecrupper in #1389
• enhance(compiler)!: do not add duplicate origin secrets using name as key by @ecrupper in #1390
• chore(lint): update codebase for new linter rules by @ecrupper in #1393
• feat(artifacts): Object storage integration and artifacts key by @KellyMerrick in #1385
• feat: leverage checks API for CI statuses with app installation by @ecrupper in #1392
• fix(deps): update module github.com/google/go-github/v81 to v83 by @renovate[bot] in #1391
• fix(scm): add merge_group to events set by @ecrupper in #1394
• chore(deps): upgrade minor deps and apply some go fix changes by @ecrupper in #1395
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #1371
• chore(deps): update github/codeql-action action to v4 by @renovate[bot] in #1358
• chore(deps): update actions/github-script action to v8 by @renovate[bot] in #1349
• chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #1348
• fix(artifacts): add upload to storage service by @timhuynh94 in #1397
• fix(deps): update all non-major dependencies by @renovate[bot] in #1396
• fix(scm): override details link to point to vela build by @ecrupper in #1400
• fix(artifacts): switch from sts to presigned put by @timhuynh94 in #1401
• fix(build): reset build number for restarts by @ecrupper in #1404
• fix(revert): use commit status API only by @ecrupper in #1405
• refactor(compiler): move script gen outside of compiler and into container by @ecrupper in #1403
• fix(env): remove id request url from compiler by @ecrupper in #1408
• fix(perm): allow for GETs when secrets are disabled by @ecrupper in #1406
• fix(deps): update all non-major dependencies by @renovate[bot] in #1398
• fix(deps): update module github.com/google/go-github/v83 to v84 by @renovate[bot] in #1399
• chore(deps): update docker/login-action action to v4 by @renovate[bot] in #1402
• chore(deps): update docker/metadata-action action to v6 by @renovate[bot] in #1407
• chore(deps): update docker/build-push-action action to v7 by @renovate[bot] in #1409
• chore(deps): bump go to 1.26.1 by @wass3rw3rk in #1410
• fix(webhook): generate token for status update on failed compile by @ecrupper in #1412
• fix(deps): update all non-major dependencies by @renovate[bot] in #1411
• fix: add clearer error message for post-subst unmarshal issues by @ecrupper in #1415
• fix(merge_group): set branch to base ref instead of head ref by @ecrupper in #1414
• fix(db): only update fields when necessary for repo hot path writes by @ecrupper in #1416
• fix(deps): update all non-major dependencies by @renovate[bot] in #1413
• fix(admin): add logs for secret toggles by @wass3rw3rk in #1419
• enhance: separate clone/build SCM token from status token by @ecrupper in #1420
• fix(deps): update all non-major dependencies by @renovate[bot] in #1417
• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #1418
• chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in #1421
• fix(webhook): use webhook parsed build info on compile failures for status by @ecrupper in #1422
• fix: use install token if available for changeset call by @ecrupper in #1424
• fix(deps): update all non-major dependencies by @renovate[bot] in #1423
• chore(deps): update codecov/codecov-action action to v6 by @renovate[bot] in #1425
• fix(util): use filepath matching for allowlist by @ecrupper in #1426

Full Changelog: v0.27.5...v0.28.0