0.48.0

What's Changed

• Report outdated Cargo.lock in permissive mode by @slimreaper35 in #1301
• Add experimental package manager support with annotations by @sswguo in #1249
• cli: split --version and package-managers output by @ST3V1K in #1278
• fix(sbom): coerce empty Component version to None by @ST3V1K in #1291
• feat(hack): add script to update generic lockfile checksums by @ST3V1K in #1287
• docs(cargo): fix incorrect CLI option name by @farhann-saleem in #1330
• Changes to integration test enviroment variables by @ST3V1K in #1283
• docs: fix garbled text in usage.md and stale link in dependency_confusion.md by @farhann-saleem in #1338
• chore: Add code of conduct by @a-ovchinnikov in #1319
• Add support for Python 3.14 by @slimreaper35 in #1340
• docs: update Go 1.21+ toolchain section by @KrishnaKapoor612 in #1345
• Handle Rust dependencies for Python sdists if Cargo.lock is missing by @slimreaper35 in #1323
• docs(gomod): add missing GOPROXY to generate-env example by @harshitbansal184507 in #1359
• pip: drop legacy cachito_hash support by @derasdf in #1360
• ci(docs): deploy docs from published release tags by @mahmoudnasser1561 in #1303
• update test data for gomod/with-deps test migration by @derasdf in #1362
• tests: integration: mount source dir with shared SELinux context by @eskultety in #1363
• tests(integration): drop automatic test-exclusion logic by @sammy200-ui in #1354
• fix(gomod): preserve symlink names in toolchain detection by @farhann-saleem in #1373
• Proxy support in yarn by @a-ovchinnikov in #1327
• fix(cargo): wrap generic subprocess errors in PackageManagerError by @farhann-saleem in #1377
• chore: update to integration tests hashes by @a-ovchinnikov in #1380
• Add local Nexus proxy mode for integration tests by @taylormadore in #1318
• Replace dict with Mapping for download files parameter by @slimreaper35 in #1378
• chore: update to integration tests hashes by @derasdf in #1386
• fix(npm): handle missing version field in workspace lockfiles by @farhann-saleem in #1383
• Parallelized integration tests by @ST3V1K in #1296
• fix(npm): raise InvalidLockfileFormat on malformed JSON for consistency with yarn by @farhann-saleem in #1385
• Fix SBOM hash to use creationInfo instance instead of class by @MonishPuttu in #1423
• chore: update to integration tests hashes by @derasdf in #1425
• Fix duplicate imports from the same module by @slimreaper35 in #1426
• gomod: Remove huge debug log for workspace module packages by @slimreaper35 in #1433
• pyproject.toml: pytest: Set test data retention to 1 by @eskultety in #1417
• fix(pip): support URL fragments in wheel detection by @notjivi in #1391
• fix(cargo): preserve existing config when vendoring sources by @Harsh-2005d in #1436
• fix(pip): use path.name instead of name in _sdist_preference by @Harsh-2005d in #1446
• fix: propagate exist_ok in write_file_tree by @aryanchalotraa in #1445

Full Changelog: 0.47.0...0.48.0