0.49.0

What's Changed

• [tests][integration] Fix Nexus server spawning & misc by @eskultety in #1421
• gomod: Include proxy config in SBOM by @sswguo in #1179
• refactor(npm): move npm backend into package with main module by @mahmoudnasser1561 in #1320
• pip: fix missing separators in error messages by @Priyanshu-u07 in #1468
• Add GitHub Actions workflow linting using actionlint by @MonishPuttu in #1416
• fix(scm): strip credentials from username-only HTTPS remote URLs by @victor-adebowale-momodu in #1441
• [gomod] Bump the maximum supported version of Go 1.25 -> 1.26 by @eskultety in #1498
• pip: Replace pybuild-deps parsers with Hermeto ones by @slimreaper35 in #1475
• tests: dump effective hermeto test env variables by @ST3V1K in #1495

Full Changelog: 0.48.0...0.49.0