2026-07-13 Release

What's Changed

• Fix collide on shared .partial extraction directory on POSIX by @Erik-White in #2036
• Sanitize DESTDIR on non-Windows platforms by @BillyONeal in #2039
• Update NPM dependencies. by @BillyONeal in #2047
• Support CURL_CA_BUNDLE like the curl command line tool by @Matus-p in #2042
• [curl] Add VCPKG_SSL_REVOKE_BEST_EFFORT to fix Schannel proxy revocation errors by @sdn9002 in #2043
• Change GITHUB_SERVER_URL to GITHUB_API_URL to allow submission of dependency graph data again by @rwindegger in #2056
• [z-applocal] Only log dependency deployment details with --verbose by @ricardoofnl in #2052
• Emit a PURL in generated SPDX SBOMs by @JamieMagee in #2049
• Add vcpkg print-usage + hueristic affirmation by @BillyONeal in #2045
• Update scripts SHA 2026-07-10. by @BillyONeal in #2061
• Do not abort when stdout is a broken pipe by @ricardoofnl in #2059
• Fix network isolation. by @BillyONeal in #2062

New Contributors

• @Erik-White made their first contribution in #2036
• @Matus-p made their first contribution in #2042
• @sdn9002 made their first contribution in #2043
• @rwindegger made their first contribution in #2056
• @ricardoofnl made their first contribution in #2052

Full Changelog: 2026-05-27...2026-07-13