v0.2.0

New client features

The terminal client has undergone a substantial update and UI facelift; among the new features are usability improvements to several existing commands, a new minder profile edit for updating profiles live, entity get/list/register/delete commands for generic entity types, and a new mindev test command for automated testing of Minder ruletypes:

• feat: enhance table UI by @DharunMR in #6291
• Additional info delete ruletype by @DharunMR in #6273
• Feat : Added a flag to ruletype subcommand by @DharunMR in #6287
• feat: add interactive 'minder profile edit' command by @DharunMR in #6355
• feat(cli): improve evaluation reasoning output using existing fields by @sachin9058 in #6417
• Add generic entity commands by @evankanderson in #6451
• feat(ruletest): add Starlark-based test runner for rule types by @krrish175-byte in #6508
• feat(ruletest): implement starlark eval built-in and assert module by @krrish175-byte in #6521
• feat(ruletest): add eval core unit tests and clean up builtins by @krrish175-byte in #6524
• feat(ruletest): add read_file and txtar built-ins by @krrish175-byte in #6530
• chore: minor cleanups from ruletest review by @krrish175-byte in #6540
• feat(ruletest): implement HTTP mocking layer for rule testing framework by @krrish175-byte in #6550
• feat: implement mindev test cli command and rule loading by name by @krrish175-byte in #6551
• build: add mindev to goreleaser release workflow by @krrish175-byte in #6572
• feat: introduce datasources mocking in ruletest framework by @krrish175-byte in #6575
• feat(dev): add JUnit XML output to mindev test and ruletest cleanups by @krrish175-byte in #6577

Client bugfixes

The client also received a number of fixes, and a testing mechanism for changes to the output format:

• Add pre-validation for repo register command to prevent unnecessary auth flow by @sachin9058 in #6249
• Fix/quickstart unregistered user by @theycallmeaabie in #6271
• Duplicate repo name by @DharunMR in #6276
• Implement Isolated, Deterministic Test Suite for ruletype CLI Subcommands by @DharunMR in #6286
• fix(cli): avoid duplicate error output in ExitNicelyOnError by @isha822 in #6366
• refactor(cli): extract catalog loading logic from quickstart command by @sachin9058 in #6353
• CLI : added test files for repo command by @DharunMR in #6414
• fix(cli): address review feedback and stabilize ruletype test suite by @DharunMR in #6386
• Hide quickstart command from help, etc until it is better-functioning by @evankanderson in #6405
• added test files for profile and profile/status command by @DharunMR in #6420

New server features

Note that server features are generally available in the container images on a rolling basis; features such as reading structured rule outputs via the API, provider metadata, entity list improvements, GitLab enrollment improvements, and version status have all been deployed live:

• Add with_output_detail to EvalResultsService by @krrish175-byte in #6207
• feat(inventory): add evaluation_outputs table for persisting structur… by @dakshhhhh16 in #6211
• Feature/include outputs list endpoints 6254 by @dakshhhhh16 in #6295
• feat(inventory): wire include_outputs for GetEvaluationHistory endpoint by @dakshhhhh16 in #6255
• Add provider class metadata listing by @Jaydeep869 in #6327
• feat: support generic entity instance in selectors by @Jaydeep869 in #6321
• feat: add /version endpoint and global Minder-Version header by @DharunMR in #6358
• Populate entityInfo for all entity types in ListEvaluationResults by @krrish175-byte in #6361
• Fix token enroll for GitLab by @evankanderson in #6478
• Fix GitLab Service Account enrollment by @evankanderson in #6479

Server migrations

If you are running your own Minder service, the following migrations will occur when you deploy the corresponding container image:

• Add migration to convert all remaining timestamps to timestamptz by @evankanderson with @Copilot in #6139
• feat: store and detect Rego language version per rule type (Phase 1) by @dakshhhhh16 in #6317
• Migrate test policies to Rego v1 by @dakshhhhh16 in #6462
• test Rego v1 dual-parse pipeline by @dakshhhhh16 in #6553
• feat: warn when accepting Rego V0 policies by @dakshhhhh16 in #6554

Server bug fixes

• fix(metrics): swap incorrectly assigned entity and profile duration m… by @theycallmeaabie in #6270
• fix: avoid silently aborting profile init on single entity marshalling error by @AftAb-25 in #6331
• Include rule name in PR branch name to avoid collisions by @krrish175-byte in #6320
• fix: clean up OpenFGA role assignments during project deletion by @AftAb-25 in #6346
• Handle GitHub rate limits with specialized error and Prometheus metrics by @krrish175-byte in #6306
• fix: prevent panic when Trusty API call fails mid-flight by @alimx07 in #6383
• fix: make ReplaceAllProperties atomic by @kazuhidelee in #6326
• Allow digit-prefixed repository owners by @w3lld1 in #6591
• fix: gracefully skip invalid repositories in webhooks instead of aborting by @AftAb-25 in #6360
• Clean up profile handling, avoid doubling eval status in ListEvaluationResults by @evankanderson in #6500
• fix(actions): treat EvalStatusError as remediation off by @codejasleen in #6501
• Simplify CreateProfile, fix bug filling list of profiles by @evankanderson in #6499
• Improve debugging of clock drift in GitHub Auth dance by @evankanderson in #6523
• fix: prevent cache poisoning by force-resetting worktree on failed PR remediation by @AftAb-25 in #6368
• fix(oci): resolve artifact created time from image config by @somaz94 in #6520

Documentation

• Create Security Insights file by @minder-custcodian[bot] in #6184
• docs: update discussion forum link in CONTRIBUTING.md by @PrinceAsiedu in #6188
• docs: update API documentation links formatting in README by @PrinceAsiedu in #6190
• fix favicon by @intelligent-ears in #6300
• docs: add community meeting and governance links by @intelligent-ears in #6307
• docs: add documentation for customizing email templates by @Gitjay11 in #6313
• docs: deprecate quickstart documentation and remove CLI references by @sachin9058 in #6341
• docs: address maintainer feedback on email template customization by @Gitjay11 in #6354
• docs: add testing setup instructions to CONTRIBUTING.md by @intelligent-ears in #6421
• docs: add GitLab OAuth setup and provider enrollment guide by @intelligent-ears in #6477
• docs: add rule testing framework design document by @krrish175-byte in #6492
• docs: GitLab provider enrollment and repository registration guides by @intelligent-ears in #6534

Server-side maintenance, bugfixes, and test improvements

• Fix engine handler context handling by @evankanderson in #6173
• Test(vulncheck): add unit tests for vulnerability reports by @dakshhhhh16 in #6209
• Test(util): Add unit tests for rest curl generator by @dakshhhhh16 in #6210
• Add VEX / ignore mitigations for CVE-2026-34040 by @evankanderson in #6243
• test(projects/features): add unit tests for feature flag helpers by @dakshhhhh16 in #6246
• refactor: reduce db type coupling in engine actions using adapter mapping by @sachin9058 in #6289
• fix(rest-datasource): drain and close response body on 429 retry by @AftAb-25 in #6290
• fix: prevent nil pointer panic and error masking in GitHub provider check runs by @AftAb-25 in #6312
• test(profiles): add table-driven unit tests for pkg/profiles/models by @dakshhhhh16 in #6309
• fix(engine): prevent new evaluations from escaping cancellation during shutdown by @sachin9058 in #6314
• fix(datasource): initialize context to allow fallback to default project by @Jaydeep869 in #6315
• Resolve flaky TestGetGrpcConnection and upgrade dependencies by @krrish175-byte in #6264
• Move internal/engine/errors to pkg/engine/errors to reduce coupling by @sachin9058 in #6252
• Remove git_pr_diffs flag by @DharunMR in #6258
• removed dependency_extract feature flag by @DharunMR in #6272
• Decouple pkg/engine/errors from internal/db using adapter layer by @sachin9058 in #6266
• Test(actions): add unit tests for rule actions by @dakshhhhh16 in #6208
• refactor: extract shared label filtering to internal/labels by @Gitjay11 in #6222
• chore: add pre-check script to validate lint, gen, test, and build by @sachin9058 in #6293
• refactor: remove unused property wrappers and update the property tests to use … by @kazuhidelee in #6284
• fix: make artifact signature wait context-aware to allow graceful shutdown by @sachin9058 in #6329
• test(ruletypes): add table-driven unit tests for release phase conver… by @dakshhhhh16 in #6328
• fix: avoid overwriting remediation action status in eval logs by @AftAb-25 in #6333
• Fix unterminated warning message that breaks gotestsum -> junit parsing by @evankanderson in #6334
• Test: add real database integration tests for EntityCreator by @DharunMR in #6378
• Decouple PR feedback actions from GitHub-specific provider by @krrish175-byte in #6262
• Fix SARIF uploads by granting security-events: write by @evankanderson in #6406
• refactor(engine): remove direct db dependency from actions logic by @sachin9058 in #6305
• Add security-events: write to main workflows, granular permissions by @evankanderson in #6412
• Generalize identity provider and implement OIDC discovery by @krrish175-byte in #6265
• Switch linter to only pick up new issues by @evankanderson in #6440
• Fix typo in first_profile.md by @alekcunn in #6574
• refactor: encapsulate project creation logic into the ProjectCreator interface by @ShantKhatri in #6557
• feat(api): set output_only flag for output-only fields in protos by @Gitjay11 in #6221
• Implement capabilities list via reflection by @evankanderson in #6482
• feat(identity): add smoke-test-client Keycloak OIDC client for automted testing by @Jaydeep869 in #6491
• Introduce issue provider facet and issue remediation configuration by @codejasleen in #6541

Dependency updates

• build(deps): bump github.com/openfga/go-sdk from 0.7.3 to 0.7.5 by @dependabot[bot] in #6172
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.1.0 by @dependabot[bot] in #6170
• build(deps): bump chainguard-dev/actions from 1.6.7 to 1.6.8 by @dependabot[bot] in #6169
• build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.14.0 by @dependabot[bot] in #6165
• build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @dependabot[bot] in #6178
• build(deps): bump the otel group with 2 updates by @dependabot[bot] in #6177
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #6181
• build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /tools by @dependabot[bot] in #6180
• build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in #6176
• build(deps): bump bufbuild/buf-action from 1.3.0 to 1.4.0 by @dependabot[bot] in #6175
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 in /docs by @dependabot[bot] in #6174
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 in /docs by @dependabot[bot] in #6185
• build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in #6187
• build(deps-dev): bump flatted from 3.3.2 to 3.4.2 in /docs by @dependabot[bot] in #6186
• build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @dependabot[bot] in #6195
• build(deps): bump chainguard-dev/actions from 1.6.8 to 1.6.10 by @dependabot[bot] in #6199
• build(deps): bump github.com/fergusstrange/embedded-postgres from 1.32.0 to 1.34.0 by @dependabot[bot] in #6198
• build(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 by @dependabot[bot] in #6197
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.5 by @dependabot[bot] in #6200
• build(deps): bump yaml in /docs by @dependabot[bot] in #6201
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /docs by @dependabot[bot] in #6202
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.6 by @dependabot[bot] in #6194
• build(deps): bump github/codeql-action from 4.33.0 to 4.34.1 by @dependabot[bot] in #6196
• build(deps): bump github.com/openfga/openfga from 1.11.3 to 1.13.1 by @dependabot[bot] in #6204
• build(deps): bump brace-expansion in /docs by @dependabot[bot] in #6212
• build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1 by @dependabot[bot] in #6205
• build(deps): bump github.com/openfga/openfga from 1.11.5 to 1.13.1 in /tools by @dependabot[bot] in #6206
• build(deps): bump node-forge from 1.3.2 to 1.4.0 in /docs by @dependabot[bot] in #6216
• build(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /docs by @dependabot[bot] in #6213
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 by @dependabot[bot] in #6215
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #6226
• build(deps): bump minimatch and serve-handler in /docs by @dependabot[bot] in #6232
• build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #6231
• build(deps-dev): bump markdownlint-cli2 from 0.21.0 to 0.22.0 in /docs by @dependabot[bot] in #6228
• build(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0 by @dependabot[bot] in #6227
• build(deps): bump styled-components from 6.3.11 to 6.3.12 in /docs by @dependabot[bot] in #6225
• build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #6224
• build(deps): bump chainguard-dev/actions from 1.6.10 to 1.6.11 by @dependabot[bot] in #6223
• build(deps): bump github.com/go-openapi/loads from 0.23.2 to 0.23.3 by @dependabot[bot] in #6229
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #6259
• build(deps): bump the tools group in /tools with 4 updates by @dependabot[bot] in #6230
• build(deps): bump lodash from 4.17.23 to 4.18.1 in /docs by @dependabot[bot] in #6260
• build(deps): bump the otel group with 7 updates by @dependabot[bot] in #6302
• build(deps): bump chainguard-dev/actions from 1.6.11 to 1.6.13 by @dependabot[bot] in #6301
• build(deps): bump github.com/openfga/openfga from 1.13.1 to 1.14.0 in /tools by @dependabot[bot] in #6298
• build(deps): bump github.com/openfga/openfga from 1.13.1 to 1.14.0 by @dependabot[bot] in #6299
• build(deps): bump helm.sh/helm/v3 from 3.18.5 to 3.20.2 in /tools by @dependabot[bot] in #6335
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /tools by @dependabot[bot] in #6308
• build(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @dependabot[bot] in #6362
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #6374
• build(deps): bump chainguard-dev/actions from 1.6.13 to 1.6.14 by @dependabot[bot] in #6373
• build(deps): bump the docusaurus group in /docs with 5 updates by @dependabot[bot] in #6377
• build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #6375
• build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docs by @dependabot[bot] in #6379
• build(deps): bump dompurify from 3.3.2 to 3.4.0 in /docs by @dependabot[bot] in #6381
• build(deps-dev): bump globals from 17.4.0 to 17.5.0 in /docs by @dependabot[bot] in #6396
• build(deps): bump styled-components from 6.3.12 to 6.4.0 in /docs by @dependabot[bot] in #6395
• build(deps): bump the react group across 1 directory with 2 updates by @dependabot[bot] in #6393
• build(deps-dev): bump prettier from 3.8.1 to 3.8.3 in /docs by @dependabot[bot] in #6394
• build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #6390
• build(deps): bump chainguard-dev/actions from 1.6.14 to 1.6.15 by @dependabot[bot] in #6391
• build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #6389
• build(deps): bump GoTestTools/gotestfmt-action from 2.2.0 to 2.3.0 by @dependabot[bot] in #6392
• build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.2 by @dependabot[bot] in #6403
• build(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 in /tools by @dependabot[bot] in #6404
• build(deps): bump github.com/openfga/openfga from 1.14.0 to 1.14.1 by @dependabot[bot] in #6399
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by @dependabot[bot] in #6384
• build(deps): bump github.com/openfga/openfga from 1.14.0 to 1.14.1 in /tools by @dependabot[bot] in #6401
• build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 in /docs by @dependabot[bot] in #6408
• build(deps): bump styled-components from 6.4.0 to 6.4.1 in /docs by @dependabot[bot] in #6427
• build(deps-dev): bump markdownlint-cli2 from 0.22.0 to 0.22.1 in /docs by @dependabot[bot] in #6425
• build(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @dependabot[bot] in #6423
• build(deps): bump chainguard-dev/actions from 1.6.15 to 1.6.19 by @dependabot[bot] in #6424
• build(deps): bump github.com/open-policy-agent/opa from 1.14.0 to 1.16.1 by @dependabot[bot] in #6441
• build(deps): bump the otel group across 1 directory with 2 updates by @dependabot[bot] in #6410
• build(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 by @dependabot[bot] in #6426
• Upgrade to golangci-lint 2.12.1 by @evankanderson in #6442
• build(deps): bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4 in /docs by @dependabot[bot] in #6445
• build(deps): bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 by @dependabot[bot] in #6444
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in /docs by @dependabot[bot] in #6443
• build(deps): bump fast-uri from 3.1.0 to 3.1.2 in /docs by @dependabot[bot] in #6446
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in #6450
• build(deps): bump github.com/openfga/go-sdk from 0.7.5 to 0.8.0 by @dependabot[bot] in #6455
• build(deps-dev): bump globals from 17.5.0 to 17.6.0 in /docs by @dependabot[bot] in #6459
• build(deps): bump the docusaurus group in /docs with 5 updates by @dependabot[bot] in #6457
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.1 by @dependabot[bot] in #6456
• build(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 by @dependabot[bot] in #6453
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #6454
• build(deps): bump mobx from 6.13.7 to 6.15.1 in /docs by @dependabot[bot] in #6458
• build(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.32 by @dependabot[bot] in #6470
• build(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /docs by @dependabot[bot] in #6471
• build(deps): bump the react group in /docs with 2 updates by @dependabot[bot] in #6468
• build(deps): bump mobx from 6.15.1 to 6.15.3 in /docs by @dependabot[bot] in #6469
• build(deps): bump github.com/open-feature/go-sdk from 1.17.0 to 1.17.2 by @dependabot[bot] in #6466
• build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @dependabot[bot] in #6465
• build(deps): bump github.com/ThreeDotsLabs/watermill from 1.5.1 to 1.5.2 by @dependabot[bot] in #6476
• build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in #6474
• build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #6473
• build(deps): bump styled-components from 6.4.1 to 6.4.2 in /docs by @dependabot[bot] in #6475
• build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @dependabot[bot] in #6464
• build(deps): bump mermaid from 11.12.3 to 11.15.0 in /docs by @dependabot[bot] in #6452
• build(deps): bump the buf group across 1 directory with 3 updates by @dependabot[bot] in #6467
• build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by @dependabot[bot] in #6483
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #6486
• build(deps): bump github.com/wneessen/go-mail from 0.7.2 to 0.7.3 by @dependabot[bot] in #6488
• build(deps): bump mobx from 6.15.3 to 6.15.4 in /docs by @dependabot[bot] in #6484
• build(deps): bump the tools group across 1 directory with 10 updates by @dependabot[bot] in #6480
• build(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs by @dependabot[bot] in #6498
• build(deps): bump the otel group across 1 directory with 11 updates by @dependabot[bot] in #6497
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.22 by @dependabot[bot] in #6493
• build(deps): bump k8s.io/apimachinery from 0.35.1 to 0.36.1 by @dependabot[bot] in #6496
• build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by @dependabot[bot] in #6495
• build(deps): bump the react group in /docs with 2 updates by @dependabot[bot] in #6494
• build(deps): bump github.com/sigstore/protobuf-specs from 0.5.0 to 0.5.1 by @dependabot[bot] in #6489
• build(deps): bump github.com/openfga/openfga from 1.14.1 to 1.16.0 by @dependabot[bot] in #6502
• build(deps): bump mobx from 6.15.4 to 6.16.1 in /docs by @dependabot[bot] in #6512
• build(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.8.2 by @dependabot[bot] in #6514
• build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.8.1 by @dependabot[bot] in #6513
• build(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /docs by @dependabot[bot] in #6519
• build(deps-dev): bump prettier from 3.8.3 to 3.8.4 in /docs by @dependabot[bot] in #6511
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 by @dependabot[bot] in #6510
• build(deps): bump dompurify from 3.4.0 to 3.4.10 in /docs by @dependabot[bot] in #6509
• build(deps): bump launch-editor from 2.11.1 to 2.14.1 in /docs by @dependabot[bot] in #6518
• build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.6 by @dependabot[bot] in #6515
• build(deps): bump ws from 7.5.10 to 7.5.11 in /docs by @dependabot[bot] in #6517
• build(deps): bump github.com/openfga/openfga from 1.16.0 to 1.18.0 in /tools by @dependabot[bot] in #6525
• build(deps): bump github.com/openfga/openfga from 1.16.0 to 1.18.0 by @dependabot[bot] in #6526
• build(deps): bump dompurify from 3.4.10 to 3.4.11 in /docs by @dependabot[bot] in #6527
• build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by @dependabot[bot] in #6528
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0 by @dependabot[bot] in #6537
• build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.9.0 by @dependabot[bot] in #6536
• build(deps): bump github.com/openfga/go-sdk from 0.8.0 to 0.8.2 by @dependabot[bot] in #6538
• build(deps): bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1 by @dependabot[bot] in #6539
• build(deps): bump k8s.io/apimachinery from 0.36.1 to 0.36.2 by @dependabot[bot] in #6549
• build(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by @dependabot[bot] in #6542
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.25 by @dependabot[bot] in #6546
• build(deps): bump github.com/erikgeiser/promptkit from 0.9.0 to 0.11.0 by @dependabot[bot] in #6545
• build(deps): bump github.com/protobom/protobom from 0.5.4 to 0.5.6 by @dependabot[bot] in #6547
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #6544
• build(deps): bump github.com/nats-io/nats.go from 1.50.0 to 1.52.0 by @dependabot[bot] in #6548
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #6543
• build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #6559
• build(deps): bump ko-build/setup-ko from 0.9 to 0.10 by @dependabot[bot] in #6560
• build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @dependabot[bot] in #6561
• build(deps-dev): bump globals from 17.6.0 to 17.7.0 in /docs by @dependabot[bot] in #6562
• build(deps): bump golang.org/x/tools from 0.45.0 to 0.47.0 by @dependabot[bot] in #6564
• build(deps): bump github.com/open-policy-agent/opa from 1.16.1 to 1.18.0 by @dependabot[bot] in #6567
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.6 to 2.14.2 by @dependabot[bot] in #6568
• build(deps): bump github.com/oapi-codegen/runtime from 1.2.0 to 1.4.2 by @dependabot[bot] in #6569
• build(deps): bump the tools group in /tools with 5 updates by @dependabot[bot] in #6566
• build(deps): bump github.com/zitadel/oidc/v3 from 3.45.4 to 3.47.5 by @dependabot[bot] in #6587
• build(deps): bump github/codeql-action/upload-sarif from 4.35.1 to 4.36.3 by @dependabot[bot] in #6583
• build(deps-dev): bump prettier from 3.8.4 to 3.9.4 in /docs by @dependabot[bot] in #6582
• build(deps): bump github.com/protobom/protobom from 0.5.6 to 0.5.8 by @dependabot[bot] in #6586
• build(deps): bump chainguard-dev/actions/boilerplate from 1.6.25 to 1.6.26 by @dependabot[bot] in #6581
• build(deps): bump redocusaurus from 2.5.0 to 2.5.2 in /docs in the docusaurus group by @dependabot[bot] in #6580
• build(deps): bump styled-components from 6.4.2 to 6.4.3 in /docs by @dependabot[bot] in #6584
• build(deps): bump github.com/itchyny/gojq from 0.12.17 to 0.12.19 by @dependabot[bot] in #6588
• build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in #6603
• build(deps): bump github.com/wneessen/go-mail from 0.7.3 to 0.8.1 by @dependabot[bot] in #6600
• build(deps): bump golang.org/x/tools from 0.47.0 to 0.48.0 by @dependabot[bot] in #6602
• build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.11-20260415201107-50325440f8f2.1 to 1.36.11-20260709200747-435963d16310.1 in the buf group by @dependabot[bot] in #6599
• build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #6596
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #6595
• build(deps): bump chainguard-dev/actions/boilerplate from 1.6.26 to 1.6.27 by @dependabot[bot] in #6594
• build(deps-dev): bump markdownlint-cli2 from 0.22.1 to 0.23.0 in /docs by @dependabot[bot] in #6597
• build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /docs by @dependabot[bot] in #6604

New Contributors

• @PrinceAsiedu made their first contribution in #6188
• @krrish175-byte made their first contribution in #6207
• @dakshhhhh16 made their first contribution in #6209
• @sachin9058 made their first contribution in #6249
• @DharunMR made their first contribution in #6258
• @theycallmeaabie made their first contribution in #6270
• @Gitjay11 made their first contribution in #6222
• @kazuhidelee made their first contribution in #6284
• @intelligent-ears made their first contribution in #6300
• @AftAb-25 made their first contribution in #6290
• @Jaydeep869 made their first contribution in #6315
• @alimx07 made their first contribution in #6383
• @isha822 made their first contribution in #6366
• @codejasleen made their first contribution in #6501
• @somaz94 made their first contribution in #6520
• @alekcunn made their first contribution in #6574
• @ShantKhatri made their first contribution in #6557
• @w3lld1 made their first contribution in #6591

Full Changelog: v0.1.2...v0.2.0