v13.25.0

What's Changed

• 🧹 Replace arduino/setup-protoc with a self-contained install script by @czunker in #8751
• ⚡ aws: targeted single-resource init for filter-in-memory asset types by @tas50 in #8749
• 🧹 platform titles: name the scanned object, not the provider by @tas50 in #8754
• 🎉 datadog-13.0.12, equinix-13.0.19, shodan-13.2.3, snowflake-13.3.4, stackit-13.2.1 by @tas50 in #8755
• 🧹 Ignore Vim swap files by @tas50 in #8758
• feat(azure): keyless auth via federated token file (workload identity) by @vjeffrey in #8757
• 🐛 aws: resolve S3 buckets referenced by name to their home region by @tas50 in #8759
• ⭐ aws: add dynamodb.table.autoScalingEnabled and lambda.function.urlConfigAuthType by @tas50 in #8760
• ⭐ azure: expose ARM systemMetadata provenance on more resources by @tas50 in #8765
• ⭐ oci: expose creation timestamps on vulnerability scanning resources by @tas50 in #8763
• ⭐ aws: expose creation timestamps on more resources by @tas50 in #8764
• ⭐ azure: expose creation timestamps on more resources by @tas50 in #8762
• ⭐ gcp: add creation timestamps where the SDK exposes them by @tas50 in #8761
• ⭐ openstack: add creation-date fields to db.instance and objectstorage.container by @tas50 in #8766
• ⭐ vsphere: add createDate to vsphere.vswitch.dvs by @tas50 in #8767
• ⭐ stackit: add resource creation-date fields by @tas50 in #8768
• Bump EnricoMi/publish-unit-test-result-action from 2.23.0 to 2.24.0 by @dependabot[bot] in #8776
• Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #8777
• Bump mondoohq/actions/.github/workflows/update-pinned-versions.yml from c09ff90232c442d736990f184a438a844bec4cb1 to b41754752763419780430abef5e35842ba2bec66 by @dependabot[bot] in #8775
• ⭐ oci: expose ownership, creator, and source provenance by @tas50 in #8773
• ⭐ azure: expose managed identity and image source provenance by @tas50 in #8771
• ⭐ nutanix: expose owner, project, and source provenance by @tas50 in #8770
• ⭐ aws: expose ownership, source, and management provenance by @tas50 in #8774
• ⭐ gcp: expose source, hierarchy, and build provenance by @tas50 in #8772
• 🐛 aws: don't swallow non-404 errors in efs filesystem.backupPolicy() by @tas50 in #8685
• 🐛 aws: check CreateResource errors for WAF Not/Or statements by @tas50 in #8686
• 🐛 awsec2: validate snapshot IDs with the snapshot regex, not the instance regex by @tas50 in #8661
• 🐛 awsebs: fix inverted error check when reading set-hostname by @tas50 in #8662
• 🐛 aws: fix swapped region/account in EC2 keypair ARN by @tas50 in #8678
• ⭐ os: detect platform arch from ELF header on command-less fs scans by @tas50 in #8384
• 🌟 add portainer provider (control-plane audit) by @tas50 in #8778
• ⭐ Update deps and expose new Azure/OpenStack resources unlocked by the bump 20260628 by @github-actions[bot] in #8779
• 🧹 providers: replace stale cnquery references with mql by @tas50 in #8781
• 🧹 equinix: mark provider as deprecated by @tas50 in #8783
• 🛑 cloudflare: drop synthetic stream id fields in favor of __id by @tas50 in #8784
• 🌟 vsphere: expose tags, content libraries, custom fields, alarms, tasks, events & vCenter certs by @tas50 in #8782
• 🎉 openstack-13.7.0, oci-13.13.0, azure-13.23.0, gcp-13.26.0 by @tas50 in #8769
• 🎉 aws-13.39.0 by @tas50 in #8756
• 🐛 os: fix cloud.instance failing on EC2 hosts with multiple SGs/CIDRs by @AdamVB in #8786
• ✨ python: scan Program Files and per-user install paths on Windows by @M-gre in #8787

Full Changelog: v13.24.2...v13.25.0