v13.29.0

What's Changed

• 🔥 querypacks: remove AI Tools Inventory pack now shipped built-in by @tas50 in #3026
• 🧹 windows: migrate deprecated auditpol resource to windows.auditPolicy by @tas50 in #3031
• 📝 Require policy summary field with a 130-character limit by @tas50 in #3032
• 🩹 ai-security: surface failing tool details and tighten regexes by @M-gre in #3033
• 🧹 digitalocean: rework GradientAI agent checks to per-resource platform by @tas50 in #3034
• 🧹 oci: rework Generative AI endpoint checks to per-resource platform by @tas50 in #3035
• 🧹 azure: rework Managed HSM and IoT hub checks to per-resource platforms by @tas50 in #3036
• 📝 querypacks: rework all pack and query descriptions by @tas50 in #3039
• 🧹 querypacks: organize inventory & IR packs into groups by @tas50 in #3040
• ✨ querypacks: expand OCI inventory + add DigitalOcean, Hetzner, STACKIT, Proxmox, OpenStack & Nutanix packs by @tas50 in #3041
• 📝 querypacks: refocus pack descriptions on the data you get by @tas50 in #3042
• 🔒 gcp: add 5 cloud security checks by @tas50 in #3043
• 🔒 digitalocean: add 2 cloud security checks by @tas50 in #3044
• 🔒 oci: add 2 cloud security checks by @tas50 in #3045
• 🔒 aws: add 8 cloud security checks by @tas50 in #3046
• 🔒 azure: add 8 cloud security checks by @tas50 in #3047
• Bump the gomodupdates group with 6 updates by @dependabot[bot] in #3053
• Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #3052
• 🔒 aws: add 3 security checks for CodeBuild and AppStream by @tas50 in #3054
• Bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #3051
• Bump mondoohq/actions/cnspec-lint from 13.2.0 to 13.3.0 by @dependabot[bot] in #3050
• Bump terraform-linters/setup-tflint from 6.2.2 to 6.3.0 by @dependabot[bot] in #3049
• Bump mondoohq/actions/xgrep from 13.2.0 to 13.3.0 by @dependabot[bot] in #3048
• 🧹 aws: rework six services' checks to per-resource asset platforms by @tas50 in #3038
• 🐛 aws: fix lakeformation IAM_ALLOWED_PRINCIPALS check erroring on every scan by @tas50 in #3055
• bump: ranger-rpc v0.8.1 by @VasilSirakov in #3056
• 🐛 aws: fix terraform-hcl secgroup/NACL checks blind to valid HCL forms by @tas50 in #2990
• 🐛 aws: fix 6 Terraform/CloudFormation checks that missed real misconfigurations by @tas50 in #3002
• 🐛 k8s: fix two NET_RAW capability checks to match their siblings by @tas50 in #2745
• 🧹 azure/gcp: replace deprecated MQL fields with typed resource refs by @tas50 in #3030
• 🧹 Bump mql to v13.29.0 by @mondoo-mergebot[bot] in #3057

Full Changelog: v13.28.1...v13.29.0