v13.24.1

What's Changed

• 🐛 fix usb device filter checking DeviceClass instead of LocationID by @tas50 in #8638
• 🐛 fix OOM during container image scanning by @slntopp in #8629
• 🧹 Update deps for mql and providers 20260623 by @github-actions[bot] in #8645
• 🧹 Bump patch version for 23 providers by @tas50 in #8649
• 🐛 acr: close the token-exchange HTTP response body by @tas50 in #8666
• 🧹 Bump patch version for 19 providers by @tas50 in #8684
• 🐛 yum: fix RHEL 6/7 release regex matching a literal pipe by @tas50 in #8654
• 🐛 networkinterface: accept multi-digit interface indices by @tas50 in #8657
• 🐛 macos: harddiskSleep ran the display-sleep command by @tas50 in #8652
• 🐛 aws: set ECS container taskDefinitionArn to the task-definition ARN by @tas50 in #8680
• 🧹 macos: drop no-op prefix trim in systemsetup ParseDate by @tas50 in #8658
• 🐛 lsof: stop process parsing after the file-descriptor section by @tas50 in #8656
• 🐛 fix fragile /etc/shadow parsing using encoding/csv by @tas50 in #8624
• 🐛 fix mount option parsing dropping values that contain '=' by @tas50 in #8634
• 🎉 aws-13.38.0, gcp-13.25.0, azure-13.21.0 by @tas50 in #8687
• 🐛 aws: case-insensitive Redshift cluster multiAZ check by @tas50 in #8682
• 🐛 gcp: make bigtable cluster, bigquery routine & dns recordset ids unique by @tas50 in #8674
• 🐛 azure: guard LinuxFxVersion split to avoid index-out-of-range panic by @tas50 in #8675
• 🐛 azure: compare managed-identity principal IDs by value, not TValue struct by @tas50 in #8676
• 🐛 python: read package dedup map by File to match the write by @tas50 in #8653
• 🐛 gcp: give Cloud Run startup and liveness probes distinct ids by @tas50 in #8671
• 🐛 gcp: fix cloud function v2 kmsKey typed-reference arg key by @tas50 in #8670
• 🐛 aws: resolve ELB target-group EC2 instances (fix empty instance→LB backref) by @tas50 in #8688
• 🐛 aws: guard nil export in dynamodb export.table() by @tas50 in #8683
• 🌟 mikrotik: add provider using the RouterOS v3 Go SDK by @tas50 in #8607
• 🐛 gcp: pass projectId when resolving cloud function service accounts by @tas50 in #8672
• ⭐ oci: internet-exposure analysis (instance/load-balancer exposure, ADB internetReachable) by @tas50 in #8689
• 🐛 aws: resolve SageMaker endpoint config by its real config name by @tas50 in #8681
• 🧹 Update deps for mql and providers 20260623 by @github-actions[bot] in #8690
• 🐛 kustomize: don't silently misclassify a valid patch file as empty by @tas50 in #8701
• 🐛 helm: surface dropped rendered manifests and guard oversized downloads by @tas50 in #8700
• 🐛 ansible: guard nil task/play accessors, list-form inventory hosts, and CLI args by @tas50 in #8699
• 🐛 bicep: bound expression-parser recursion + fix swallowed errors and an unchecked cast by @tas50 in #8697
• 🐛 cloudformation: parse scalar Transform; guard CLI args and connections by @tas50 in #8698
• 🐛 openstack: normalize optional-service error handling by @tas50 in #8694
• ✨ digitalocean: add BYOIP, Partner Attachment, and billing resources, plus DB fields by @tas50 in #8693
• ✨ hetzner: add Storage Box and DNS zone resources, plus server/firewall fields by @tas50 in #8692
• 🐛 digitalocean: don't silently truncate paginated results on CurrentPage error by @tas50 in #8691
• ✨ openstack: add RBAC policy, compute quota, and Cinder QoS resources, plus fields by @tas50 in #8695
• ✨ Add NextDNS provider with account and profile discovery by @tas50 in #8702
• 🧹 Regenerate permissions.json for aws, azure, gcp by @tas50 in #8705
• 🐛 asset_vuln: avoid nil deref panic on unparseable advisory dates by @tas50 in #8651
• 🧹 Update deps for mql and providers 20260624 by @github-actions[bot] in #8706
• 🟢 gcp: fix fnV2ServiceConfig test build failure (CI from #8706) by @tas50 in #8707
• ⭐ add file context to terraform by @arlimus in #8703
• ✨ terraform: resolve variables by @arlimus in #8708
• ✨ Add checkpoint provider to defaults by @tas50 in #8709

Full Changelog: v13.24.0...v13.24.1