v1.8.0

What's Changed

• deps: consolidate Dependabot updates (April 2026) by @mpiton in #251
• Track Cargo dep package field, and name and version lines by @DanikVitek in #250
• feat: Add Maven/pom.xml support (#223) by @mpiton in #252
• refactor: drop unused Serialize/Deserialize derives on Dependency/Span by @mpiton in #254
• feat: scan lockfiles for transitive vulnerability detection (#224) by @mpiton in #255
• feat(scan): add HTML output format for vulnerability reports by @mpiton in #260
• fix: handle bare PEP 440 pre-release in version comparison (#154) by @mpiton in #261
• feat: add 'Ignore package' code action (#226) by @mpiton in #262
• document npm OSV vulnerability scan by @mpiton in #264
• fix: limit OSV RustSec advisory concurrency by @mpiton in #265
• fix(registries): sanitize repository and homepage URLs for npm and Packagist (#230) by @mpiton in #266
• perf(cache): make ReadCache/WriteCache async, offload SQLite to spawn_blocking by @mpiton in #267
• feat(cache): hybrid memory+SQLite advisory cache for RustSec data by @mpiton in #268
• refactor(parsers): introduce LockfileResolver trait (#239) by @mpiton in #269
• refactor(python): decompose parse_pyproject_toml using taplo spans (#240) by @mpiton in #270
• perf(parsers): replace string-scan with span-aware JSON parser (#236) by @mpiton in #271
• chore: untrack docs/plans by @mpiton in #272
• docs: enhance API documentation with Rustdoc comments by @mpiton in #273
• chore(docs): enforce rustdoc quality via lints + CI by @mpiton in #274
• docs(tutorials): add contributor guide for adding languages by @mpiton in #275
• docs: comprehensive architecture guide for contributors (#232) by @mpiton in #276
• chore(release): v1.8.0 + dependabot upgrades by @mpiton in #277

Full Changelog: v1.7.0...v1.8.0