v0.70.0

Changelog

New Features

• bbee10c: feat(parser): add Groovy and Jenkinsfile support (#1387) (@salman-frs)
• 314b873: feat: add --github-hide-passed to skip passing files in GitHub output (#1355) (@somaz94)
• c149d81: feat: name stdin input in test output (#1386) (@rylena)

Bug Fixes

• 64da8a2: fix(output): escape ':' and ',' in GitHub workflow command file names (#1399) (@VXNCXNX)
• fa119bc: fix(sarif): percent-encode artifact paths (#1419) (@Hanabi9248)
• 944ef69: fix: accept underscores in textproto message names (#1421) (@Hanabi9248)
• 82ba002: fix: allow --update to clone into a pre-existing --policy directory (#1383) (@pujitha24)
• 49f36aa: fix: apply ignore regex to explicit files (#1413) (@SetraTheXX)
• c30bc1a: fix: make test policy updates repeatable (#1379) (@Eljees)
• de66600: fix: preserve non-finite INI values as strings (#1420) (@Hanabi9248)
• 3a575a7: fix: propagate plugin exit code to conftest process (#1345) (@arpitjain099)
• 2f28498: fix: return CycloneDX parser errors (#1335) (@immanuwell)

OPA Changes

• 1b97ec7: build(deps): bump github.com/open-policy-agent/opa from 1.19.0 to 1.20.2 (#1418) (@dependabot[bot])

Other Changes

• b0d6b6a: build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#1389) (@dependabot[bot])
• ba00b80: build(deps): bump actions/setup-go from 6.3.0 to 7.0.0 (#1375) (@dependabot[bot])
• 1860682: build(deps): bump actions/setup-python from 6.1.0 to 7.0.0 (#1376) (@dependabot[bot])
• e2ee7c0: build(deps): bump cachix/install-nix-action from 31.10.6 to 31.11.1 (#1402) (@dependabot[bot])
• 5eb803b: build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#1381) (@dependabot[bot])
• 6b36133: build(deps): bump docker/login-action from 4.4.0 to 4.6.0 (#1390) (@dependabot[bot])
• b476e49: build(deps): bump github.com/CycloneDX/cyclonedx-go (#1412) (@dependabot[bot])
• 6f3b7dc: build(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8 (#1401) (@dependabot[bot])
• da2b32a: build(deps): bump github.com/hashicorp/go-getter from 1.8.8 to 1.8.9 (#1416) (@dependabot[bot])
• 74d8677: build(deps): bump github.com/magiconair/properties (#1378) (@dependabot[bot])
• 6a3fd60: build(deps): bump github.com/moby/buildkit from 0.30.0 to 0.32.2 (#1392) (@dependabot[bot])
• 6274003: build(deps): bump github.com/moby/buildkit from 0.32.2 to 0.33.0 (#1415) (@dependabot[bot])
• 85485c0: build(deps): bump golang from 1.26.5-alpine to 1.26.6-alpine (#1400) (@dependabot[bot])
• c0ac6cd: build(deps): bump golang from 1.26.6-alpine to 1.27.1-alpine (#1417) (@dependabot[bot])
• c93d486: build(deps): bump js-yaml from 4.2.0 to 4.3.0 in /examples/ts (#1377) (@dependabot[bot])
• 9c54228: build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /examples/ts (#1391) (@dependabot[bot])
• 04eb67e: chore: Update flake.lock (#1407) (@jalseth)
• 87f727c: chore: disable goconst in Go test files (#1406) (@jalseth)
• fc7d7d7: refactor(parser): Add Remarshal() helper (#1411) (@jalseth)