v0.6.0

What's Changed

• chore(deps): bump starlette from 1.2.1 to 1.3.1 in /.claude/skills/bakery/evals by @dependabot[bot] in #635
• add llms.txt support by @edavidaja in #636
• Make change-aware PR builds honor the dev and matrix flags by @bschwedler in #637
• feat: change-aware PR builds for product images by @ianpittwood in #621
• Switch issue automation to client-id by @bschwedler in #643
• Supply GitHub token to TinyTeX installs in tests by @bschwedler in #644
• chore(deps): bump the actions group across 2 directories with 3 updates by @dependabot[bot] in #640
• chore(deps): bump soupsieve from 2.8.3 to 2.8.4 in /posit-bakery by @dependabot[bot] in #649
• chore(deps): bump mistune from 3.2.1 to 3.3.0 in /posit-bakery by @dependabot[bot] in #650
• Set en_US.UTF-8 locale in apt setup macro by @ianpittwood in #651
• Merge soci and oras plugins into imagetools plugin by @ianpittwood in #619
• feat: parallelize bakery ci publish across image targets by @ianpittwood in #641
• feat: retry-with-backoff for the parallel publish path by @ianpittwood in #642
• Parallelize bakery ci publish across image targets, with retry-safe backoff by @ianpittwood in #656
• Improve bakery ci publish logging by @ianpittwood in #657
• fix(soci): retry transient registry errors on SOCI push by @ianpittwood in #661
• Add Docker Hub README length check by @bschwedler in #660
• Guard release PR creation against duplicate dispatches by @bschwedler in #655
• Centralize effective_dev_channel for matrix and build paths by @bschwedler in #638
• feat: parallelize --strategy build image builds by @ianpittwood in #662
• Cache dependency version fetches per invocation by @bschwedler in #552
• Make push-to-main builds change-aware by @bschwedler in #663
• Scope merge-queue builds to changed files by @bschwedler in #671
• Add version-diff comment to release PRs by @bschwedler in #668
• fix: update setup-goss action to account for post-v0.4.10 goss releases by @ianpittwood in #676
• Fix setup-hadolint checksum verification and pinned version URLs by @ianpittwood in #690
• Add cache-registry and temp-registry inputs to build/clean workflows by @ianpittwood in #689
• Fix ECR login gating in bakery-build-native.yml by @ianpittwood in #691
• fix: gate BASE_REF on push events in bakery-build/bakery-build-native by @ianpittwood in #693
• feat: use ecr temp registry backend for CI by @ianpittwood in #692
• Group dependabot security updates into single PRs by @bschwedler in #716
• chore(deps): bump pillow from 12.2.0 to 12.3.0 in /posit-bakery by @dependabot[bot] in #667
• chore(deps): bump setuptools from 82.0.1 to 83.0.0 in /posit-bakery by @dependabot[bot] in #672
• chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /posit-bakery by @dependabot[bot] in #674
• build(deps): bump aiohttp from 3.14.1 to 3.14.3 in /.claude/skills/bakery/evals by @dependabot[bot] in #696
• chore(deps): bump the actions group across 2 directories with 11 updates by @dependabot[bot] in #717
• build(deps): bump the python-security group across 1 directory with 2 updates by @dependabot[bot] in #719
• fix: preserve DependencyVersion metadata across packaging upgrades by @ianpittwood in #723
• build(deps): bump the python-deps group across 2 directories with 15 updates by @dependabot[bot] in #720
• Add restore-cache opt-out to setup-bakery by @bschwedler in #708
• Add wizcli security scan to bakery-build-native.yml by @bschwedler in #715
• Fix checksum and URL bugs in setup-goss/hadolint by @bschwedler in #714
• Add bakery build --summary for target/tag counts by @bschwedler in #710
• Add image size and layer counts to build --summary (Phase 2) by @bschwedler in #711
• fix: cache goss binaries by @ianpittwood in #731
• Fix invalid escape sequence warnings in test_macros.py by @bschwedler in #744
• Fix doubled newlines and blank separators in build logs by @bschwedler in #725
• Disable git credential persistence on checkouts by @bschwedler in #754
• feat: carry --metadata-file through the bake build strategy by @ianpittwood in #733
• ci: add zizmor pre-commit hook by @ianpittwood in #732
• Add cache size to build --summary (Phase 3) by @bschwedler in #712
• Surface bakery build --summary in GitHub Actions job summaries by @bschwedler in #760
• Collapse duplicate dev builds across channels (#632) by @ianpittwood in #765
• Add oven: a local build, test, validate, and scan environment by @bschwedler in #727
• Require explicit scope for bakery update files by @bschwedler in #753
• Scan only latest image for production builds by @bschwedler in #764
• Add max-parallel input to bakery-build-native.yml by @bschwedler in #758
• fix: tolerate non-target Buildx metadata entries by @ianpittwood in #761
• Fix collapsed dev builds crashing and filtered by --dev-channel by @bschwedler in #771
• fix: apply image-level tool options fallback for variant-less images by @ianpittwood in #762
• Restore pyflakes in the ruff gate and correct the Python floor by @bschwedler in #743
• Fix NameError in wizcli scan from silent merge break by @bschwedler in #780
• fix(bake): don't mangle temp image name for registries with a port by @ianpittwood in #766
• fix: verify published tag digests by @ianpittwood in #784
• fix: retry stale published tags individually by @ianpittwood in #785
• fix: require --image-platform with --metadata-file for multi-platform targets by @ianpittwood in #767
• docs: address remaining #739 documentation updates by @ianpittwood in #768
• build(deps): bump the actions group across 2 directories with 6 updates by @dependabot[bot] in #777
• ci: switch native builds to bake strategy by @ianpittwood in #789
• fix: disable provenance for temporary Bake pushes by @ianpittwood in #794
• Correct CDN stream directory on dev overrides by @bschwedler in #797
• Fix dev-spec override URL encoding for plain channel heads by @bschwedler in #799
• Emit latest flag from bakery ci matrix by @bschwedler in #770
• build(deps): bump tornado from 6.5.7 to 6.5.8 in /posit-bakery in the python-security group across 1 directory by @dependabot[bot] in #779
• Tag Wiz scans from build runner by @bschwedler in #800
• build(deps): bump the python-deps group across 2 directories with 9 updates by @dependabot[bot] in #778
• Install R from the Posit Open apt/dnf repo, not rstd.io by @bschwedler in #791
• Make apt/dnf repo registration opt-in, not default by @bschwedler in #792
• Add recent version build limits by @bschwedler in #803

New Contributors

• @edavidaja made their first contribution in #636

Full Changelog: v0.5.0...v0.6.0