v2.1.18

What's Changed

• chore: fix dependabot alerts by @rchincha in #4082
• chore: fix dependabot alerts by @rchincha in #4091
• feat: add trivy-based sbom artifact generation support by @rchincha in #4088
• fix: miscellaneous fixes for ai-reported suggestions by @rchincha in #4101
• docs: fix alongside spelling in search docs by @yosinn1-blip in #4095
• chore: fix dependabot alerts by @rchincha in #4113
• fix(cve): prefer cve.org links for AVD references by @charles-openclaw in #4107
• feat: enhance config sanitization to mask sensitive keys in storage a… by @rchincha in #4119
• fix: skip DynamoDB table creation when tables exist by @andaaron in #4120
• ci: Update GH runner labels by @andaaron in #4121
• metadb: add optional fast restart path that skips storage walk when (version + commit + storage config) matches metaDB stamp by @USA-RedDragon in #4026
• feat(metrics): anonymous access when enabled in accessControl config by @uaggarwa in #4110
• fix(storage): treat dedupe-candidate cache miss as no candidates, not an error by @jankowtf in #4122
• chore: fix dependabot alerts by @rchincha in #4126
• feat: config: validate metrics config by @vrajashkr in #4130
• fix(authz): metrics: deny authenticated users not in ACL even with anonymous read by @vrajashkr in #4131
• fix(storage): release global write lock during blob restore I/O by @shcherbak in #4089
• refactor(test/blackbox): extract shared push/pull helpers by @andaaron in #4132
• feat(storage): redirect blob pulls to backend URLs by @rchincha in #4092
• feat: add authz support for GitHub teams by @rchincha in #4139
• feat(cli): support default config name by @andaaron in #4143
• ci: fix conformance test to before the refactor by @rchincha in #4145
• feat(events): include actor and request metadata in webhook payloads by @cainydev in #3959
• feat: add Azure Blob Storage driver by @datadot in #4142
• chore: fix dependabot alerts by @rchincha in #4157
• ci: pull test images from ghcr mirror by @datadot in #4156
• fix: map HTTP methods to corresponding scope actions in bearer authen… by @rchincha in #4161

New Contributors

• @yosinn1-blip made their first contribution in #4095
• @charles-openclaw made their first contribution in #4107
• @USA-RedDragon made their first contribution in #4026
• @uaggarwa made their first contribution in #4110
• @jankowtf made their first contribution in #4122
• @shcherbak made their first contribution in #4089
• @datadot made their first contribution in #4142

Full Changelog: v2.1.17...v2.1.18