v1.130.0

Changelog

• fc6e3a7 Another cosign fix (#5843)
• c86827a fix how cosign signs kots bundles (#5842)
• f2c2889 fix: pin axios to 1.13.5 to prevent upgrade to compromised 1.14.1 (#5841)
• 0d766e0 chore: comment out airgapped install test in regression workflow (#5840)
• 6227457 chore(deps): bump github.com/go-git/go-git/v5 (#5839)
• 176b930 Switch melange and apko files to use cve0 APK repo (#5826)
• d9ec012 chore(deps): bump handlebars (#5831)
• 8c6a5db fix: sort minio image tags numerically by revision number (#5830)
• a450921 chore(deps): bump GitHub Actions dependencies (#5825)
• 01d8821 Revert "fix: disable only-fixed in image scans to auto-close stale CVE alerts…" (#5829)
• ee64880 fix: disable only-fixed in image scans to auto-close stale CVE alerts (#5828)
• a8ca85b updated js-yaml to resolve vulnerability (#5827)
• 52f64bd Update KOTS image dependency tags (#5823)
• b7f0961 chore(deps): bump sigstore/cosign-installer from 3.10.1 to 4.0.0 (#5671)
• 378ddf9 chore(deps): bump peter-evans/create-pull-request from 7 to 8 (#5720)
• 224b4c1 chore(deps): bump chainguard-images/actions (#5801)
• 8485855 chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates (#5822)
• 0154cfd chore(deps): bump actions/upload-artifact (#5800)
• c1f7ac5 chore(deps): bump actions/upload-artifact from 6 to 7 (#5804)
• 02f6e6f Replace trivy with syft for license scanning (#5824)
• 5efaa8c chore(deps): bump google.golang.org/grpc (#5820)
• e7c5ae7 feat: append --server-side=false when helm --force or --force-replace flags are passed (#5821)
• 49d730b feat: migrate Helm rendering from v3 to v4 (#5819)
• 4ba284b Update KOTS image dependency tags (#5816)
• 72bba0e fix: add local artifact mirror image to distribute-artifacts command (#5812)
• 70b8aa5 Update KOTS image dependency tags (#5815)
• f8e279b push tag+sha images to the tag location with 'PreserveDigests:true' (#5813)
• bc77c43 chore(ci): upgrade replicated-actions for better cmx error visibility (#5811)
• 6f3a4af Update KOTS image dependency tags (#5814)
• 9625a14 chore(test): various e2e improvements (#5809)
• 1df4c7f chore(test): fix change channel race condition (#5795)
• 078ea3c chore(test): use up-to-date replicatedhq/replicated-actions action (#5808)
• 0146800 chore(test): fix e2e snapshot card not visible (#5807)
• 2463736 Update KOTS image dependency tags (#5806)
• 83bfeba chore(deps): bump github.com/bitnami-labs/sealed-secrets (#5793)
• f123cb7 chore(test): fix regression test failures (#5792)
• e4ff2ac Update README to link to docs instead of archived Sentry Pro example (#5791)
• 3bb11f9 chore(deps): bump github.com/cloudflare/circl (#5789)
• 0cbf35c allow redeploy failed required release with config change only (#5787)