v26.9.0

What's Changed

• Add TeamCity support for VCS augmentation by @vpetersson-bot in #395
• fix: repair the GitLab entrypoint and drop deprecated SBOM_VERSION by @vpetersson-bot in #399
• chore(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #392
• chore(deps-dev): bump ruff from 0.16.3 to 0.16.4 in the uv group by @dependabot[bot] in #391
• chore(deps-dev): bump @types/bun from 1.3.14 to 1.4.0 in the bun group by @dependabot[bot] in #390
• docs: slim the README down to a quick start and point at the docs site by @vpetersson-bot in #398
• Stop recording absolute paths in the audit trail by @vpetersson-bot in #400
• Carry CI-platform specifics in a platform plugin by @vpetersson-bot in #401
• Give Jenkins, CircleCI and Travis CI platforms of their own by @vpetersson-bot in #402
• Add document upload (DOCUMENT_FILE) by @vpetersson-bot in #406
• build: move the Dockerfile uv pin to 0.12.10 with the group bump (supersedes #405) by @vpetersson-bot in #414
• chore(deps): bump the uv group across 1 directory with 8 updates by @dependabot[bot] in #405
• Write SPDX 3 documents that pass the schema we ship, and stop losing what the producer wrote by @aurangzaib048 in #407
• Check SPDX 3.0 documents instead of waving them through by @aurangzaib048 in #408
• Stop advertising a spec version nothing generates by @aurangzaib048 in #410
• Say SPDX 3.1 is unsupported, and read the version the document states by @aurangzaib048 in #409
• Hold the SPDX 3 fixtures to the schema, and run the whole flow over SPDX 3 by @aurangzaib048 in #411
• Separate what the action generates from what it checks by @aurangzaib048 in #412
• Sanitize the licence expressions an SPDX 3 document actually has by @aurangzaib048 in #413
• Stop the mypy hook failing on clean master by @aurangzaib048 in #420
• Bump version to 26.9.0 by @vpetersson-bot in #422
• build(deps): bump the uv group, and sync the Dockerfile uv pin by @vpetersson-bot in #421
• build(deps-dev): bump @types/bun from 1.4.0 to 1.4.2 in the bun group by @dependabot[bot] in #417
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #418
• fix(tests): the suite can no longer send events to the live Sentry project by @vpetersson-bot in #424
• docs(agents): require a diff audit before committing by @vpetersson-bot in #426
• fix: pair the licence repair with the CycloneDX parse by @vpetersson-bot in #425
• feat(circleci): read the release tag and repository from the job by @vpetersson-bot in #429
• build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #428
• build(deps): bring the uv and cosign pins current by @vpetersson-bot in #427

Full Changelog: v26.8.0...v26.9.0