What's Changed
- Add TeamCity support for VCS augmentation by @vpetersson-bot in #395
- fix: repair the GitLab entrypoint and drop deprecated SBOM_VERSION by @vpetersson-bot in #399
- chore(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #392
- chore(deps-dev): bump ruff from 0.16.3 to 0.16.4 in the uv group by @dependabot[bot] in #391
- chore(deps-dev): bump @types/bun from 1.3.14 to 1.4.0 in the bun group by @dependabot[bot] in #390
- docs: slim the README down to a quick start and point at the docs site by @vpetersson-bot in #398
- Stop recording absolute paths in the audit trail by @vpetersson-bot in #400
- Carry CI-platform specifics in a platform plugin by @vpetersson-bot in #401
- Give Jenkins, CircleCI and Travis CI platforms of their own by @vpetersson-bot in #402
- Add document upload (DOCUMENT_FILE) by @vpetersson-bot in #406
- build: move the Dockerfile uv pin to 0.12.10 with the group bump (supersedes #405) by @vpetersson-bot in #414
- chore(deps): bump the uv group across 1 directory with 8 updates by @dependabot[bot] in #405
- Write SPDX 3 documents that pass the schema we ship, and stop losing what the producer wrote by @aurangzaib048 in #407
- Check SPDX 3.0 documents instead of waving them through by @aurangzaib048 in #408
- Stop advertising a spec version nothing generates by @aurangzaib048 in #410
- Say SPDX 3.1 is unsupported, and read the version the document states by @aurangzaib048 in #409
- Hold the SPDX 3 fixtures to the schema, and run the whole flow over SPDX 3 by @aurangzaib048 in #411
- Separate what the action generates from what it checks by @aurangzaib048 in #412
- Sanitize the licence expressions an SPDX 3 document actually has by @aurangzaib048 in #413
- Stop the mypy hook failing on clean master by @aurangzaib048 in #420
- Bump version to 26.9.0 by @vpetersson-bot in #422
- build(deps): bump the uv group, and sync the Dockerfile uv pin by @vpetersson-bot in #421
- build(deps-dev): bump @types/bun from 1.4.0 to 1.4.2 in the bun group by @dependabot[bot] in #417
- build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #418
- fix(tests): the suite can no longer send events to the live Sentry project by @vpetersson-bot in #424
- docs(agents): require a diff audit before committing by @vpetersson-bot in #426
- fix: pair the licence repair with the CycloneDX parse by @vpetersson-bot in #425
- feat(circleci): read the release tag and repository from the job by @vpetersson-bot in #429
- build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #428
- build(deps): bring the uv and cosign pins current by @vpetersson-bot in #427
Full Changelog: v26.8.0...v26.9.0