v0.38.0

What's Changed

• refactor: utilize invopop comment feature by @AustinAbro321 in #2781
• fix: detect invalid helm release names by @jamestexas in #2784
• refactor: move gitea code to separate package by @phillebaba in #2785
• fix: add dependabot and disable renovate features by @AustinAbro321 in #2789
• chore(deps): bump github/codeql-action from 3.24.0 to 3.25.15 by @dependabot in #2792
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.4 by @dependabot in #2791
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @dependabot in #2793
• chore(deps): bump docker/login-action from 3.0.0 to 3.3.0 by @dependabot in #2794
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.0 by @dependabot in #2795
• chore(deps): bump k8s.io/component-base from 0.30.0 to 0.30.3 by @dependabot in #2798
• ci: remove unneeded cve checking by @AustinAbro321 in #2802
• chore(deps): bump github.com/mikefarah/yq/v4 from 4.43.1 to 4.44.2 by @dependabot in #2799
• chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #2808
• chore(deps): bump actions/create-github-app-token from 1.9.0 to 1.10.3 by @dependabot in #2809
• chore(deps): bump actions/download-artifact from 4.1.2 to 4.1.8 by @dependabot in #2810
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.7 by @dependabot in #2807
• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #2813
• chore(deps): bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #2811
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @dependabot in #2806
• fix: resolve CVE-2024-41110 by @AustinAbro321 in #2815
• refactor: git package by @phillebaba in #2790
• ci: better named gh jobs by @AustinAbro321 in #2816
• chore(deps): bump actions/dependency-review-action from 4.1.3 to 4.3.4 by @dependabot in #2822
• chore(deps): bump actions/setup-node from 4.0.2 to 4.0.3 by @dependabot in #2821
• chore: move context.TODO to context.Background() (4) by @schristoff in #2749
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.1 to 1.8.7 by @dependabot in #2800
• chore: turn down codecov by @schristoff in #2823
• chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.1 to 1.8.7 by @dependabot in #2812
• refactor: move and test HasImages by @phillebaba in #2831
• fix: disk pressure flakes by @AustinAbro321 in #2832
• chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #2834
• refactor: change isInternal variables to functions by @AustinAbro321 in #2768
• chore: update obsolete versions by @AustinAbro321 in #2830
• refactor: init zarf state by @AustinAbro321 in #2833
• fix: ignore config file not found errors by @AustinAbro321 in #2838
• fix: override tunnel details with user-provided settings by @chaospuppy in #2841
• refactor: move package generation to a local variable by @phillebaba in #2835
• feat: move ZarfPackageConfig to it's own api-versioned package by @AustinAbro321 in #2801
• refactor: replace debug logs with returning errors by @phillebaba in #2777
• refactor: proxy and add tests by @phillebaba in #2843
• chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #2848
• chore(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #2847
• test: add tests for FindImages by @phillebaba in #2850
• test: unit test index sha by @AustinAbro321 in #2844
• chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @dependabot in #2828
• chore: update dos games by @AustinAbro321 in #2845
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.16.0 to 0.17.3 by @dependabot in #2826
• chore(deps): bump github.com/pterm/pterm from 0.12.78 to 0.12.79 by @dependabot in #2854
• fix: install grype during release by @phillebaba in #2857
• fix: import paths to avoid cycle by @phillebaba in #2861

New Contributors

• @jamestexas made their first contribution in #2784

Full Changelog: v0.37.0...v0.38.0