SBOMscanner v0.12.0

• docs: update nodescan rfc (#1269)
• docs: update nodescan rfc (#1207)
• docs(rfc): add OTel instrumentation RFC (#1221)
• docs: move from readme to doc site (#1261)
• test(storage): add cluster-scoped store test (#1258)
• ci: pin govulncheck (#1260)
• chore: helm annotation keep resources (#1257)
• fix: mark NodeScanJob as failed when referenced Node is missing (#1235)
• test: add missing tests for transform functions (#1239)
• refactor(storage): remove ClusterScopedObjectRepository in favor of GenericObjectRepository (#1237)
• test(controller): cover remaining indexer functions (#1236)
• perf(controller): tune nodescan controller cache (#1234)

🚀 Features

• feat(charts)helm nodescan toggle (#1275)
• feat: use NodeScanConfiguration snapshot instead of live data (#1263)
• feat(api): default SkipPatterns to skip container-runtime state (#1249)
• feat(controller): add enabled/disabled to NodeScanConfiguration (#1238)
• feat: node scan (#944)

🐛 Bug Fixes

• fix(deps): update k8s.io/utils digest to be93311 (#1246)
• fix(deps): update k8s.io/kube-openapi digest to 8f3fa49 (#1245)

🧰 Maintenance

• build(deps): pin oras-go to non-vulnerable version (#1276)
• build(deps): bump oras go to 2.6.1 (#1274)
• build(deps): update all dependencies updates (#1270)
• chore: bump github.com/sigstore/timestamp-authority/v2 from 2.0.6 to 2.1.0 in the go_modules group across 1 directory (#1268)
• fix(deps): update k8s.io/utils digest to be93311 (#1246)
• chore: bump github.com/sigstore/rekor from 1.5.1 to 1.5.2 in the go_modules group across 1 directory (#1266)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1267)
• chore: bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in the go_modules group across 1 directory (#1265)
• fix(deps): update k8s.io/kube-openapi digest to 8f3fa49 (#1245)
• build(deps): update all dependencies updates (#1247)
• chore: bump github.com/docker/cli from 29.5.3+incompatible to 29.6.0+incompatible (#1243)
• ci: disable dependabot (#1262)
• build(deps): update all dependencies updates (major) (#1248)
• chore: bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.42.0 to 0.43.0 (#1254)
• chore: bump modernc.org/sqlite from 1.52.0 to 1.53.0 (#1255)
• chore: bump github.com/containerd/containerd/v2 from 2.3.1 to 2.3.2 (#1259)
• chore: bump github.com/testcontainers/testcontainers-go/modules/registry from 0.42.0 to 0.43.0 (#1256)
• chore: bump actions/checkout from 6.0.3 to 7.0.0 (#1242)
• chore: bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#1252)
• chore: bump release-drafter/release-drafter from 7.3.1 to 7.4.0 (#1240)
• chore: Helm chart 0.12.0-alpha.1 release (#1233)
• chore: Helm chart 0.11.3 release (#1232)

SBOMscanner v0.12.0-alpha.1

🚀 Features

• feat: node scan (#944)

🧰 Maintenance

• chore: Helm chart 0.11.3 release (#1232)

SBOMscanner v0.11.3

• docs(troubleshooting): add common problems guide with Docker Hub rate limit (#1191)
• deps(go): update Go to 1.26.4 version (#1205)
• docs: document caBundle and insecure registry settings in quickstart (#1185)
• docs: clarify workload owner kinds supported by WorkloadScan (#1181)
• feat: add SeveritySource to VulnerabilityReport (#1135)
• ci: fix zizmor warnings (#1159)

🚀 Features

• feat(debug): auto-discover release, collect cnpg + extra CRs (#1190)
• feat(controller): reject ScanJob creation when referenced Registry does not exist (#1184)

🐛 Bug Fixes

• fix(deps): update github.com/aquasecurity/trivy-db digest to 15b95f4 (#1227)
• fix(deps): update k8s.io/kube-openapi digest to 865597e (#1209)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 11b0c9f (#1186)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 9ad23f1 (#1164)
• fix(deps): update k8s.io/kube-openapi digest to aa012df (#1165)

🧰 Maintenance

• fix(deps): update github.com/aquasecurity/trivy-db digest to 15b95f4 (#1227)
• build(deps): bump x dependencies (#1231)
• build(deps): update all dependencies updates (#1228)
• chore: bump github.com/stephenafamo/bob from 0.45.0 to 0.46.0 (#1225)
• chore: bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 (#1226)
• build(deps): update kubernetes to v0.36.2 (#1229)
• build(deps): update all dependencies updates to v5 (#1230)
• build(deps): update all dependencies updates to v0.71.0 (#1210)
• chore: bump golang.org/x/sync from 0.20.0 to 0.21.0 (#1222)
• chore: instruct renovate to not update replace directives in go.mod (#1176)
• fix(deps): update k8s.io/kube-openapi digest to 865597e (#1209)
• build(deps): update all dependencies updates (major) (#1211)
• chore: bump codecov/codecov-action from 6.0.1 to 7.0.0 (#1212)
• chore: bump modernc.org/sqlite from 1.51.0 to 1.52.0 (#1213)
• chore: bump github/codeql-action from 4.36.1 to 4.36.2 (#1208)
• chore: bump github.com/docker/cli from 29.5.2+incompatible to 29.5.3+incompatible (#1196)
• chore: bump github/codeql-action from 4.36.0 to 4.36.1 (#1193)
• chore: bump updatecli/updatecli-action from 3.2.0 to 3.3.0 (#1194)
• chore: bump actions/checkout from 6.0.2 to 6.0.3 (#1195)
• chore: bump golang from 1.26.3 to 1.26.4 (#1197)
• chore: bump github.com/nats-io/nats-server/v2 from 2.14.1 to 2.14.2 (#1198)
• chore: bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0 (#1199)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 11b0c9f (#1186)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1187)
• chore: bump modernc.org/sqlite from 1.50.1 to 1.51.0 (#1183)
• chore: bump github.com/stephenafamo/bob from 0.44.0 to 0.45.0 (#1182)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1175)
• chore: bump release-drafter/release-drafter from 7.3.0 to 7.3.1 (#1168)
• build(deps): update all dependencies updates (#1166)
• chore: bump docker/build-push-action from 7.1.0 to 7.2.0 (#1161)
• chore: bump github.com/stephenafamo/bob from 0.43.0 to 0.44.0 (#1162)
• chore(deps): update github.com/kubewarden/trivy digest to fc1e46f (#1163)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 9ad23f1 (#1164)
• chore: bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#1160)
• fix(deps): update k8s.io/kube-openapi digest to aa012df (#1165)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1167)
• chore: bump github.com/containerd/containerd from 1.7.30 to 1.7.32 (#1157)
• chore: bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible (#1152)
• chore: bump github.com/containerd/containerd/v2 from 2.2.2 to 2.3.1 (#1153)
• chore: Helm chart 0.11.2 release (#1150)

SBOMscanner v0.11.2

• ci: add trivy scan (#1128)
• docs: node scan rfc (#922)
• ci: update workflows for self-hosted runner (#761)

🐛 Bug Fixes

• fix(deps): update github.com/aquasecurity/trivy-db digest to 5047f67 (#1143)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 2034dd8 (#1132)
• fix(deps): update k8s.io/kube-openapi digest to ef417d0 (#1133)

🧰 Maintenance

• chore: bump the kubernetes group across 1 directory with 7 updates (#1089)
• chore: switch trivy fork from alegrey91 to kubewarden (#1149)
• chore: bump github.com/nats-io/nats-server/v2 from 2.14.0 to 2.14.1 (#1148)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 5047f67 (#1143)
• build(deps): update all dependencies updates (#1144)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1145)
• chore: bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#1142)
• build(deps): update dependency golangci/golangci-lint to v2.12.1 (#1092)
• chore: bump zizmorcore/zizmor-action from 0.5.4 to 0.5.6 (#1137)
• chore: bump codecov/codecov-action from 6.0.0 to 6.0.1 (#1136)
• chore: bump github/codeql-action from 4.35.4 to 4.35.5 (#1138)
• chore: bump github.com/onsi/gomega from 1.40.0 to 1.41.0 (#1139)
• chore: bump github.com/docker/cli from 29.5.0+incompatible to 29.5.1+incompatible (#1140)
• chore: bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 (#1141)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 2034dd8 (#1132)
• fix(deps): update k8s.io/kube-openapi digest to ef417d0 (#1133)
• chore: bump zizmorcore/zizmor-action from 0.5.3 to 0.5.4 (#1130)
• chore: bump github.com/docker/cli from 29.4.3+incompatible to 29.5.0+incompatible (#1131)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1134)
• chore: bump updatecli/updatecli-action from 3.1.3 to 3.2.0 (#1129)
• chore: bump github.com/google/cel-go from 0.28.0 to 0.28.1 (#1127)
• chore: Helm chart 0.11.1 release (#1126)

SBOMscanner v0.11.1

• feat(helm): add default VEXHub configurations (#1105)
• deps(go): update Go to 1.26.3 version (#1122)
• docs: generate ref crd documentation (#1100)

🐛 Bug Fixes

• fix(deps): update k8s.io/utils digest to ff6756f (#1116)
• fix(deps): update k8s.io/kube-openapi digest to b540ad9 (#1115)

🧰 Maintenance

• chore: bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#1124)
• chore: bump modernc.org/sqlite from 1.50.0 to 1.50.1 (#1125)
• chore: bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 (#1123)
• fix(deps): update k8s.io/utils digest to ff6756f (#1116)
• chore: bump golang from 1.26.2 to 1.26.3 (#1106)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1117)
• fix(deps): update k8s.io/kube-openapi digest to b540ad9 (#1115)
• chore(deps): update github.com/alegrey91/trivy digest to 920fad2 - autoclosed (#1114)
• chore: bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#1101)
• chore: bump github/codeql-action from 4.35.3 to 4.35.4 (#1108)
• chore: bump release-drafter/release-drafter from 7.2.1 to 7.3.0 (#1107)
• chore: bump github.com/nats-io/nats.go from 1.51.0 to 1.52.0 (#1103)
• chore: bump github.com/docker/cli from 29.4.2+incompatible to 29.4.3+incompatible (#1102)
• chore: Helm chart 0.11.0 release (#1099)

SBOMscanner v0.11.0

• fix(ci): sbom digest parsing (#1097)
• docs(user-guide): add ScanJob target documentation (#1096)
• ci: harden run blocks against template injection (#1079)
• fix(storage): wait for NATS subscription before publishing in watcher (#1094)
• ci(govulncheck): upload results as SARIF to the security tab rather than failing (#1081)
• fix: several typos and old names (#1076)
• docs: use absolute links in README.md (#1074)
• fix: publisher formatting (#1063)
• fix: stream name for nats queue (#1025)
• chore: Helm chart support Rancher v2.15 (#1044)
• ci: add mcp image bump to helm chart update (#1023)
• build: bump to golang 1.26.2 (#1020)
• ci: govulncheck use the right version of go (#1018)
• ci: govulncheck ensure the proper version of Go is used (#1015)
• ci: allow jsonv2 when using govulncheck (#1013)
• ci: fix zizmor complain (#1012)
• ci: fix govulncheck GHA (#1011)

🚀 Features

• feat(helm): expose CNPG Cluster imageName (#1075)
• feat: ScanJob target (#1056)
• feat: mcp server (#1004)

🐛 Bug Fixes

• fix(deps): update github.com/aquasecurity/trivy-db digest to bd11dd4 (#1090)
• fix(deps): update k8s.io/kube-openapi digest to b7f5293 (#1091)
• fix(storage): avoid dropping ADD events after a concurrent store delete (#1082)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 722777b (#1068)
• fix(deps): update k8s.io/kube-openapi digest to ec9c827 (#1051)
• fix(deps): update k8s.io/kube-openapi digest to 16be699 (#992)

🧰 Maintenance

• chore: Helm chart 0.11.0-rc.1 release (#1098)
• chore(helm): add nameOverride and fullnameOverride value placeholders (#1095)
• chore: bump github.com/stephenafamo/bob from 0.42.0 to 0.43.0 (#1086)
• chore: bump github.com/docker/cli from 29.4.1+incompatible to 29.4.2+incompatible (#1088)
• chore: bump release-drafter/release-drafter from 7.2.0 to 7.2.1 (#1084)
• chore: bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0 (#1085)
• fix(deps): update github.com/aquasecurity/trivy-db digest to bd11dd4 (#1090)
• fix(deps): update k8s.io/kube-openapi digest to b7f5293 (#1091)
• chore: bump github.com/nats-io/nats-server/v2 from 2.12.8 to 2.14.0 (#1087)
• build(deps): update all dependencies updates (major) (#1093)
• build(deps): update all dependencies updates (#1069)
• chore: bump modernc.org/sqlite from 1.49.1 to 1.50.0 (#1077)
• chore: bump github.com/nats-io/nats-server/v2 from 2.12.7 to 2.12.8 (#1080)
• chore: bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 (#1078)
• chore: bump github.com/aws/smithy-go from 1.25.0 to 1.25.1 (#1067)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1070)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 722777b (#1068)
• fix(deps): update k8s.io/kube-openapi digest to ec9c827 (#1051)
• build(deps): update all dependencies updates (#1053)
• chore: bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 (#1050)
• chore: bump modernc.org/sqlite from 1.48.2 to 1.49.1 (#1058)
• chore: bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 (#1059)
• chore: bump updatecli/updatecli-action from 3.1.1 to 3.1.3 (#1060)
• chore: bump sigs.k8s.io/e2e-framework from 0.6.0 to 0.7.0 (#1061)
• chore: bump github.com/docker/cli from 29.4.0+incompatible to 29.4.1+incompatible (#1062)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1054)
• chore: bump the kubernetes group across 1 directory with 6 updates (#1045)
• chore: bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (#1048)
• chore: bump github.com/nats-io/nats-server/v2 from 2.12.6 to 2.12.7 (#1042)
• chore: bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#1040)
• chore: bump actions/cache from 5.0.4 to 5.0.5 (#1041)
• chore: bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 (#1039)
• build(deps): update all dependencies updates (major) (#994)
• chore: bump actions/github-script from 8.0.0 to 9.0.0 (#1029)
• chore: bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 (#1035)
• build(deps): update all dependencies updates (#1037)
• chore: bump github.com/hashicorp/go-getter from 1.8.5 to 1.8.6 (#1036)
• chore: Helm chart 0.11.0 release (#1022)
• build(deps): update module github.com/modelcontextprotocol/go-sdk to v1.4.1 [security] (#1017)
• chore(deps): update github.com/alegrey91/trivy digest to bda9710 (#969)
• chore: bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 (#1005)
• build(deps): update all dependencies updates (#993)
• fix(deps): update k8s.io/kube-openapi digest to 16be699 (#992)
• chore: bump modernc.org/sqlite from 1.48.0 to 1.48.1 (#995)
• chore: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.0 to 1.99.0 (#1001)
• chore: bump golang from 1.26.1 to 1.26.2 (#1002)
• chore: bump github.com/google/cel-go from 0.27.0 to 0.28.0 (#1003)
• chore: Helm chart 0.10.4 release (#997)

SBOMscanner v0.11.0-rc.1

• fix(ci): sbom digest parsing (#1097)
• docs(user-guide): add ScanJob target documentation (#1096)
• ci: harden run blocks against template injection (#1079)
• fix(storage): wait for NATS subscription before publishing in watcher (#1094)
• ci(govulncheck): upload results as SARIF to the security tab rather than failing (#1081)
• fix: several typos and old names (#1076)
• docs: use absolute links in README.md (#1074)
• fix: publisher formatting (#1063)
• fix: stream name for nats queue (#1025)
• chore: Helm chart support Rancher v2.15 (#1044)
• ci: add mcp image bump to helm chart update (#1023)
• build: bump to golang 1.26.2 (#1020)
• ci: govulncheck use the right version of go (#1018)
• ci: govulncheck ensure the proper version of Go is used (#1015)
• ci: allow jsonv2 when using govulncheck (#1013)
• ci: fix zizmor complain (#1012)
• ci: fix govulncheck GHA (#1011)

🚀 Features

• feat(helm): expose CNPG Cluster imageName (#1075)
• feat: ScanJob target (#1056)
• feat: mcp server (#1004)

🐛 Bug Fixes

• fix(deps): update github.com/aquasecurity/trivy-db digest to bd11dd4 (#1090)
• fix(deps): update k8s.io/kube-openapi digest to b7f5293 (#1091)
• fix(storage): avoid dropping ADD events after a concurrent store delete (#1082)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 722777b (#1068)
• fix(deps): update k8s.io/kube-openapi digest to ec9c827 (#1051)
• fix(deps): update k8s.io/kube-openapi digest to 16be699 (#992)

🧰 Maintenance

• chore(helm): add nameOverride and fullnameOverride value placeholders (#1095)
• chore: bump github.com/stephenafamo/bob from 0.42.0 to 0.43.0 (#1086)
• chore: bump github.com/docker/cli from 29.4.1+incompatible to 29.4.2+incompatible (#1088)
• chore: bump release-drafter/release-drafter from 7.2.0 to 7.2.1 (#1084)
• chore: bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0 (#1085)
• fix(deps): update github.com/aquasecurity/trivy-db digest to bd11dd4 (#1090)
• fix(deps): update k8s.io/kube-openapi digest to b7f5293 (#1091)
• chore: bump github.com/nats-io/nats-server/v2 from 2.12.8 to 2.14.0 (#1087)
• build(deps): update all dependencies updates (major) (#1093)
• build(deps): update all dependencies updates (#1069)
• chore: bump modernc.org/sqlite from 1.49.1 to 1.50.0 (#1077)
• chore: bump github.com/nats-io/nats-server/v2 from 2.12.7 to 2.12.8 (#1080)
• chore: bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 (#1078)
• chore: bump github.com/aws/smithy-go from 1.25.0 to 1.25.1 (#1067)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1070)
• fix(deps): update github.com/aquasecurity/trivy-db digest to 722777b (#1068)
• fix(deps): update k8s.io/kube-openapi digest to ec9c827 (#1051)
• build(deps): update all dependencies updates (#1053)
• chore: bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 (#1050)
• chore: bump modernc.org/sqlite from 1.48.2 to 1.49.1 (#1058)
• chore: bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 (#1059)
• chore: bump updatecli/updatecli-action from 3.1.1 to 3.1.3 (#1060)
• chore: bump sigs.k8s.io/e2e-framework from 0.6.0 to 0.7.0 (#1061)
• chore: bump github.com/docker/cli from 29.4.0+incompatible to 29.4.1+incompatible (#1062)
• build(deps): update module github.com/avast/retry-go/v4 to v5 (#1054)
• chore: bump the kubernetes group across 1 directory with 6 updates (#1045)
• chore: bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (#1048)
• chore: bump github.com/nats-io/nats-server/v2 from 2.12.6 to 2.12.7 (#1042)
• chore: bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#1040)
• chore: bump actions/cache from 5.0.4 to 5.0.5 (#1041)
• chore: bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 (#1039)
• build(deps): update all dependencies updates (major) (#994)
• chore: bump actions/github-script from 8.0.0 to 9.0.0 (#1029)
• chore: bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 (#1035)
• build(deps): update all dependencies updates (#1037)
• chore: bump github.com/hashicorp/go-getter from 1.8.5 to 1.8.6 (#1036)
• chore: Helm chart 0.11.0 release (#1022)
• build(deps): update module github.com/modelcontextprotocol/go-sdk to v1.4.1 [security] (#1017)
• chore(deps): update github.com/alegrey91/trivy digest to bda9710 (#969)
• chore: bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 (#1005)
• build(deps): update all dependencies updates (#993)
• fix(deps): update k8s.io/kube-openapi digest to 16be699 (#992)
• chore: bump modernc.org/sqlite from 1.48.0 to 1.48.1 (#995)
• chore: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.0 to 1.99.0 (#1001)
• chore: bump golang from 1.26.1 to 1.26.2 (#1002)
• chore: bump github.com/google/cel-go from 0.27.0 to 0.28.0 (#1003)
• chore: Helm chart 0.10.4 release (#997)

SBOMscanner v0.11.0-alpha1

• build: bump to golang 1.26.2 (#1020)
• ci: govulncheck use the right version of go (#1018)
• ci: govulncheck ensure the proper version of Go is used (#1015)
• ci: allow jsonv2 when using govulncheck (#1013)
• ci: fix zizmor complain (#1012)
• ci: fix govulncheck GHA (#1011)

🚀 Features

• feat: mcp server (#1004)

🐛 Bug Fixes

• fix(deps): update k8s.io/kube-openapi digest to 16be699 (#992)

🧰 Maintenance

• build(deps): update module github.com/modelcontextprotocol/go-sdk to v1.4.1 [security] (#1017)
• chore(deps): update github.com/alegrey91/trivy digest to bda9710 (#969)
• chore: bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 (#1005)
• build(deps): update all dependencies updates (#993)
• fix(deps): update k8s.io/kube-openapi digest to 16be699 (#992)
• chore: bump modernc.org/sqlite from 1.48.0 to 1.48.1 (#995)
• chore: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.0 to 1.99.0 (#1001)
• chore: bump golang from 1.26.1 to 1.26.2 (#1002)
• chore: bump github.com/google/cel-go from 0.27.0 to 0.28.0 (#1003)
• chore: Helm chart 0.10.4 release (#997)

SBOMscanner v0.10.4

• fix(chart): use .Release.Name for NATS TLS cert DNS names (#991)
• ci: add govulncheck GHA (#985)

🧰 Maintenance

• chore: bump docker/login-action from 4.0.0 to 4.1.0 (#989)
• chore: bump github.com/aws/smithy-go from 1.24.2 to 1.24.3 (#990)
• chore: bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#988)
• chore: Helm chart 0.10.3 release (#986)

SBOMscanner v0.10.3

• fix: scanjob hangs when platforms are duplicated (#981)
• test(controller): fix flaky VulnerabilityReport controller test (#982)
• feat(storage): add name and namespace to WorkloadScanVulnerabilityReport (#956)
• fix(ci): skip autolabeler in PR from forks (#967)

🐛 Bug Fixes

• fix: use absolute links in Helm Charts README (#980)

🧰 Maintenance

• chore: bump github.com/moby/buildkit from 0.28.1 to 0.29.0 (#984)
• chore: bump github.com/moby/buildkit from 0.27.1 to 0.28.1 (#966)
• build(deps): update all dependencies updates (#909)
• chore: bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#961)
• build(deps): update all dependencies updates (major) (#970)
• chore: bump modernc.org/sqlite from 1.47.0 to 1.48.0 (#977)
• chore: bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (#978)
• chore: bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0 (#963)
• chore: Helm chart 0.10.2 release (#965)