Release v0.52.0

What's Changed

• feat(pipelines/xcover): add include-functions by @maxgio92 in #2551

Full Changelog: v0.51.0...v0.52.0

Release v0.51.0

What's Changed

• go/build/v2: updated go/build pipeline by @xnox in #2538
• chore(config): also create and upload source tarballs of gitlab repositories by @sil2100 in #2511
• feat: Add variable substitution for licenses by @EyeCantCU in #2530
• ci: allow production.cloudfront.docker.com in harden-runner egress by @astrojerms in #2552

Full Changelog: v0.50.8...v0.51.0

Release v0.50.8

What's Changed

• fix(maven): mirror only Maven Central, not all repositories by @xnox in #2524
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2534
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.1 by @dependabot[bot] in #2536
• fix(docker): use per-invocation unique image tag to avoid concurrent race by @dustinkirkland in #2532
• build(deps): bump the gomod group across 1 directory with 11 updates by @dependabot[bot] in #2541
• fix(pipelines/strip): Don't try to strip ELFs for non-native platforms by @EyeCantCU in #2542

New Contributors

• @dustinkirkland made their first contribution in #2532

Full Changelog: v0.50.7...v0.50.8

Release v0.50.7

What's Changed

• chore: Bump go to 1.26.2 by @EyeCantCU in #2528
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in the actions group across 1 directory by @dependabot[bot] in #2526

Full Changelog: v0.50.6...v0.50.7

Release v0.50.6

What's Changed

• fix(ci): harden against template injection and credential exposure by @stevebeattie in #2514
• linter: validate cfg.Package.Version against path traversal in saveLintResults by @antitree in #2515
• build(deps): bump github.com/chainguard-dev/yam from 0.2.57 to 0.2.58 in the gomod group across 1 directory by @dependabot[bot] in #2516
• Add linter to complain about shipping libtool linker files. by @smoser in #2520

Full Changelog: v0.50.5...v0.50.6

Release v0.50.5

What's Changed

• chore(workflows): add tcp.dl.google.com allowed endpoint by @stevebeattie in #2509
• build(deps): bump the gomod group with 3 updates by @dependabot[bot] in #2510

Full Changelog: v0.50.4...v0.50.5

Release v0.50.4

What's Changed

• Bump apko to v1.2.9 by @codysoyland in #2506
• build(deps): bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in #2507
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2505

Full Changelog: v0.50.3...v0.50.4

Release v0.50.3

What's Changed

• Update apko to 1.2.7 to pick up bug fixes by @codysoyland in #2499

New Contributors

• @codysoyland made their first contribution in #2499

Full Changelog: v0.50.2...v0.50.3

Release v0.50.2

What's Changed

• build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 by @dependabot[bot] in #2490
• build(deps): bump the actions group with 2 updates by @dependabot[bot] in #2493
• Bump apko to v1.2.6 by @markusthoemmes in #2495

Full Changelog: v0.50.1...v0.50.2

Release v0.50.1

What's Changed

• fix(qemu): fix CPU/Memory resource precedence by @egibs in #2489

Full Changelog: v0.50.0...v0.50.1