v0.9.28

What's Changed

• fix: Continue initializing logger if it can't create log files by @gmpinder in #625
• chore(deps): bump indexmap from 2.12.0 to 2.12.1 by @dependabot[bot] in #632
• chore(deps): bump open from 5.3.2 to 5.3.3 by @dependabot[bot] in #630
• chore(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.4 by @dependabot[bot] in #629
• chore(deps): bump requestty from 0.6.1 to 0.6.2 by @dependabot[bot] in #628
• chore(deps): bump os_info from 3.12.0 to 3.13.0 by @dependabot[bot] in #627
• fix: ensure layer annotations for build-chunked-oci are preserved by @HastD in #644
• fix: pull prior build for build-chunked-oci to use as baseline by @HastD in #650
• chore(deps): bump clap from 4.5.51 to 4.5.53 by @dependabot[bot] in #634
• chore(deps): bump clap_complete from 4.5.60 to 4.5.61 by @dependabot[bot] in #636
• chore(deps): bump log from 0.4.28 to 0.4.29 by @dependabot[bot] in #640
• chore(deps): bump uuid from 1.18.1 to 1.19.0 by @dependabot[bot] in #641
• chore(deps): bump actions/checkout from 4.2.2 to 6.0.1 by @dependabot[bot] in #642
• chore(deps): bump astral-sh/setup-uv from 7.1.4 to 7.1.6 by @dependabot[bot] in #646
• chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #647
• chore(ci): add concurrency limits for all jobs by @HastD in #651
• fix(ci): remove concurrency limits from reusable workflows by @HastD in #652
• fix: set compression format in manifest_push by @HastD in #645

Full Changelog: v0.9.27...v0.9.28

v0.9.27

What's Changed

• fix: "or", not "and", in Recipe::should_install_bins by @HastD in #619
• chore(deps): bump jsonschema from 0.30.0 to 0.33.0 by @dependabot[bot] in #528
• chore(deps): bump DeterminateSystems/nix-installer-action from 20 to 21 by @dependabot[bot] in #620
• fix: run build-chunked-oci steps serially by @HastD in #622
• fix: Support more lenient version strings by @gmpinder in #621

Full Changelog: v0.9.26...v0.9.27

v0.9.26

What's Changed

• chore(exports.sh): Export OS_ARCH variable to be from the container… by @fiftydinar in #614
• fix(podman_driver): Attempt to fix podman manifest create failures by @gmpinder in #615
• feat: support rechunking with build-chunked-oci by @HastD in #610
• chore(build_chunked_oci): Clean up and consolidate chunked logic by @gmpinder in #616
• chore(deps): bump sigstore/cosign-installer from 3.9.2 to 4.0.0 by @dependabot[bot] in #609
• chore(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #608
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.13.0 to 1.15.2 by @dependabot[bot] in #607

New Contributors

• @HastD made their first contribution in #610

Full Changelog: v0.9.25...v0.9.26

v0.9.25

What's Changed

• feat(labels): Custom Image Labels by @Zyell in #578
• chore: upgrade sigstore to 0.13 by @RoyalOughtness in #587
• chore: replace serde_yml with serde_yaml_ng by @RoyalOughtness in #586
• chore: upgrade log4rs to 1.4 to drop unmaintained subdep by @RoyalOughtness in #585
• fix: drop unmaintained dep atty by @RoyalOughtness in #584
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #577
• chore(deps): bump astral-sh/setup-uv from 6.8.0 to 7.1.2 by @dependabot[bot] in #589
• chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #588
• chore: Create SECURITY.md by @RoyalOughtness in #590
• fix: mismatched sha and version by @RoyalOughtness in #592
• fix: specify secrets inheritance by @RoyalOughtness in #591
• chore: pin actions references by @RoyalOughtness in #593
• chore(deps): bump regex from 1.11.3 to 1.12.1 by @dependabot[bot] in #575
• chore: set empty top level permissions for all jobs by @RoyalOughtness in #595
• chore(security): Print all digests and sign all images by @gmpinder in #597
• chore: add cosign validation to install.sh by @RoyalOughtness in #598
• chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #579
• feat(iso): Add --web-ui option by @gmpinder in #602
• feat: Enable multi-arch builds by @gmpinder in #518
• feat(security): Support Cosign V3 by @gmpinder in #601
• feat(supplychain): add SLSA provenance generation by @RoyalOughtness in #596

New Contributors

• @Zyell made their first contribution in #578

Full Changelog: v0.9.24...v0.9.25

v0.9.24

What's Changed

• chore: bump cosign to 2.6.1 by @RoyalOughtness in #555
• fix: Move build script logic to generate command by @gmpinder in #558
• fix(auth): Find the correct credentials for inspecting by @gmpinder in #560
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.14.0 to 1.15.1 by @dependabot[bot] in #554
• chore(deps): bump DeterminateSystems/nix-installer-action from 19 to 20 by @dependabot[bot] in #553
• chore(deps): bump indexmap from 2.10.0 to 2.11.4 by @dependabot[bot] in #552
• chore(deps): bump github/codeql-action from 3.29.11 to 3.30.3 by @dependabot[bot] in #546
• chore(deps): bump clap from 4.5.45 to 4.5.48 by @dependabot[bot] in #551
• chore(deps): bump astral-sh/setup-uv from 6.6.0 to 6.7.0 by @dependabot[bot] in #544
• chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #543
• chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 by @dependabot[bot] in #570
• chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #569
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.15.1 to 1.15.2 by @dependabot[bot] in #568
• chore(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @dependabot[bot] in #567
• chore(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in #566
• chore(deps): bump shadow-rs from 1.2.1 to 1.4.0 by @dependabot[bot] in #565
• chore(deps): bump regex from 1.11.2 to 1.11.3 by @dependabot[bot] in #563
• chore: Allow vendoring libgit2 by @gmpinder in #562
• chore(deps): bump tempfile from 3.21.0 to 3.23.0 by @dependabot[bot] in #564
• chore(deps): bump serde_json from 1.0.142 to 1.0.145 by @dependabot[bot] in #541

Full Changelog: v0.9.23...v0.9.24

v0.9.23

What's Changed

• feat: Add bootc support by @gmpinder in #448
• chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #514
• chore(deps): bump serde_json from 1.0.141 to 1.0.142 by @dependabot[bot] in #513
• chore(deps): bump clap from 4.5.41 to 4.5.42 by @dependabot[bot] in #512
• chore(deps): bump shadow-rs from 1.2.0 to 1.2.1 by @dependabot[bot] in #510
• chore(deps): bump tokio from 1.47.0 to 1.47.1 by @dependabot[bot] in #509
• feat: Embed build scripts and extract into temp dir for build by @gmpinder in #516
• chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #517
• chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.13.0 to 1.14.0 by @dependabot[bot] in #521
• chore(deps): bump astral-sh/setup-uv from 6.4.3 to 6.6.0 by @dependabot[bot] in #522
• chore(deps): bump github/codeql-action from 3.29.8 to 3.29.11 by @dependabot[bot] in #523
• chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #524
• chore(deps): bump clap-verbosity-flag from 3.0.3 to 3.0.4 by @dependabot[bot] in #525
• chore(deps): bump tempfile from 3.20.0 to 3.21.0 by @dependabot[bot] in #526
• chore(deps): bump regex from 1.11.1 to 1.11.2 by @dependabot[bot] in #527
• chore(deps): bump thiserror from 2.0.14 to 2.0.16 by @dependabot[bot] in #529
• feat: Add one true optfix by @b- in #515
• chore: bump cosign to 2.6.0 by @RoyalOughtness in #539
• fix: Get podman working for Gitlab builds by @gmpinder in #520
• chore(security): Create scorecard.yml by @gmpinder in #547
• feat: Use oci-client crate for inspecting by @gmpinder in #549

New Contributors

• @b- made their first contribution in #515

Full Changelog: v0.9.22...v0.9.23

v0.9.22

Full Changelog: v0.9.21...v0.9.22

v0.9.21

What's Changed

• fix!: Allow specifying mount type for secrets by @gmpinder in #500
• feat: Add all linux platforms by @gmpinder in #501
• chore(deps): bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in #507
• chore(deps): bump astral-sh/setup-uv from 6.3.1 to 6.4.3 by @dependabot[bot] in #506
• chore(deps): bump tokio from 1.46.1 to 1.47.0 by @dependabot[bot] in #505
• chore(deps): bump DeterminateSystems/nix-installer-action from 18 to 19 by @dependabot[bot] in #497
• chore(deps): bump bon from 3.6.4 to 3.6.5 by @dependabot[bot] in #495
• chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] in #493
• chore(deps): bump rand from 0.9.1 to 0.9.2 by @dependabot[bot] in #494
• chore(deps): bump serde_json from 1.0.140 to 1.0.141 by @dependabot[bot] in #492
• chore(deps): bump DeterminateSystems/flakehub-push from 5 to 6 by @dependabot[bot] in #496

Full Changelog: v0.9.20...v0.9.21

v0.9.20

What's Changed

• chore(deps): bump clap from 4.5.40 to 4.5.41 by @dependabot[bot] in #488
• chore(deps): bump clap_complete_nushell from 4.5.7 to 4.5.8 by @dependabot[bot] in #490
• chore(deps): bump clap_complete from 4.5.54 to 4.5.55 by @dependabot[bot] in #489
• feat: Add ability to mount secrets by @gmpinder in #487
• chore: bump cosign to 2.5.3 by @RoyalOughtness in #491

Full Changelog: v0.9.19...v0.9.20

v0.9.19

What's Changed

• chore(deps): bump DeterminateSystems/nix-installer-action from 17 to 18 by @dependabot in #485
• chore(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @dependabot in #484
• chore(deps): bump reqwest from 0.12.20 to 0.12.22 by @dependabot in #483
• chore(deps): bump indicatif from 0.17.11 to 0.18.0 by @dependabot in #482
• chore(deps): bump tokio from 1.45.1 to 1.46.1 by @dependabot in #481

Full Changelog: v0.9.18...v0.9.19