What's Changed

• build(deps): bump github.com/sethvargo/go-envconfig from 1.3.1 to 1.4.2 in /hugo2confluence by @dependabot[bot] in #1005
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in /setup-melange by @dependabot[bot] in #1003
• fix(release): create GitHub releases with gh instead of GoReleaser by @rawlingsj in #1006
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in /release-notes by @dependabot[bot] in #1002
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in /boilerplate by @dependabot[bot] in #1001
• build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 by @dependabot[bot] in #1000
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #999

New Contributors

• @rawlingsj made their first contribution in #1006

Full Changelog: v1.6.28...v1.6.29

What's Changed

• build(deps): bump imjasonh/setup-crane from 0.6 to 0.7 in /setup-registry by @dependabot[bot] in #994
• build(deps): bump the actions group across 8 directories with 9 updates by @dependabot[bot] in #992
• build(deps): bump github.com/sethvargo/go-envconfig from 1.3.0 to 1.3.1 in /hugo2confluence by @dependabot[bot] in #995
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in /githubapp-token by @dependabot[bot] in #998
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #997
• build(deps): bump the actions group across 8 directories with 8 updates by @dependabot[bot] in #996

Full Changelog: v1.6.27...v1.6.28

What's Changed

• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /setup-melange by @dependabot[bot] in #988
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /release-notes by @dependabot[bot] in #987
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in /boilerplate by @dependabot[bot] in #986
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #985
• build(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 in /setup-monitoring in the actions group across 1 directory by @dependabot[bot] in #984

Full Changelog: v1.6.26...v1.6.27

What's Changed

• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in /release-notes by @dependabot[bot] in #973
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 by @dependabot[bot] in #972
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #971
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /wolfi-build-pkg by @dependabot[bot] in #982
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /release-notes by @dependabot[bot] in #981
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /inky-build-pkg by @dependabot[bot] in #979
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /melange-build by @dependabot[bot] in #980
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /goimports by @dependabot[bot] in #978
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /gofmt by @dependabot[bot] in #977
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 in /git-tag by @dependabot[bot] in #976
• build(deps): bump chainguard-dev/actions from 1.6.24 to 1.6.25 by @dependabot[bot] in #975
• build(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #974
• group updates for actions when we have patch updates by @cpanato in #983

Full Changelog: v1.6.25...v1.6.26

What's Changed

• Bump pinned tool versions (gitsign, kind, k3d, metallb, terraform, wolfi-act) by @cpanato in #954
• fix(nodiff): generate patch from the checkout dir, not workspace root by @jml in #956
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 by @dependabot[bot] in #957
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /release-notes by @dependabot[bot] in #963
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /wolfi-build-pkg by @dependabot[bot] in #964
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /melange-build by @dependabot[bot] in #962
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /inky-build-pkg by @dependabot[bot] in #961
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /goimports by @dependabot[bot] in #960
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /gofmt by @dependabot[bot] in #959
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /git-tag by @dependabot[bot] in #958
• Bump major tool defaults (helm, argo, istio, knative, k8s) + add CI coverage + dependabot npm/gomod by @cpanato in #955
• build(deps-dev): bump @types/node from 20.19.39 to 25.9.3 in /otel-export by @dependabot[bot] in #966
• build(deps): bump github.com/sethvargo/go-envconfig from 1.1.1 to 1.3.0 in /hugo2confluence by @dependabot[bot] in #965

Full Changelog: v1.6.24...v1.6.25

What's Changed

• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /wolfi-build-pkg by @dependabot[bot] in #950
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /release-notes by @dependabot[bot] in #949
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /melange-build by @dependabot[bot] in #948
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /inky-build-pkg by @dependabot[bot] in #947
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /goimports by @dependabot[bot] in #946
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /gofmt by @dependabot[bot] in #945
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 in /git-tag by @dependabot[bot] in #944
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 by @dependabot[bot] in #943
• build(deps): bump protobufjs from 8.4.0 to 8.6.3 in /otel-export in the npm_and_yarn group across 1 directory by @dependabot[bot] in #951
• bump tf-docs to v0.24.0 and add windows binaries by @cpanato in #953

Full Changelog: v1.6.23...v1.6.24

What's Changed

• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /wolfi-build-pkg by @dependabot[bot] in #942
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /release-notes by @dependabot[bot] in #941
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /melange-build by @dependabot[bot] in #940
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /inky-build-pkg by @dependabot[bot] in #939
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /goimports by @dependabot[bot] in #938
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /gofmt by @dependabot[bot] in #937
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 in /git-tag by @dependabot[bot] in #936
• build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 by @dependabot[bot] in #935

Full Changelog: v1.6.22...v1.6.23

What's Changed

• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in /release-notes by @dependabot[bot] in #929
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 in /wolfi-build-pkg by @dependabot[bot] in #931
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 in /release-notes by @dependabot[bot] in #930
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 in /melange-build by @dependabot[bot] in #928
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 in /inky-build-pkg by @dependabot[bot] in #927
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 in /goimports by @dependabot[bot] in #926
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #923
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 in /gofmt by @dependabot[bot] in #925
• build(deps): bump chainguard-dev/actions from 1.6.20 to 1.6.21 in /git-tag by @dependabot[bot] in #924
• build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 in /release-notes by @dependabot[bot] in #933
• build(deps): bump imjasonh/setup-crane from 0.5 to 0.6 in /setup-registry by @dependabot[bot] in #934
• build(deps): bump actions/setup-go from 6.0.0 to 6.4.0 in /release-notes by @dependabot[bot] in #932
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 by @dependabot[bot] in #922

Full Changelog: v1.6.21...v1.6.22

What's Changed

• Update git tag by @cpanato in #915
• fix release workflow by @cpanato in #921
• build(deps): bump peter-evans/create-pull-request from 5.0.0 to 8.1.1 in /release-notes by @dependabot[bot] in #920
• build(deps): bump actions/checkout from 4.2.2 to 6.0.2 in /release-notes by @dependabot[bot] in #919
• build(deps): bump chainguard-dev/actions from 1.0.2 to 1.6.19 in /release-notes by @dependabot[bot] in #918
• build(deps): bump sigstore/cosign-installer from 3.8.0 to 4.1.2 in /chainguard-install by @dependabot[bot] in #917
• build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.1.1 in /bump-go-version-file by @dependabot[bot] in #916

Full Changelog: v1.6.20...v1.6.21

What's Changed

• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /wolfi-build-pkg by @dependabot[bot] in #900
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /melange-build by @dependabot[bot] in #899
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /gofmt by @dependabot[bot] in #896
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /goimports by @dependabot[bot] in #897
• build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #895
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /inky-build-pkg by @dependabot[bot] in #898
• build(deps): bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #893
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 by @dependabot[bot] in #894
• fix(ci): harden against template injection and credential exposure by @stevebeattie in #901
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in /setup-argo-workflows by @dependabot[bot] in #902
• bump tf-docs by @cpanato in #903
• test-setup-kind: add explicit kvm-available and kvm-unavailable legs. by @mattmoor in #905
• build(deps): bump hashicorp/setup-terraform from 4.0.0 to 4.0.1 in /setup-terraform by @dependabot[bot] in #906
• build(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 by @dependabot[bot] in #908
• build(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @dependabot[bot] in #909
• build(deps): bump protobufjs from 8.0.3 to 8.4.0 in /otel-export in the npm_and_yarn group across 1 directory by @dependabot[bot] in #911
• build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @dependabot[bot] in #910
• build(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 by @dependabot[bot] in #912
• Update Go version from 1.25 to 1.26 by @cpanato in #913
• bump gitsign to release v0.16.0 by @cpanato in #914

Full Changelog: v1.6.19...v1.6.20