What's Changed

• build(deps): bump chainguard.dev/apko from 1.2.16 to 1.2.17 in the gomod group by @dependabot[bot] in #2571
• feat(git-checkout): log resolved clone URL after successful clone by @jmeridth in #2572

Full Changelog: v0.53.3...v0.54.0

What's Changed

• fix(qemu): pass SLIRP DNS address via kernel cmdline when QEMU_NET_CIDR is set by @jmeridth in #2570

Full Changelog: v0.53.2...v0.53.3

What's Changed

• build(deps): bump the gomod group across 1 directory with 12 updates by @dependabot[bot] in #2567
• build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 in the gomod group by @dependabot[bot] in #2569

Full Changelog: v0.53.1...v0.53.2

What's Changed

• fix(qemu): skip empty QEMU_NET_CIDR instead of erroring by @jmeridth in #2568

Full Changelog: v0.53.0...v0.53.1

What's Changed

• fix(renovate): bump git-checkout regardless of tag if there is only one by @vishal-chdhry in #2562
• chore(source): allow GitHub verified signatures by @jmeridth in #2565
• ci: remove stale wolfi-presubmit package matrix entries by @jmeridth in #2566
• feat(qemu): add QEMU_NET_CIDR to override SLIRP internal network by @jmeridth in #2564

New Contributors

• @jmeridth made their first contribution in #2565

Full Changelog: v0.52.1...v0.53.0

What's Changed

• git-checkout: guard branch+expected-commit against stale/diverged commits by @stevebeattie in #2555
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #2554
• chore(pipelines/xcover): add scope parameter by @maxgio92 in #2558
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the actions group by @dependabot[bot] in #2560

Full Changelog: v0.52.0...v0.52.1

What's Changed

• feat(pipelines/xcover): add include-functions by @maxgio92 in #2551

Full Changelog: v0.51.0...v0.52.0

What's Changed

• go/build/v2: updated go/build pipeline by @xnox in #2538
• chore(config): also create and upload source tarballs of gitlab repositories by @sil2100 in #2511
• feat: Add variable substitution for licenses by @EyeCantCU in #2530
• ci: allow production.cloudfront.docker.com in harden-runner egress by @astrojerms in #2552

Full Changelog: v0.50.8...v0.51.0

What's Changed

• fix(maven): mirror only Maven Central, not all repositories by @xnox in #2524
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2534
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.1 by @dependabot[bot] in #2536
• fix(docker): use per-invocation unique image tag to avoid concurrent race by @dustinkirkland in #2532
• build(deps): bump the gomod group across 1 directory with 11 updates by @dependabot[bot] in #2541
• fix(pipelines/strip): Don't try to strip ELFs for non-native platforms by @EyeCantCU in #2542

New Contributors

• @dustinkirkland made their first contribution in #2532

Full Changelog: v0.50.7...v0.50.8

What's Changed

• chore: Bump go to 1.26.2 by @EyeCantCU in #2528
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in the actions group across 1 directory by @dependabot[bot] in #2526

Full Changelog: v0.50.6...v0.50.7