v0.1.4

What's Changed

• Stop releasing a brew formula to stacklok/tap by @rdimitrov in #202

Full Changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

• Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #199
• Bump github.com/moby/buildkit from 0.15.2 to 0.16.0 by @dependabot in #200
• Patch 3 by @joergi in #201

New Contributors

• @joergi made their first contribution in #201

Full Changelog: v0.1.2...v0.1.3

v0.1.2

What's Changed

• Output certificate as part of frizbee release by @JAORMX in #196
• Bump anchore/sbom-action from 0.17.1 to 0.17.2 by @dependabot in #197
• Add cert string to goreleaser configuration by @JAORMX in #198

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• Use unchanging version tag in tests by @eleftherias in #187
• Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @eleftherias in #188
• Bump github.com/moby/buildkit from 0.15.0 to 0.15.1 by @dependabot in #185
• Bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #189
• Bump golang.org/x/sync from 0.7.0 to 0.8.0 by @dependabot in #190
• Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #191
• Bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #192
• Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #193
• Bump anchore/sbom-action from 0.17.0 to 0.17.1 by @dependabot in #194
• Bump github.com/moby/buildkit from 0.15.1 to 0.15.2 by @dependabot in #195

New Contributors

• @eleftherias made their first contribution in #187

Full Changelog: v0.1.0...v0.1.1

v0.1.0

What's Changed

• Bump github.com/moby/buildkit from 0.14.0 to 0.14.1 by @dependabot in #162
• Add readme entry pointing to the github action by @lukehinds in #163
• Bump buf hashes again by @jhrozek in #166
• Update Contributor License Agreement link in CONTRIBUTING.md by @staceypotter in #165
• Update Contributing & Community section in README.md by @staceypotter in #164
• Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #169
• Bump actions/download-artifact from 4.1.7 to 4.1.8 by @dependabot in #168
• Bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in #170
• Bump anchore/sbom-action from 0.16.0 to 0.16.1 by @dependabot in #171
• Bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by @dependabot in #172
• Bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #173
• Bump github.com/moby/buildkit from 0.14.1 to 0.15.0 by @dependabot in #174
• docs: update to use core tap by @chenrui333 in #176
• chore: improve release binary by @chenrui333 in #177
• Bump slsa-framework/slsa-verifier from 2.5.1 to 2.6.0 by @dependabot in #179
• Bump anchore/sbom-action from 0.16.1 to 0.17.0 by @dependabot in #178
• Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #180
• Only ignore main and master, not all branches when pinning actions by @jhrozek in #181
• Fix the default configuration note in README by @jhrozek in #182

New Contributors

• @lukehinds made their first contribution in #163
• @staceypotter made their first contribution in #165
• @chenrui333 made their first contribution in #176

Full Changelog: v0.0.20...v0.1.0

v0.0.20

What's Changed

• Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #152
• Fix unit test hash reference and bump cobra and go-containerregistry by @rdimitrov in #156
• Bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @dependabot in #160
• Add option to filter image names or tags, parser fixes by @jhrozek in #159
• Always ignore the scratch image even with an empty config by @jhrozek in #161

Full Changelog: v0.0.19...v0.0.20

v0.0.19

What's Changed

• Bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 by @dependabot in #141
• Bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @dependabot in #142
• Fix version variable path in goreleaser config by @JAORMX in #144
• Update goreleaser to v2 by @rdimitrov in #145
• Rename folder to directory field by @rdimitrov in #146
• Fix missing ldflags while releasing by @rdimitrov in #147

Full Changelog: v0.0.16...v0.0.19

v0.0.16

What's Changed

Breaking

• Frizbee refactoring - support for Dockerfile, docker:// actions, etc. by @rdimitrov in #139

Other

• Bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #111
• Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #110
• Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #112
• Bump expected hashes of checkout@v4 to 4.1.3 by @jhrozek in #116
• Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #114
• Bump actions/download-artifact from 4.1.5 to 4.1.6 by @dependabot in #115
• Bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0 by @dependabot in #113
• Bump the expected hash of buf-setup-action by @jhrozek in #120
• Bump actions/download-artifact from 4.1.6 to 4.1.7 by @dependabot in #119
• Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #118
• Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in #117
• act checksum bump by @jhrozek in #122
• Bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @dependabot in #123
• Bump anchore/sbom-action from 0.15.10 to 0.15.11 by @dependabot in #121
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #124
• Bump golangci/golangci-lint-action from 5.1.0 to 6.0.0 by @dependabot in #126
• Bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 by @dependabot in #128
• Add Trivy repository scan configuration by @stacklokbot in #129
• Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #127
• Bump aquasecurity/trivy-action from 0.16.1 to 0.21.0 by @dependabot in #136
• Bump anchore/sbom-action from 0.15.11 to 0.16.0 by @dependabot in #135
• Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 by @dependabot in #132
• Bump actions/checkout from 4.1.1 to 4.1.6 by @dependabot in #134
• Bump coverallsapp/github-action from 2.2.3 to 2.3.0 by @dependabot in #131

New Contributors

• @rdimitrov made their first contribution in #139

Full Changelog: v0.0.15...v0.0.16

v0.0.15

What's Changed

• Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #107
• GitHub Actions: Don't call GH API if action is already commit-referenced by @JAORMX in #108
• Fix golangci-lint output configuration by @JAORMX in #109

Full Changelog: v0.0.14...v0.0.15

v0.0.14

What's Changed

• Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @dependabot in #85
• Bump anchore/sbom-action from 0.15.7 to 0.15.8 by @dependabot in #84
• Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #87
• Bump actions/download-artifact from 4.1.1 to 4.1.2 by @dependabot in #86
• Bump arduino/setup-task from 1.0.3 to 2.0.0 by @dependabot in #88
• Bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 by @dependabot in #89
• Add coverage support by @evankanderson in #90
• Bump coverallsapp/github-action from e5e2507fa218d2031f39816cd7d078ebd1f1a6c6 to 3dfc5567390f6fa9267c0ee9c251e4c8c3f18949 by @dependabot in #91
• Add badges to frizbee by @evankanderson in #92
• Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #97
• Fix unit tests by upgrading the buf hash by @JAORMX in #105
• Bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #104
• Bump anchore/sbom-action from 0.15.8 to 0.15.10 by @dependabot in #103
• Bump slsa-framework/slsa-verifier from 2.4.1 to 2.5.1 by @dependabot in #102
• Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #99
• Bump actions/download-artifact from 4.1.2 to 4.1.4 by @dependabot in #94
• Bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #98
• Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #95
• Bump slsa-framework/slsa-github-generator from 1.9.0 to 1.10.0 by @dependabot in #101
• Upgrade go-github to v61 by @JAORMX in #106

Full Changelog: v0.0.13...v0.0.14