Dependency Bumps

• golang/go has been upgraded to v1.24.6.
• go/mod has been upgraded to v0.20.0.
• go/oauth2 has been upgraded to v0.27.0.
• go/sync has been upgraded to v0.3.0.
• go/tools has been upgraded to v0.13.0.

Dependency Bumps

• golang/go has been upgraded to v1.24.6.

This release contained no user-facing changes.

This release contained no user-facing changes.

Dependency Bumps

• google/protobuf has been upgraded to v1.35.1.
• onsi/gomega has been upgraded to v1.35.1.
• go.uber.org/zap has been upgraded to v1.27.0.

This release contained no user-facing changes.

This release contained no user-facing changes.

Fixes

• Fix a bug that results in duplicate versions in the output of the changeloggenutils GenerateJSON function when the label is "alpine" (#537)

Breaking Changes

• Remove unused code related to generating sarif security scans and uploading them to Github which relied on a dependency with a known CVE (#534)

Fixes

• Fix a bug that caused issues to be written for releases without vulnerabilities when running security scans (#532)

Dependency Bumps

• golang/go has been upgraded to v1.23.0.
• onsi/ginkgo/v2 has been upgraded to v2.19.0.
• onsi/gomega has been upgraded to v1.33.1.
• google/pubsub has been upgraded to v1.33.0.
• google/storage has been upgraded to v1.30.1.
• golang/protobuf has been upgraded to v1.5.4.
• spf13/cobra has been upgraded to v1.8.1.
• uber/zap has been upgraded to v1.26.0.
• golang/x/mod has been upgraded to v0.20.0.
• golang/x/oauth2 has been upgraded to v0.21.0.
• golang/x/sync has been upgraded to v0.8.0.
• golang/x/tools has been upgraded to v0.22.0.
• google/api has been upgraded to v0.126.0.
• google/grpc has been upgraded to v1.65.0.
• google/protobuf has been upgraded to v1.34.2.

Breaking Changes

• Upgrade project dependencies across the board. May present issues for users due to our requirements, so marked as breaking. (solo-io/gloo#9819)