feat: format v3 (#249)

Format v3 uses a map instead of a list for essential and deprecates the field v3-essential which is only used during the transition from v2 to v3.

bugfix: revert change to transitive dependencies (essential) (#248)

This commit reverts the change in aca3b32 that changed the for loop to
use the new range semantics which was not equivalent because we were
mutating the contents of the array in the loop itself.

A test has been added to detect it.

feat: update to Go-1.23 (#219)

chore: add security policy (#188)

feat: validate manifest before writing (#159)

fix: use TrimPrefix for relative paths (#145)

Use strings.TrimPrefix for relative paths instead of strings.TrimLeft,
as the latter takes in a cutset instead of a prefix substring.

fix: package names can be of length two (#120)

This commit adds support for package names with a minimum length of two.
Previously chisel only supported a minimum length of 3. The limit on the
slice name is kept unchanged.

feat: add support for chisel release format "v1" (#115)

This commits adds support for "v1" which changes the "v1-public-keys"
field into "public-keys". The "chisel-v1" format is still supported.

bugfix: ignore extra fields in yaml (#107)

Ignoring extra fields makes the code forward compatible with changes in
the yaml format, without a version bump being necessary.