What's Changed

This is a re-release of 0.28.1 with an updated CI workflow that builds and publishes container images to the default registry.

What's Changed

Enhancements:

• backport Go 1.25 support
• dependency version bumps (Dockerfile, requirements.txt)

Bug fixes:

• backport Go vendor directories handling in git submodules

Full Changelog: 0.28.0...0.28.1

What's Changed

Features

• Implement pip platform filtering by @slimreaper35 in #1143

Improvements

• Bump our minimum required version of Python from 3.9 -> 3.10 by @eskultety in #1167
• [docs]: Add missing cargo permissive mode case by @slimreaper35 in #1168
• [Dockerfile]: Optimize dependencies for storage by @eskultety in #1175
• [gomod] Change the way we query git tags to favour instead of git fetch --tags by @eskultety in #1174

Bugfixes

• [yarn v4]: support project-root patches without workspace locators by @ben-alkov in #1122
• [aiohttp]: retry on network errors by @taylormadore in #1172

Full Changelog: 0.42.0...0.43.0

What's Changed

Features

• [Dockerfile] Bump the installed Go version to 1.25.3 by @eskultety in #1113

Bugfixes

• [gomod] Fix Go environment variables handling regression by @eskultety in #1161

Internal

• [gomod] Do not expose automatically downloaded Go toolchains by @eskultety in #1159
• [gomod] go.work handling refactoring by @eskultety in #1112
• [doc] Package Manager Design Template by @adambkaplan in #1032

Full Changelog: 0.41.0...0.42.0

What's Changed

Internal

• remove tekton pipeline definitions by @taylormadore in #1144
• ruff: Add new rule for unused arguments by @slimreaper35 in #1145
• models: Silence CodeQL complaints about missing classmethod decorators by @eskultety in #1149
• [github] Introduce a new release CI workflow by @eskultety in #1146
• [CI] Drop the 'fetch-tags' checkout action argument by @eskultety in #1152
• Drop Containerfile in favor of Dockerfile by @slimreaper35 in #1154
• [gomod] Refactor toolchains by @eskultety in #1111

Full Changelog: 0.40.0...0.41.0

What's Changed

Internal

• Unit tests data minor reorganization by @slimreaper35 in #1118
• [lint] Adopt Ruff by @eskultety in #1084
• ruff: Remove blank line by @slimreaper35 in #1130
• vcpkg: Adds initial overview by @a-ovchinnikov in #1030
• Add permissive mode design document by @slimreaper35 in #1079
• pip: Prepare for binary filters support by @slimreaper35 in #1140

Full Changelog: 0.39.0...0.40.0

What's Changed

Features

• Update CycloneDX spec version to 1.6 by @slimreaper35 in #1106
• Add git submodule support for Go vendor directory detection by @taylormadore in #1083
• RPM Architecture Filtering by @taylormadore in #1109

Internal

• [gomod] Refactor toolchains - preliminary patches by @eskultety in #1110
• Move some typing aliases to a new dedicated module by @eskultety in #1115

Full Changelog: 0.38.0...0.39.0

What's Changed

Fixes

• cargo: Change heuristic to use Cargo.lock for Rust root detection by @slimreaper35 in #1105

Full Changelog: 0.37.0...0.38.0

What's Changed

Features

• Update maximum supported go version to 1.25 by @slimreaper35 in #1098

Internal

• Enable platform-specific binary package filtering input by @taylormadore in #1060
• remove Tekton Hub git-clone annotation by @taylormadore in #1099

Full Changelog: 0.36.0...0.37.0

What's Changed

Features

• Enable individual toggling of experimental features by @derasdf in #993
• feat: build hermeto container for arm by @arewm in #1095

Fixes

• [git] Force an empty git config upon git command executions within a repository by @eskultety in #844
• cli: do not error out on long fetch-deps inputs by @ptoscano in #1088

Internal

• bundler: Extract pydantic model definitions from the parser module by @eskultety in #1038
• noxfile: Group linters and static analyzers to a single session - lint by @eskultety in #1082
• tests: unit: gomod: Fix repo.create_tag typo by @eskultety in #1087
• Tekton: Fix git-clone task reference by @slimreaper35 in #1086
• .containerignore: temporarily include labels.json by @taylormadore in #1096

Full Changelog: 0.35.0...0.36.0