v0.92.0

• sigstore: use cosign for provenance blob signing by @crazy-max in #1208 #1209
• git: correctly extract tag name when commit has multiple decorations by @lucacome @crazy-max in #1188
• build(deps): bump @actions/cache from 6.0.1 to 6.1.0 in #1195
• build(deps): bump @sigstore/bundle from 4.0.0 to 5.0.0 in #1158
• build(deps): bump @sigstore/core from 3.2.0 to 3.2.1 in #1200
• build(deps): bump @sigstore/tuf from 4.0.2 to 5.0.0 in #1160
• build(deps): bump @sigstore/verify from 3.1.1 to 4.1.0 in #1159
• build(deps): bump csv-parse from 6.2.1 to 7.0.0 in #1186
• build(deps): bump js-yaml from 4.1.1 to 5.2.0 in #1154 #1198 #1199
• build(deps): bump minimatch from 3.1.2 to 3.1.5 in #1205
• build(deps): bump semver from 7.8.1 to 7.8.5 in #1168 #1194
• build(deps): bump tmp from 0.2.6 to 0.2.7 in #1153
• build(deps): bump undici from 6.24.1 to 6.27.0 in #1196
• build(deps): bump vite from 7.3.2 to 7.3.6 in #1201

Full Changelog: v0.91.0...v0.92.0

v0.91.0

• publish github-builder-runtime package by @crazy-max in #1145
• build(deps): bump @actions/cache from 6.0.0 to 6.0.1 in #1138
• build(deps): bump @sigstore/verify from 3.1.0 to 3.1.1 in #1139
• build(deps): bump @tootallnate/once from 2.0.0 to 2.0.1 in #1137
• build(deps): bump semver from 7.8.0 to 7.8.1 in #1140
• build(deps): bump tmp from 0.2.5 to 0.2.6 in #1148

Full Changelog: v0.90.0...v0.91.0

v0.90.0

• buildx(build): pin implicit git contexts and support opt-in fetch-by-commit by @crazy-max in #1085
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in #1110
• build(deps): bump ip-address from 10.0.1 to 10.2.0 in #1107
• build(deps): bump postcss from 8.5.6 to 8.5.14 in #1106
• build(deps): bump semver from 7.7.4 to 7.8.0 in #1111
• build(deps): bump tar-stream from 3.1.7 to 3.2.0 in #1104

Full Changelog: v0.89.1...v0.90.0

v0.89.1

• fix Handlebars default import interop by @crazy-max in #1101

Full Changelog: v0.89.0...v0.89.1

v0.89.0

• docker(install): update lima images by @crazy-max in #1087
• docker(install): retry macOS archive installs on transient apt mirror failures by @crazy-max in #1090
• docker(install): lima install diagnostics for Docker provisioning failures by @crazy-max in #1089
• util: add opt-in whitespace preservation for multiline inputs by @crazy-max in #1099
• util: add handlebars render helper by @crazy-max in #1072
• build(deps): bump @actions/core from 3.0.0 to 3.0.1 in #1098
• build(deps): bump @actions/github from 9.1.0 to 9.1.1 in #1096
• build(deps): bump @actions/http-client from 4.0.0 to 4.0.1 in #1097
• build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 in #1095

Full Changelog: v0.88.0...v0.89.0

v0.88.0

• buildx(build): stabilize pull request git contexts by @crazy-max in #1067
• build(deps): bump @actions/github from 9.0.0 to 9.1.0 in #1066
• build(deps): bump lodash from 4.17.23 to 4.18.1 in #1058

Full Changelog: v0.87.0...v0.88.0

v0.87.0

• buildx(build): simplify git context format fallback by @crazy-max in #1033
• sigstore: default blob attestation verification to SLSA provenance v1 by @crazy-max in #1060
• sigstore: wire to explicit cosign binary by @crazy-max in #1061
• build(deps): bump brace-expansion from 1.1.12 to 1.1.13 in #1048
• build(deps): bump handlebars from 4.7.8 to 4.7.9 in #1045
• build(deps): bump picomatch from 4.0.3 to 4.0.4 in #1039
• build(deps): bump vite from 7.3.1 to 7.3.2 in #1056

Full Changelog: v0.86.0...v0.87.0

v0.86.0

• buildx(build): preserve original paths for file secrets by @crazy-max in #1030
• build(deps): bump csv-parse from 6.2.0 to 6.2.1 in #1032
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 in #1029
• build(deps): bump flatted from 3.3.1 to 3.4.2 in #1028

Full Changelog: v0.85.0...v0.86.0

v0.85.0

• buildx(build): support extensible git context attrs by @crazy-max in #1025
• build(deps): bump @sigstore/sign from 4.1.0 to 4.1.1 in #1027
• build(deps): bump @sigstore/tuf from 4.0.1 to 4.0.2 in #1026

Full Changelog: v0.84.1...v0.85.0

v0.84.1

• buildx(build): ignore dot git context subdir by @crazy-max in #1024

Full Changelog: v0.84.0...v0.84.1