Changelog
- [fbe710] chore(deps): bump github.com/mark3labs/mcp-go from 0.58.0 to 1.0.0 (#3747)
- [c2dbab] chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 (#3746)
- [74269b] chore(deps): bump helm.sh/helm/v3 from 3.20.2 to 3.21.4 (#3748)
- [dc42aa] chore: remove unused 1.png (#3772)
- [f95fd7] ci: bump Codium-ai/pr-agent from 0.43.0 to 0.44.0 (#3749)
- [9b6f31] ci: bump Codium-ai/pr-agent from 0.44.0 to 0.45.0 (#3765)
- [6e57af] ci: bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#3750)
- [50c774] ci: bump github.com/armosec/armoapi-go from 0.0.757 to 0.0.760 (#3766)
- [7ab40b] ci: bump github.com/quay/claircore from 1.5.35 to 1.5.54 (#3764)
- [94dbf4] ci: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace (#3762)
- [f55f4a] ci: bump google.golang.org/api from 0.280.0 to 0.297.0 (#3761)
- [78c298] ci: bump helm/kind-action from 1.14.0 to 1.15.0 (#3751)
- [24af8f] ci: bump k8s.io/apimachinery from 0.36.2 to 0.37.0 (#3709)
- [0b3d01] feat(fleet): add cross-cluster control matrix and fleet report types (#3774)
- [299509] feat(list): add --framework and --search filters to list controls (#3623) (#3718)
- [6a97de] feat(mcpserver): introduce structured machine-readable error responses (#3776)
- [10d4c9] feat(rules): add host-users-root-workload-v1 rule prototype (#3754)
- [153e9d] feat(rules): detect Azure AKS Workload Identity in provider-iam-assumption-v1 (#3724)
- [ddbd0a] feat(scan): extend --kube-contexts fleet mode to framework/control/workload (#3440)
- [483a57] fix(diff): do not print usage when --fail-on-new fails (#3756)
- [a696bd] fix(exposure): model GRPCRoute exposure paths with v1beta1 fallback (#3728)
- [4a949f] fix(fix): warn when --output-dir is ignored for file-based reports (#3767)
- [33c147] fix(git): use hex encoding for hashRepoURL instead of raw bytes (#3720)
- [194d7a] fix(httphandler): gracefully shut down HTTP server and scan worker (#3769)
- [e7b3df] fix(mcpserver): return explicit error for unsupported resource_kind in scan_resource_slice (#3740)
- [031cd4] fix(opaprocessor): fix AllResources data race in celParamObjectFinder (#3787)
- [8850cc] fix(policyhandler): route mixed Framework/Control scan identifiers by their own kind (#3768)
- [532463] fix(printer): generalize evidence redaction beyond Secret-kind-only (#3752)
- [d3c013] fix(printer): honor --show-evidence in control and resource views (#3775)
- [7817ea] fix(printer): route SARIF, GitLab-SAST, HTML, and CSV fix-path values through --show-secrets redaction (#3759)
- [023d12] fix(rbacgraph): order escalation results instead of reading map order (#3739)
- [75e9d0] fix(resourcehandler): retrieve single workload via Get instead of List (#3722)
- [20053d] fix(resultshandling): rebuild namespace rollup after severity filtering (#3726)
- [13849c] fix(scan): normalize kind case and support short names in workload scan (#3730)
- [074bf3] fix: do not print scan usage when --severity-threshold fails (#3716) (#3717)
- [f8cb18] test(cel): check the vendored bundle against the digests pinned in the Makefile (#3742)
Released by GoReleaser.