Stacklok Minder Files

This is a further update to v0.2.0 to fix the release process. v0.2.0 release notes follow:

New client features

The terminal client has undergone a substantial update and UI facelift; among the new features are usability improvements to several existing commands, a new minder profile edit for updating profiles live, entity get/list/register/delete commands for generic entity types, and a new mindev test command for automated testing of Minder ruletypes:

• feat: enhance table UI by @DharunMR in https://github.com/mindersec/minder/pull/6291
• Additional info delete ruletype by @DharunMR in https://github.com/mindersec/minder/pull/6273
• Feat : Added a flag to ruletype subcommand by @DharunMR in https://github.com/mindersec/minder/pull/6287
• feat: add interactive 'minder profile edit' command by @DharunMR in https://github.com/mindersec/minder/pull/6355
• feat(cli): improve evaluation reasoning output using existing fields by @sachin9058 in https://github.com/mindersec/minder/pull/6417
• Add generic entity commands by @evankanderson in https://github.com/mindersec/minder/pull/6451
• feat(ruletest): add Starlark-based test runner for rule types by @krrish175-byte in https://github.com/mindersec/minder/pull/6508
• feat(ruletest): implement starlark eval built-in and assert module by @krrish175-byte in https://github.com/mindersec/minder/pull/6521
• feat(ruletest): add eval core unit tests and clean up builtins by @krrish175-byte in https://github.com/mindersec/minder/pull/6524
• feat(ruletest): add read_file and txtar built-ins by @krrish175-byte in https://github.com/mindersec/minder/pull/6530
• chore: minor cleanups from ruletest review by @krrish175-byte in https://github.com/mindersec/minder/pull/6540
• feat(ruletest): implement HTTP mocking layer for rule testing framework by @krrish175-byte in https://github.com/mindersec/minder/pull/6550
• feat: implement mindev test cli command and rule loading by name by @krrish175-byte in https://github.com/mindersec/minder/pull/6551
• build: add mindev to goreleaser release workflow by @krrish175-byte in https://github.com/mindersec/minder/pull/6572
• feat: introduce datasources mocking in ruletest framework by @krrish175-byte in https://github.com/mindersec/minder/pull/6575
• feat(dev): add JUnit XML output to mindev test and ruletest cleanups by @krrish175-byte in https://github.com/mindersec/minder/pull/6577

Client bugfixes

The client also received a number of fixes, and a testing mechanism for changes to the output format:

• Add pre-validation for repo register command to prevent unnecessary auth flow by @sachin9058 in https://github.com/mindersec/minder/pull/6249
• Fix/quickstart unregistered user by @theycallmeaabie in https://github.com/mindersec/minder/pull/6271
• Duplicate repo name by @DharunMR in https://github.com/mindersec/minder/pull/6276
• Implement Isolated, Deterministic Test Suite for ruletype CLI Subcommands by @DharunMR in https://github.com/mindersec/minder/pull/6286
• fix(cli): avoid duplicate error output in ExitNicelyOnError by @isha822 in https://github.com/mindersec/minder/pull/6366
• refactor(cli): extract catalog loading logic from quickstart command by @sachin9058 in https://github.com/mindersec/minder/pull/6353
• CLI : added test files for repo command by @DharunMR in https://github.com/mindersec/minder/pull/6414
• fix(cli): address review feedback and stabilize ruletype test suite by @DharunMR in https://github.com/mindersec/minder/pull/6386
• Hide quickstart command from help, etc until it is better-functioning by @evankanderson in https://github.com/mindersec/minder/pull/6405
• added test files for profile and profile/status command by @DharunMR in https://github.com/mindersec/minder/pull/6420

New server features

Note that server features are generally available in the container images on a rolling basis; features such as reading structured rule outputs via the API, provider metadata, entity list improvements, GitLab enrollment improvements, and version status have all been deployed live:

• Add with_output_detail to EvalResultsService by @krrish175-byte in https://github.com/mindersec/minder/pull/6207
• feat(inventory): add evaluation_outputs table for persisting structur… by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6211
• Feature/include outputs list endpoints 6254 by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6295
• feat(inventory): wire include_outputs for GetEvaluationHistory endpoint by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6255
• Add provider class metadata listing by @Jaydeep869 in https://github.com/mindersec/minder/pull/6327
• feat: support generic entity instance in selectors by @Jaydeep869 in https://github.com/mindersec/minder/pull/6321
• feat: add /version endpoint and global Minder-Version header by @DharunMR in https://github.com/mindersec/minder/pull/6358
• Populate entityInfo for all entity types in ListEvaluationResults by @krrish175-byte in https://github.com/mindersec/minder/pull/6361
• Fix token enroll for GitLab by @evankanderson in https://github.com/mindersec/minder/pull/6478
• Fix GitLab Service Account enrollment by @evankanderson in https://github.com/mindersec/minder/pull/6479

Server migrations

If you are running your own Minder service, the following migrations will occur when you deploy the corresponding container image:

• Add migration to convert all remaining timestamps to timestamptz by @evankanderson with @Copilot in https://github.com/mindersec/minder/pull/6139
• feat: store and detect Rego language version per rule type (Phase 1) by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6317
• Migrate test policies to Rego v1 by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6462
• test Rego v1 dual-parse pipeline by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6553
• feat: warn when accepting Rego V0 policies by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6554

Server bug fixes

• fix(metrics): swap incorrectly assigned entity and profile duration m… by @theycallmeaabie in https://github.com/mindersec/minder/pull/6270
• fix: avoid silently aborting profile init on single entity marshalling error by @AftAb-25 in https://github.com/mindersec/minder/pull/6331
• Include rule name in PR branch name to avoid collisions by @krrish175-byte in https://github.com/mindersec/minder/pull/6320
• fix: clean up OpenFGA role assignments during project deletion by @AftAb-25 in https://github.com/mindersec/minder/pull/6346
• Handle GitHub rate limits with specialized error and Prometheus metrics by @krrish175-byte in https://github.com/mindersec/minder/pull/6306
• fix: prevent panic when Trusty API call fails mid-flight by @alimx07 in https://github.com/mindersec/minder/pull/6383
• fix: make ReplaceAllProperties atomic by @kazuhidelee in https://github.com/mindersec/minder/pull/6326
• Allow digit-prefixed repository owners by @w3lld1 in https://github.com/mindersec/minder/pull/6591
• fix: gracefully skip invalid repositories in webhooks instead of aborting by @AftAb-25 in https://github.com/mindersec/minder/pull/6360
• Clean up profile handling, avoid doubling eval status in ListEvaluationResults by @evankanderson in https://github.com/mindersec/minder/pull/6500
• fix(actions): treat EvalStatusError as remediation off by @codejasleen in https://github.com/mindersec/minder/pull/6501
• Simplify CreateProfile, fix bug filling list of profiles by @evankanderson in https://github.com/mindersec/minder/pull/6499
• Improve debugging of clock drift in GitHub Auth dance by @evankanderson in https://github.com/mindersec/minder/pull/6523
• fix: prevent cache poisoning by force-resetting worktree on failed PR remediation by @AftAb-25 in https://github.com/mindersec/minder/pull/6368
• fix(oci): resolve artifact created time from image config by @somaz94 in https://github.com/mindersec/minder/pull/6520

Documentation

• Create Security Insights file by @minder-custcodian[bot] in https://github.com/mindersec/minder/pull/6184
• docs: update discussion forum link in CONTRIBUTING.md by @PrinceAsiedu in https://github.com/mindersec/minder/pull/6188
• docs: update API documentation links formatting in README by @PrinceAsiedu in https://github.com/mindersec/minder/pull/6190
• fix favicon by @intelligent-ears in https://github.com/mindersec/minder/pull/6300
• docs: add community meeting and governance links by @intelligent-ears in https://github.com/mindersec/minder/pull/6307
• docs: add documentation for customizing email templates by @Gitjay11 in https://github.com/mindersec/minder/pull/6313
• docs: deprecate quickstart documentation and remove CLI references by @sachin9058 in https://github.com/mindersec/minder/pull/6341
• docs: address maintainer feedback on email template customization by @Gitjay11 in https://github.com/mindersec/minder/pull/6354
• docs: add testing setup instructions to CONTRIBUTING.md by @intelligent-ears in https://github.com/mindersec/minder/pull/6421
• docs: add GitLab OAuth setup and provider enrollment guide by @intelligent-ears in https://github.com/mindersec/minder/pull/6477
• docs: add rule testing framework design document by @krrish175-byte in https://github.com/mindersec/minder/pull/6492
• docs: GitLab provider enrollment and repository registration guides by @intelligent-ears in https://github.com/mindersec/minder/pull/6534

Server-side maintenance, bugfixes, and test improvements

• Fix engine handler context handling by @evankanderson in https://github.com/mindersec/minder/pull/6173
• Test(vulncheck): add unit tests for vulnerability reports by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6209
• Test(util): Add unit tests for rest curl generator by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6210
• Add VEX / ignore mitigations for CVE-2026-34040 by @evankanderson in https://github.com/mindersec/minder/pull/6243
• test(projects/features): add unit tests for feature flag helpers by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6246
• refactor: reduce db type coupling in engine actions using adapter mapping by @sachin9058 in https://github.com/mindersec/minder/pull/6289
• fix(rest-datasource): drain and close response body on 429 retry by @AftAb-25 in https://github.com/mindersec/minder/pull/6290
• fix: prevent nil pointer panic and error masking in GitHub provider check runs by @AftAb-25 in https://github.com/mindersec/minder/pull/6312
• test(profiles): add table-driven unit tests for pkg/profiles/models by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6309
• fix(engine): prevent new evaluations from escaping cancellation during shutdown by @sachin9058 in https://github.com/mindersec/minder/pull/6314
• fix(datasource): initialize context to allow fallback to default project by @Jaydeep869 in https://github.com/mindersec/minder/pull/6315
• Resolve flaky TestGetGrpcConnection and upgrade dependencies by @krrish175-byte in https://github.com/mindersec/minder/pull/6264
• Move internal/engine/errors to pkg/engine/errors to reduce coupling by @sachin9058 in https://github.com/mindersec/minder/pull/6252
• Remove git_pr_diffs flag by @DharunMR in https://github.com/mindersec/minder/pull/6258
• removed dependency_extract feature flag by @DharunMR in https://github.com/mindersec/minder/pull/6272
• Decouple pkg/engine/errors from internal/db using adapter layer by @sachin9058 in https://github.com/mindersec/minder/pull/6266
• Test(actions): add unit tests for rule actions by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6208
• refactor: extract shared label filtering to internal/labels by @Gitjay11 in https://github.com/mindersec/minder/pull/6222
• chore: add pre-check script to validate lint, gen, test, and build by @sachin9058 in https://github.com/mindersec/minder/pull/6293
• refactor: remove unused property wrappers and update the property tests to use … by @kazuhidelee in https://github.com/mindersec/minder/pull/6284
• fix: make artifact signature wait context-aware to allow graceful shutdown by @sachin9058 in https://github.com/mindersec/minder/pull/6329
• test(ruletypes): add table-driven unit tests for release phase conver… by @dakshhhhh16 in https://github.com/mindersec/minder/pull/6328
• fix: avoid overwriting remediation action status in eval logs by @AftAb-25 in https://github.com/mindersec/minder/pull/6333
• Fix unterminated warning message that breaks gotestsum -> junit parsing by @evankanderson in https://github.com/mindersec/minder/pull/6334
• Test: add real database integration tests for EntityCreator by @DharunMR in https://github.com/mindersec/minder/pull/6378
• Decouple PR feedback actions from GitHub-specific provider by @krrish175-byte in https://github.com/mindersec/minder/pull/6262
• Fix SARIF uploads by granting security-events: write by @evankanderson in https://github.com/mindersec/minder/pull/6406
• refactor(engine): remove direct db dependency from actions logic by @sachin9058 in https://github.com/mindersec/minder/pull/6305
• Add security-events: write to main workflows, granular permissions by @evankanderson in https://github.com/mindersec/minder/pull/6412
• Generalize identity provider and implement OIDC discovery by @krrish175-byte in https://github.com/mindersec/minder/pull/6265
• Switch linter to only pick up new issues by @evankanderson in https://github.com/mindersec/minder/pull/6440
• Fix typo in first_profile.md by @alekcunn in https://github.com/mindersec/minder/pull/6574
• refactor: encapsulate project creation logic into the ProjectCreator interface by @ShantKhatri in https://github.com/mindersec/minder/pull/6557
• feat(api): set output_only flag for output-only fields in protos by @Gitjay11 in https://github.com/mindersec/minder/pull/6221
• Implement capabilities list via reflection by @evankanderson in https://github.com/mindersec/minder/pull/6482
• feat(identity): add smoke-test-client Keycloak OIDC client for automted testing by @Jaydeep869 in https://github.com/mindersec/minder/pull/6491
• Introduce issue provider facet and issue remediation configuration by @codejasleen in https://github.com/mindersec/minder/pull/6541

Dependency updates

• build(deps): bump github.com/openfga/go-sdk from 0.7.3 to 0.7.5 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6172
• build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.1.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6170
• build(deps): bump chainguard-dev/actions from 1.6.7 to 1.6.8 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6169
• build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.14.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6165
• build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6178
• build(deps): bump the otel group with 2 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6177
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6181
• build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6180
• build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6176
• build(deps): bump bufbuild/buf-action from 1.3.0 to 1.4.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6175
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6174
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6185
• build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6187
• build(deps-dev): bump flatted from 3.3.2 to 3.4.2 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6186
• build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6195
• build(deps): bump chainguard-dev/actions from 1.6.8 to 1.6.10 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6199
• build(deps): bump github.com/fergusstrange/embedded-postgres from 1.32.0 to 1.34.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6198
• build(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6197
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.5 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6200
• build(deps): bump yaml in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6201
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6202
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.4 to 2.12.6 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6194
• build(deps): bump github/codeql-action from 4.33.0 to 4.34.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6196
• build(deps): bump github.com/openfga/openfga from 1.11.3 to 1.13.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6204
• build(deps): bump brace-expansion in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6212
• build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6205
• build(deps): bump github.com/openfga/openfga from 1.11.5 to 1.13.1 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6206
• build(deps): bump node-forge from 1.3.2 to 1.4.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6216
• build(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6213
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6215
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6226
• build(deps): bump minimatch and serve-handler in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6232
• build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6231
• build(deps-dev): bump markdownlint-cli2 from 0.21.0 to 0.22.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6228
• build(deps): bump github.com/nats-io/nats.go from 1.49.0 to 1.50.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6227
• build(deps): bump styled-components from 6.3.11 to 6.3.12 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6225
• build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6224
• build(deps): bump chainguard-dev/actions from 1.6.10 to 1.6.11 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6223
• build(deps): bump github.com/go-openapi/loads from 0.23.2 to 0.23.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6229
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6259
• build(deps): bump the tools group in /tools with 4 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6230
• build(deps): bump lodash from 4.17.23 to 4.18.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6260
• build(deps): bump the otel group with 7 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6302
• build(deps): bump chainguard-dev/actions from 1.6.11 to 1.6.13 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6301
• build(deps): bump github.com/openfga/openfga from 1.13.1 to 1.14.0 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6298
• build(deps): bump github.com/openfga/openfga from 1.13.1 to 1.14.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6299
• build(deps): bump helm.sh/helm/v3 from 3.18.5 to 3.20.2 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6335
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6308
• build(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6362
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6374
• build(deps): bump chainguard-dev/actions from 1.6.13 to 1.6.14 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6373
• build(deps): bump the docusaurus group in /docs with 5 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6377
• build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6375
• build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6379
• build(deps): bump dompurify from 3.3.2 to 3.4.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6381
• build(deps-dev): bump globals from 17.4.0 to 17.5.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6396
• build(deps): bump styled-components from 6.3.12 to 6.4.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6395
• build(deps): bump the react group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6393
• build(deps-dev): bump prettier from 3.8.1 to 3.8.3 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6394
• build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6390
• build(deps): bump chainguard-dev/actions from 1.6.14 to 1.6.15 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6391
• build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6389
• build(deps): bump GoTestTools/gotestfmt-action from 2.2.0 to 2.3.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6392
• build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6403
• build(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6404
• build(deps): bump github.com/openfga/openfga from 1.14.0 to 1.14.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6399
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6384
• build(deps): bump github.com/openfga/openfga from 1.14.0 to 1.14.1 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6401
• build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6408
• build(deps): bump styled-components from 6.4.0 to 6.4.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6427
• build(deps-dev): bump markdownlint-cli2 from 0.22.0 to 0.22.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6425
• build(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6423
• build(deps): bump chainguard-dev/actions from 1.6.15 to 1.6.19 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6424
• build(deps): bump github.com/open-policy-agent/opa from 1.14.0 to 1.16.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6441
• build(deps): bump the otel group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6410
• build(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6426
• Upgrade to golangci-lint 2.12.1 by @evankanderson in https://github.com/mindersec/minder/pull/6442
• build(deps): bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6445
• build(deps): bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6444
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6443
• build(deps): bump fast-uri from 3.1.0 to 3.1.2 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6446
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6450
• build(deps): bump github.com/openfga/go-sdk from 0.7.5 to 0.8.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6455
• build(deps-dev): bump globals from 17.5.0 to 17.6.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6459
• build(deps): bump the docusaurus group in /docs with 5 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6457
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6456
• build(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6453
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6454
• build(deps): bump mobx from 6.13.7 to 6.15.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6458
• build(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.32 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6470
• build(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6471
• build(deps): bump the react group in /docs with 2 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6468
• build(deps): bump mobx from 6.15.1 to 6.15.3 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6469
• build(deps): bump github.com/open-feature/go-sdk from 1.17.0 to 1.17.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6466
• build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6465
• build(deps): bump github.com/ThreeDotsLabs/watermill from 1.5.1 to 1.5.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6476
• build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6474
• build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6473
• build(deps): bump styled-components from 6.4.1 to 6.4.2 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6475
• build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6464
• build(deps): bump mermaid from 11.12.3 to 11.15.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6452
• build(deps): bump the buf group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6467
• build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6483
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6486
• build(deps): bump github.com/wneessen/go-mail from 0.7.2 to 0.7.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6488
• build(deps): bump mobx from 6.15.3 to 6.15.4 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6484
• build(deps): bump the tools group across 1 directory with 10 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6480
• build(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6498
• build(deps): bump the otel group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6497
• build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.22 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6493
• build(deps): bump k8s.io/apimachinery from 0.35.1 to 0.36.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6496
• build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6495
• build(deps): bump the react group in /docs with 2 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6494
• build(deps): bump github.com/sigstore/protobuf-specs from 0.5.0 to 0.5.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6489
• build(deps): bump github.com/openfga/openfga from 1.14.1 to 1.16.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6502
• build(deps): bump mobx from 6.15.4 to 6.16.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6512
• build(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.8.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6514
• build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.8.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6513
• build(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6519
• build(deps-dev): bump prettier from 3.8.3 to 3.8.4 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6511
• build(deps): bump chainguard-dev/actions from 1.6.22 to 1.6.23 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6510
• build(deps): bump dompurify from 3.4.0 to 3.4.10 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6509
• build(deps): bump launch-editor from 2.11.1 to 2.14.1 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6518
• build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.6 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6515
• build(deps): bump ws from 7.5.10 to 7.5.11 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6517
• build(deps): bump github.com/openfga/openfga from 1.16.0 to 1.18.0 in /tools by @dependabot[bot] in https://github.com/mindersec/minder/pull/6525
• build(deps): bump github.com/openfga/openfga from 1.16.0 to 1.18.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6526
• build(deps): bump dompurify from 3.4.10 to 3.4.11 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6527
• build(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6528
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6537
• build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.9.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6536
• build(deps): bump github.com/openfga/go-sdk from 0.8.0 to 0.8.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6538
• build(deps): bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6539
• build(deps): bump k8s.io/apimachinery from 0.36.1 to 0.36.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6549
• build(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6542
• build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.25 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6546
• build(deps): bump github.com/erikgeiser/promptkit from 0.9.0 to 0.11.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6545
• build(deps): bump github.com/protobom/protobom from 0.5.4 to 0.5.6 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6547
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6544
• build(deps): bump github.com/nats-io/nats.go from 1.50.0 to 1.52.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6548
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6543
• build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6559
• build(deps): bump ko-build/setup-ko from 0.9 to 0.10 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6560
• build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6561
• build(deps-dev): bump globals from 17.6.0 to 17.7.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6562
• build(deps): bump golang.org/x/tools from 0.45.0 to 0.47.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6564
• build(deps): bump github.com/open-policy-agent/opa from 1.16.1 to 1.18.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6567
• build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.6 to 2.14.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6568
• build(deps): bump github.com/oapi-codegen/runtime from 1.2.0 to 1.4.2 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6569
• build(deps): bump the tools group in /tools with 5 updates by @dependabot[bot] in https://github.com/mindersec/minder/pull/6566
• build(deps): bump github.com/zitadel/oidc/v3 from 3.45.4 to 3.47.5 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6587
• build(deps): bump github/codeql-action/upload-sarif from 4.35.1 to 4.36.3 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6583
• build(deps-dev): bump prettier from 3.8.4 to 3.9.4 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6582
• build(deps): bump github.com/protobom/protobom from 0.5.6 to 0.5.8 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6586
• build(deps): bump chainguard-dev/actions/boilerplate from 1.6.25 to 1.6.26 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6581
• build(deps): bump redocusaurus from 2.5.0 to 2.5.2 in /docs in the docusaurus group by @dependabot[bot] in https://github.com/mindersec/minder/pull/6580
• build(deps): bump styled-components from 6.4.2 to 6.4.3 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6584
• build(deps): bump github.com/itchyny/gojq from 0.12.17 to 0.12.19 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6588
• build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6603
• build(deps): bump github.com/wneessen/go-mail from 0.7.3 to 0.8.1 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6600
• build(deps): bump golang.org/x/tools from 0.47.0 to 0.48.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6602
• build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.11-20260415201107-50325440f8f2.1 to 1.36.11-20260709200747-435963d16310.1 in the buf group by @dependabot[bot] in https://github.com/mindersec/minder/pull/6599
• build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6596
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6595
• build(deps): bump chainguard-dev/actions/boilerplate from 1.6.26 to 1.6.27 by @dependabot[bot] in https://github.com/mindersec/minder/pull/6594
• build(deps-dev): bump markdownlint-cli2 from 0.22.1 to 0.23.0 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6597
• build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /docs by @dependabot[bot] in https://github.com/mindersec/minder/pull/6604

New Contributors

• @PrinceAsiedu made their first contribution in https://github.com/mindersec/minder/pull/6188
• @krrish175-byte made their first contribution in https://github.com/mindersec/minder/pull/6207
• @dakshhhhh16 made their first contribution in https://github.com/mindersec/minder/pull/6209
• @sachin9058 made their first contribution in https://github.com/mindersec/minder/pull/6249
• @DharunMR made their first contribution in https://github.com/mindersec/minder/pull/6258
• @theycallmeaabie made their first contribution in https://github.com/mindersec/minder/pull/6270
• @Gitjay11 made their first contribution in https://github.com/mindersec/minder/pull/6222
• @kazuhidelee made their first contribution in https://github.com/mindersec/minder/pull/6284
• @intelligent-ears made their first contribution in https://github.com/mindersec/minder/pull/6300
• @AftAb-25 made their first contribution in https://github.com/mindersec/minder/pull/6290
• @Jaydeep869 made their first contribution in https://github.com/mindersec/minder/pull/6315
• @alimx07 made their first contribution in https://github.com/mindersec/minder/pull/6383
• @isha822 made their first contribution in https://github.com/mindersec/minder/pull/6366
• @codejasleen made their first contribution in https://github.com/mindersec/minder/pull/6501
• @somaz94 made their first contribution in https://github.com/mindersec/minder/pull/6520
• @alekcunn made their first contribution in https://github.com/mindersec/minder/pull/6574
• @ShantKhatri made their first contribution in https://github.com/mindersec/minder/pull/6557
• @w3lld1 made their first contribution in https://github.com/mindersec/minder/pull/6591

Full Changelog: https://github.com/mindersec/minder/compare/v0.1.2...v0.2.0