frizbee፦ ሁሉም ስሪቶች እና የቆዩ ስሪቶች

What's Changed
• chore：migrate from Trivy to Grype for vulnerability scanning by @JAORMX in #381
• chore(deps)：consolidate all pending dependency updates by @rdimitrov in #387
• chore(deps)：update github/codeql-action digest to b8bb9f2 by @renovate[bot] in #378
• chore(deps)：update github/codeql-action digest to c10b806 by @renovate[bot] in #388
Full Changelog：v0.1.9...v0.1.10

What's Changed
- chore: migrate from Trivy to Grype for vulnerability scanning by @JAORMX in #381
- chore(deps): consolidate all pending dependency updates by @rdimitrov in #387
- chore(deps): update github/codeql-action digest to b8bb9f2 by @renovate[bot] in #378
- chore(deps): update github/codeql-action digest to c10b806 by @renovate[bot] in #388
Full Changelog: v0.1.9...v0.1.10

What's Changed
- Enable parallel runners for golangci-lint by @JAORMX in #349
- chore(deps): update actions/checkout digest to de0fac2 by @renovate[bot] in #337
- chore(deps): update github/codeql-action digest to 89a39a4 by @renovate[bot] in #347
- chore(deps): update anchore/sbom-action action to v0.22.2 by @renovate[bot] in #348
- chore(deps): update aquasecurity/trivy-action action to v0.34.1 by @renovate[bot] in #350
- fix(deps): update module github.com/google/go-github/v66 to v83 by @renovate[bot] in #351
- fix(deps): update module github.com/google/go-containerregistry to v0.21.0 by @renovate[bot] in #352
- chore(deps): update goreleaser/goreleaser-action action to v7 by @renovate[bot] in #355
- fix(deps): update module github.com/google/go-containerregistry to v0.21.2 by @renovate[bot] in #356
- chore(deps): update aquasecurity/trivy-action action to v0.35.0 by @renovate[bot] in #366
- fix(deps): update module github.com/go-git/go-billy/v5 to v5.8.0 by @renovate[bot] in #357
- fix(deps): update module golang.org/x/sync to v0.20.0 by @renovate[bot] in #371
- chore(deps): bump github.com/moby/buildkit from 0.27.1 to 0.28.0 by @dependabot[bot] in #369
- chore(deps): update anchore/sbom-action action to v0.23.0 by @renovate[bot] in #360
- chore(deps): update github artifact actions (major) by @renovate[bot] in #361
- chore(deps): update github/codeql-action digest to 0d579ff by @renovate[bot] in #365
- fix(deps): update module github.com/google/go-github/v66 to v84 by @renovate[bot] in #363
- chore(deps): update sigstore/cosign-installer action to v4.1.0 by @renovate[bot] in #372
- chore(deps): update anchore/sbom-action action to v0.23.1 by @renovate[bot] in #373
Full Changelog: v0.1.8...v0.1.9

What's Changed
- Bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot[bot] in #239
- Bump github.com/moby/buildkit from 0.20.2 to 0.21.0 by @dependabot[bot] in #240
- Add SARIF output and upload to Trivy workflow by @JAORMX in #241
- Bump github.com/moby/buildkit from 0.21.0 to 0.21.1 by @dependabot[bot] in #243
- Bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot[bot] in #244
- Bump github.com/google/go-containerregistry from 0.20.3 to 0.20.4 by @dependabot[bot] in #249
- Bump github.com/google/go-containerregistry from 0.20.4 to 0.20.5 by @dependabot[bot] in #251
- Bump github.com/moby/buildkit from 0.21.1 to 0.22.0 by @dependabot[bot] in #250
- Bump github.com/google/go-containerregistry from 0.20.5 to 0.20.6 by @dependabot[bot] in #254
- Bump github.com/moby/buildkit from 0.22.0 to 0.23.2 by @dependabot[bot] in #257
- fix: strip quotes from uses field by @datosh in #260
- Bump golang.org/x/sync from 0.14.0 to 0.16.0 by @dependabot[bot] in #259
- chore: Configure Renovate by @renovate[bot] in #262
- chore(deps): update actions/upload-artifact action to v4.6.2 by @renovate[bot] in #272
- chore(deps): update anchore/sbom-action action to v0.20.4 by @renovate[bot] in #273
- chore(deps): update aquasecurity/trivy-action action to v0.32.0 by @renovate[bot] in #274
- chore(deps): update sigstore/cosign-installer action to v3.9.2 by @renovate[bot] in #275
- chore(deps): update actions/download-artifact action to v4.3.0 by @renovate[bot] in #271
- chore(deps): update coverallsapp/github-action action to v2.3.6 by @renovate[bot] in #269
- chore(deps): update actions/checkout digest by @renovate[bot] in #263
- chore(deps): update dependency go to v1.24.6 by @renovate[bot] in #270
- chore(deps): update goreleaser/goreleaser-action digest to 5742e2a by @renovate[bot] in #268
- chore(deps): update golangci/golangci-lint-action digest to 3a91952 by @renovate[bot] in #267
- chore(deps): update github/codeql-action digest by @renovate[bot] in #266
- chore(deps): update actions/setup-go digest to 19bb512 by @renovate[bot] in #264
- chore(deps): update slsa-framework/slsa-github-generator action to v2.1.0 by @renovate[bot] in #276
- chore(deps): update slsa-framework/slsa-verifier action to v2.7.1 by @renovate[bot] in #277
- chore(deps): update actions/download-artifact action to v5 - autoclosed by @renovate[bot] in #279
- chore(deps): update actions/checkout action to v4 by @renovate[bot] in #278
- chore(deps): update actions/setup-go action to v5 by @renovate[bot] in #280
- chore(deps): update github/codeql-action action to v3 by @renovate[bot] in #281
- chore(deps): update goreleaser/goreleaser-action action to v6 by @renovate[bot] in #283
- Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #294
- chore(deps): update anchore/sbom-action action to v0.20.5 by @renovate[bot] in #292
- chore(deps): update goreleaser/goreleaser-action digest to e435ccd by @renovate[bot] in #291
- chore(deps): update aquasecurity/trivy-action action to v0.33.0 by @renovate[bot] in #295
- chore(deps): update github/codeql-action digest to d3678e2 by @renovate[bot] in #289
- Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #296
- chore(deps): update aquasecurity/trivy-action action to v0.33.1 by @renovate[bot] in #301
- Bump golang.org/x/sync from 0.16.0 to 0.17.0 by @dependabot[bot] in #300
- Bump github.com/moby/buildkit from 0.23.2 to 0.24.0 by @dependabot[bot] in #299
- chore(deps): update actions/checkout digest to 08eba0b by @renovate[bot] in #287
- chore(deps): update golangci/golangci-lint-action action to v8 by @renovate[bot] in #282
- Fix tablewriter API compatibility for v1.0.9 dependency upgrade by @Copilot in #302
- Fix the linter failing by @rdimitrov in #305
- chore(deps): update sigstore/cosign-installer action to v3.10.0 by @renovate[bot] in #306
- chore(deps): bump github.com/moby/buildkit from 0.24.0 to 0.25.1 by @dependabot[bot] in #316
- chore(deps): update github/codeql-actio

What's Changed
- Bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @dependabot in #224
- chore: fix typos by @chenrui333 in #226
- chore: update golangci-lint by @chenrui333 in #225
- Bump github.com/moby/buildkit from 0.18.2 to 0.19.0 by @dependabot in #229
- Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3 by @dependabot in #228
- Bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in #227
- Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #231
- Bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in #230
- Bump github.com/moby/buildkit from 0.19.0 to 0.20.0 by @dependabot in #232
- feat: implement --error by @cedws in #237
- Bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot in #233
- Bump github.com/moby/buildkit from 0.20.0 to 0.20.2 by @dependabot in #238
- Bump github.com/deckarep/golang-set/v2 from 2.7.0 to 2.8.0 by @dependabot in #235
New Contributors
- @cedws made their first contribution in #237
Full Changelog: v0.1.6...v0.1.7

## Changelog
* 9c2dc4086bece447861beb222f9e8b5ca80f2212: Stop releasing a brew formula to stacklok/tap (#202) (@rdimitrov)

## Changelog
* e8367fdcd72ffc118cc8f4857e9a80998f9b37e5: Bump actions/upload-artifact from 4.3.6 to 4.4.0 (#199) (@dependabot[bot])
* 90dcc8212723e1543682aae08aee7ceeacee4492: Bump github.com/moby/buildkit from 0.15.2 to 0.16.0 (#200) (@dependabot[bot])
* 9d170e74c46b793850035d56a8ef09ec7356c492: Patch 3 (#201) (@joergi)

## Changelog
* 227081dd83c913a7aae818196a5124bd2c01eb62: Add cert string to goreleaser configuration (#198) (@JAORMX)
* a4af8719cc7fd7cf0554b78dbaaec6d608e6c9e9: Bump anchore/sbom-action from 0.17.1 to 0.17.2 (#197) (@dependabot[bot])
* 7c29729f87ced8da3df1a4a738693fed48f066c4: Merge pull request #196 from stacklok/output-cert (@JAORMX)
* 82354194c3f7f13d71d0b4b2902213ca7ae683e3: Output certificate as part of frizbee release (@JAORMX)

## Changelog
* c17f0e58ea367d97e2285def93a067ff38db08f3: Bump actions/upload-artifact from 4.3.4 to 4.3.5 (@dependabot[bot])
* a57d4051ac16735471ee866c32b706bfda6487fb: Bump actions/upload-artifact from 4.3.5 to 4.3.6 (@dependabot[bot])
* cc837b7c56816f5be0912591d4067e48df04f90a: Bump anchore/sbom-action from 0.17.0 to 0.17.1 (@dependabot[bot])
* 2de6be03ef2351fb89e0eeba094b75cc8ead8d88: Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 (@dependabot[bot])
* c38d4cb9c6f094adaf95cce0c98fc733c2fc7191: Bump github.com/moby/buildkit from 0.15.0 to 0.15.1 (@dependabot[bot])
* 35ec575e06fb16484e4e04f5189ff5f86e8b3353: Bump github.com/moby/buildkit from 0.15.1 to 0.15.2 (@dependabot[bot])
* 650cdb28b832a9d0e7c28d0e280e076c5a210cf8: Bump golang.org/x/sync from 0.7.0 to 0.8.0 (@dependabot[bot])
* e5e360c30f5fd99c549bafb6b41dc49743ed5643: Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (@eleftherias)
* d70186ca4b663158fe4bf4bc1a5c975ff0e89e06: Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 (@dependabot[bot])
* 3eb59f370e0eb8908ffa67abf9701f51e14b0b5c: Merge pull request #185 from stacklok/dependabot/go_modules/github.com/moby/buildkit-0.15.1 (@rdimitrov)
* b2c45fee098a472b2e788a96421125bb12b0d662: Merge pull request #187 from stacklok/v1-fixed-version-test (@eleftherias)
* 16a207dffac1435c03243c5a0e5d2e89716a09ba: Merge pull request #188 from stacklok/upgrade-ci-lint (@eleftherias)
* 213f260ddea2bc433453185fd99c55c206fe0cd0: Merge pull request #189 from stacklok/dependabot/github_actions/actions/upload-artifact-4.3.5 (@rdimitrov)
* 49fbd84666ef358c7a0c0c8a5ec45b006ab51eaf: Merge pull request #190 from stacklok/dependabot/go_modules/golang.org/x/sync-0.8.0 (@rdimitrov)
* b6aba8269fec81e7796167ec81babeadf5683d00: Merge pull request #191 from stacklok/dependabot/go_modules/github.com/google/go-containerregistry-0.20.2 (@JAORMX)
* ed161725e11d2b8081f1540150f969b3ef163584: Merge pull request #192 from stacklok/dependabot/github_actions/actions/upload-artifact-4.3.6 (@JAORMX)
* fdf46078d8ae4cf9b5352123b700454b41e4fb8a: Merge pull request #193 from stacklok/dependabot/github_actions/sigstore/cosign-installer-3.6.0 (@JAORMX)
* 2e2dc4f7889c5032f0543c73f5698642e69e2b28: Merge pull request #194 from stacklok/dependabot/github_actions/anchore/sbom-action-0.17.1 (@JAORMX)
* d46cf74201b807d7b5081c837aa26efea77d70b0: Merge pull request #195 from stacklok/dependabot/go_modules/github.com/moby/buildkit-0.15.2 (@JAORMX)
* 80b731d27e7f3f5bb8e06b5609a8ff69674003fd: Use unmaintained version tag in tests (@eleftherias)

## Changelog
* c3eae9e96e8c340f7aceb535bd6dac4088b51000: Add readme entry pointing to the github action (@lukehinds)
* debef4ef38c291fbd97e0d71ff4258350e0370fe: Bump actions/download-artifact from 4.1.7 to 4.1.8 (@dependabot[bot])
* d119284c7cf1df378b93792314ee80393b3a343e: Bump actions/setup-go from 5.0.1 to 5.0.2 (@dependabot[bot])
* a8dd5f66b8a68a59e3226babe02fc8262ee2729d: Bump actions/upload-artifact from 4.3.3 to 4.3.4 (@dependabot[bot])
* 82c94fe88129e59932171d02ae3122111096de69: Bump anchore/sbom-action from 0.16.0 to 0.16.1 (@dependabot[bot])
* c3f12cf9e7186537f23d6c1bc6eabc1eb05dd679: Bump anchore/sbom-action from 0.16.1 to 0.17.0 (@dependabot[bot])
* 17c2aa75bd1b44be1436f2e819ab01903e2da126: Bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 (@dependabot[bot])
* ee95eb1d77ef6d848111c9a04308b88c94e82591: Bump buf hashes again (@jhrozek)
* 9db1ea8a9e4fda3671c49b23964cc58f13ca226d: Bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 (#170) (@dependabot[bot])
* bc15c04a4562aad1a69abcc0880fd6da87505924: Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 (@dependabot[bot])
* 3d6585116cd72a29aa224ce08cf2e4f3635e06ff: Bump github.com/moby/buildkit from 0.14.0 to 0.14.1 (@dependabot[bot])
* d9092512251b00a734e1e1ceca5da1f177f3837d: Bump github.com/moby/buildkit from 0.14.1 to 0.15.0 (#174) (@dependabot[bot])
* 4ba9593bfc6f7251c8d8d91a30dbbdacc8434496: Bump slsa-framework/slsa-verifier from 2.5.1 to 2.6.0 (@dependabot[bot])
* 8cc9a22bdb47b60720674f28116a748c45935bc0: Fix the default configuration note in README (@jhrozek)
* b58712360240928093f4662bc127f7eb2d5a1586: Merge pull request #162 from stacklok/dependabot/go_modules/github.com/moby/buildkit-0.14.1 (@jhrozek)
* b75f7203be14817103082b160e8427e856a47a31: Merge pull request #163 from stacklok/readme-action (@JAORMX)
* f85a8e4adf98169f9ead96851e0d135a1e30f493: Merge pull request #164 from staceypotter/patch-1 (@jhrozek)
* 924b3f5fff5a68fca09686cd2eac929ed103d0e7: Merge pull request #165 from staceypotter/patch-2 (@jhrozek)
* 5133e31856fc584087713332f88267effe18f586: Merge pull request #166 from jhrozek/bump-test-hashes (@jhrozek)
* 9ccfd518df201b0021d3d7812ada0e75cc0f79c2: Merge pull request #168 from stacklok/dependabot/github_actions/actions/download-artifact-4.1.8 (@jhrozek)
* 234dcbf1e7785d17b475a783c36cbe5cba1d2b05: Merge pull request #169 from stacklok/dependabot/github_actions/actions/upload-artifact-4.3.4 (@jhrozek)
* c67d88a05522d9646ca8b2227af5aa946d72b832: Merge pull request #171 from stacklok/dependabot/github_actions/anchore/sbom-action-0.16.1 (@jhrozek)
* ab1640eb06a5ff600e1038420fac1aae29713f79: Merge pull request #172 from stacklok/dependabot/github_actions/aquasecurity/trivy-action-0.24.0 (@jhrozek)
* cd0dbed60141ba2f20c30a092fc30e87be015098: Merge pull request #173 from stacklok/dependabot/github_actions/actions/setup-go-5.0.2 (@blkt)
* 0c74f2dfec516958604ffee1d6bf3fe74affd8e1: Merge pull request #176 from chenrui333/patch-3 (@JAORMX)
* de90b5b2a13e4f808d313e1e7a4aff8805d0ba75: Merge pull request #177 from chenrui333/opt-release-binary (@JAORMX)
* 6a5b478e37be7cf55c83ae13f92f9a21d3b991e1: Merge pull request #178 from stacklok/dependabot/github_actions/anchore/sbom-action-0.17.0 (@jhrozek)
* a60229da88f954ee3121c303bb858ec1a678f07d: Merge pull request #179 from stacklok/dependabot/github_actions/slsa-framework/slsa-verifier-2.6.0 (@jhrozek)
* a9f45f3af033b08c08ab340ea50670542d26107d: Merge pull request #180 from stacklok/dependabot/go_modules/github.com/google/go-containerregistry-0.20.1 (@JAORMX)
* 7e1fd272c1c88ac1f9f2b6c7dfcab8fe78dbfe9c: Merge pull request #181 from jhrozek/ignore_only_main_and_master (@jhrozek)
* 1325537f9cbd315e8afc23a9444c493825700337: Merge pull request #182 from jhrozek/fix_readme (@jhrozek)
* 2ae4ea7ce6aad89badfef36badcf494e6ed9f24e: Only ignore main and master, not all branches when pinning actions (@jhrozek)
* 2aca4e34c6a8c7f4a42ffe1eacc59e28d7275e91: Update Contributing & Community section in READ

## Changelog
* 32db95d479a0e91f54a7584bfc5b7e6998e0bb5b: Add a configuration to exclude images (@jhrozek)
* f989ea3802e55d627fa219a51051aa0ce795dfe6: Always ignore scratch even with an empty config (@jhrozek)
* e6f0cce3fd40365ca500498c0eacd4d3118a3af2: Bump actions/checkout from 4.1.6 to 4.1.7 (@dependabot[bot])
* 70db58409f63984fca78a1ddd5a88baacba384d6: Bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 (@dependabot[bot])
* 654a4ef91db168e4df2a65260c13cfaa5714c915: Default to skipping actions referenced by a tag (@jhrozek)
* a4f5d2614aef3263112f4cd36aa1a9221d341539: Fix unit test hash reference and bump cobra and go-containerregistry (@rdimitrov)
* 37ea1125ca600b1ce0d6130fce2e9aee8d5dfbea: Handle images with AS and platform, use excludes (@jhrozek)
* 125e30a5c50887dd3cb1788c1b8b3fbee5976850: Make DefaultConfig public (@jhrozek)
* b19d259a16023ecfb5101c59787e43a0bdfb6dec: Merge pull request #152 from stacklok/dependabot/github_actions/actions/checkout-4.1.7 (@rdimitrov)
* 7ab01ef83a5d4e898865db483e8fb22a65899234: Merge pull request #156 from stacklok/fix-test (@rdimitrov)
* e41d54d9be84e80b7b931ff3c0b746917c450c71: Merge pull request #159 from jhrozek/exclude_regex (@jhrozek)
* c75392e84521181bc60d22dfde5cbadeb3137bba: Merge pull request #160 from stacklok/dependabot/github_actions/aquasecurity/trivy-action-0.23.0 (@JAORMX)
* 1cb8dbe474ef445e069d3f9b36daff4d4ce663e5: Merge pull request #161 from jhrozek/exclude_regex (@jhrozek)
* b367659a8dbcfb7fa1d87a8f3919c8da7986d369: Update documentation (@jhrozek)

## Changelog
* 2d070de195a35e6c8490e22859d9f6847ea9f8fc: Bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 (@dependabot[bot])
* 52a0ca23f512d76ca5e0d278661909ecd0290c95: Bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (@dependabot[bot])
* d644261dc7346e0c9a3adb1d27de95fba62cd6d2: Fix missing ldflags while releasing (@rdimitrov)
* 6cf7b5ca9ea43f9d47583f05c3b1e0cb427aadd7: Fix version variable path in goreleaser config (@JAORMX)
* e6f63f5410162e39b7a0e0f67bb07c824dd1a137: Merge pull request #141 from stacklok/dependabot/github_actions/goreleaser/goreleaser-action-6.0.0 (@rdimitrov)
* a474b43aab5bc0c0ce4d7fb2272f13efe6bc6596: Merge pull request #142 from stacklok/dependabot/github_actions/aquasecurity/trivy-action-0.22.0 (@JAORMX)
* 1dfc44d37b72c1bb67009dfdd055c92ca04bd962: Merge pull request #144 from stacklok/fix-version (@rdimitrov)
* 5068f349d6a11edf63dd812cf05cf91219ee26c0: Merge pull request #145 from stacklok/goreleaser-v2 (@rdimitrov)
* 1d1aa8ed2e12da7ca4aefc917f0e2825e487d0d7: Merge pull request #146 from stacklok/fix-goreleaser (@rdimitrov)
* fdb3e83aebc172f472e8f80fe09ba1f59f3e167a: Merge pull request #147 from stacklok/fix-release (@rdimitrov)
* 2d576c5ebb8bad0fd6f282bf9c1eea46618ba08d: Rename folder to directory field (@rdimitrov)
* d2868020152e701f0bc33095dc89b48a2f5b751f: Update goreleaser config to v2 (@rdimitrov)
* b1ede2e2488acd4f3c21230ce41d752dbd9fb7e3: Update releaser.yml to use v2 (@rdimitrov)

## Changelog
* 66826151e618c226278f3670e8fd0ec8bbb2a4ca: --- (@dependabot[bot])
* c00245f87ef1de7d6f6db105a081384d497782ce: Add Trivy repository scan configuration (@stacklokbot)
* 3a0d04b4a864dc9e5d5720a2c4ef129b8f8b2164: Add another option for passing an already created GitHub Client (@rdimitrov)
* 2f04baff4fd434c4353e91d7d981db9aafcbe7b5: Add more replacer unit test coverage (@rdimitrov)
* f5908a018f65d0dd85182cde6bcc0639a0f5d3d1: Add more unit tests - cache, config, ghrest, cli, action, image (@rdimitrov)
* e5da0cf831676262889bc23519c4cd872611b4d4: Add test case for custom regex and tidy up the package layout (@rdimitrov)
* 968d18d471fbf1f805953735277510fa443972ee: Add tests for the list functionality (@rdimitrov)
* 6fd9044a1ff78a30b4cf4ca5bea6407a1df8286c: Add/update the stacklok license header (@rdimitrov)
* 6c8c00d082258b83cc47be322c5c66b773bab6a1: Bump actions/checkout from 4.1.1 to 4.1.6 (@dependabot[bot])
* 9cc9e5140f6a1808b87ab9c82625c31562c0a6cd: Bump actions/checkout from 4.1.2 to 4.1.3 (@dependabot[bot])
* a5ed510d1a0947cf73f89ef95e5a6ff00207218b: Bump actions/checkout from 4.1.3 to 4.1.4 (@dependabot[bot])
* 776f763622a5496c3c68ab7061ffd3d529de2771: Bump actions/checkout from 4.1.4 to 4.1.5 (@dependabot[bot])
* d567176b3b0c22d81e940d80d79ba1299ecc11bc: Bump actions/download-artifact from 4.1.4 to 4.1.5 (@dependabot[bot])
* 2a69398a562b70ed2056e5dd8e21bb540264e393: Bump actions/download-artifact from 4.1.5 to 4.1.6 (@dependabot[bot])
* 3a13cc6c59f20c1383ded68e06c1b99307e9dcef: Bump actions/download-artifact from 4.1.6 to 4.1.7 (@dependabot[bot])
* 1b80f09af7bcc20f9b3707783e6785247282e1c8: Bump actions/setup-go from 5.0.0 to 5.0.1 (@dependabot[bot])
* abd3493d1cd7686e153c78e7b8ab52db40ddf1ab: Bump actions/upload-artifact from 4.3.1 to 4.3.2 (@dependabot[bot])
* c48ffb1e1a5a0e7d3430db86a16024ddc25aedf1: Bump actions/upload-artifact from 4.3.2 to 4.3.3 (@dependabot[bot])
* d72f99093c5c0852396e8d4fbe129bcd9d2098ae: Bump anchore/sbom-action from 0.15.10 to 0.15.11 (@dependabot[bot])
* 74d6dbaf2226a74f618112ba56cc3e782ad5d133: Bump aquasecurity/trivy-action from 0.16.1 to 0.21.0 (@dependabot[bot])
* 422473a5a266366ac1ae55c4bb435824787f4e46: Bump coverallsapp/github-action from 2.2.3 to 2.3.0 (@dependabot[bot])
* fa0aaf9f7085a441a86adcaa977b507a850cf85f: Bump expected hashes of checkout@v4 to 4.1.3 (@jhrozek)
* db02f603bb0b7bfc6bf34bf6d3150a973f46be3a: Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 (@dependabot[bot])
* d6c291830096c89551f10b1ee873dbb1ff0bd340: Bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 (@dependabot[bot])
* 39722c074372c49e44c51bcda682fa8f69a31422: Bump golangci/golangci-lint-action from 5.1.0 to 6.0.0 (@dependabot[bot])
* b27f0f1b2339bd1d5f575397f347a0199604dadb: Bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 (@dependabot[bot])
* 5d80d7848a338a2d5b7e688ae1c1718ff955a79d: Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (@dependabot[bot])
* 2b95c0832061e674fe051dbb4f80c0f588afe5cc: Bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0 (@dependabot[bot])
* fc9df038996e7c46aad40ed05570815cdf1bb845: Bump the expected hash of buf-setup-action (@jhrozek)
* 4ff1d926999c570575a3071741370d6cde0d56c4: Create a default GitHub REST client (@rdimitrov)
* 9528cdfa896d801055aef5226674c5db72b0c829: Disable the init check explicitly (@jhrozek)
* 7522446012f771cef2d334b9372b4917bd07a370: Do not overwrite the parser's regex if the new value is an empty string (@rdimitrov)
* 54d843a6c393abdd0e6f26e52d00f8e0a74b8c90: Fix linting errors (@rdimitrov)
* c2aa963eb53b0d3e3cfa5b33e166cdfcf5bcafe1: Group up the methods for parsing actions and images (@rdimitrov)
* 8a24357b89f484ef3027fa4ce1b351aa6d90ca05: Ignore processing commented lines in yaml (@rdimitrov)
* 10550d0bd11e1ee35ae72ddfd38b5b9fbbecf65e: Merge pull request #110 from stacklok/dependabot/github_actions/actions/upload-artifact-4.3.2 (@JAORMX)
* ccf50155890a5e0f6d264b63286cab8a77395d57: Merge pull request #111 from stacklok/depe

## Changelog
* a5fa5c73b0a293cf2bea64f6792f110969a66d3d: Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 (@dependabot[bot])
* 16f6f88dff8994d6b9613509ce13b00326608062: Fix golangci-lint output configuration (@JAORMX)
* 5f0a3d48945ff7152475aefc45e7a4dfcd48f42f: GitHub Actions: Don't call GH API if action is already commit-referenced (@JAORMX)
* 46390c43f22809e2004736c186c0e85c8ddb8656: Merge pull request #107 from stacklok/dependabot/github_actions/sigstore/cosign-installer-3.5.0 (@JAORMX)
* a5d725cc4798f95df5bfdf47aa2b68992d99a29f: Merge pull request #108 from stacklok/checksum-skip-gh (@JAORMX)
* 59367ae925d3705a7d702fe2491c3ad895fe91c9: Merge pull request #109 from stacklok/fix-gci-output (@JAORMX)

## Changelog
* 4e527783eb97a2f02f947bf3e1bfb326eca5cb1c: Add badges to frizbee (@evankanderson)
* a3723961a4e5ef9ae578719daaa04f643968ef4b: Add coverage support (@evankanderson)
* 7efe288bc5b45d9071891d47083c87f41533c5fb: Address linting issues (@JAORMX)
* 6b80e870d38ab142db37991a16d8126b6dd0ffc1: Bump actions/checkout from 4.1.1 to 4.1.2 (@dependabot[bot])
* fe5f2a168f25fe3a2dccb0550210a72bcb3ef794: Bump actions/download-artifact from 4.1.1 to 4.1.2 (@dependabot[bot])
* faaf9b44dc450b3a6b5e1d1526ca40697f0a98a6: Bump actions/download-artifact from 4.1.2 to 4.1.4 (@dependabot[bot])
* 095a3a8d29ce22f35dea8316206c5dcc41d42d69: Bump actions/upload-artifact from 4.3.0 to 4.3.1 (@dependabot[bot])
* 62f4948a4696d4128821ba833d8e703a40b598f4: Bump anchore/sbom-action from 0.15.7 to 0.15.8 (@dependabot[bot])
* 0a4af2e3ba383d4276ed8b9baf78a3916673fd37: Bump anchore/sbom-action from 0.15.8 to 0.15.10 (@dependabot[bot])
* 4d8b04af6464dd7ab4104d003532a6f9ace3a53e: Bump arduino/setup-task from 1.0.3 to 2.0.0 (@dependabot[bot])
* 2c456c93734ecd15d32a352f17a973eed9a2aeb2: Bump coverallsapp/github-action (@dependabot[bot])
* 68bc2906b739b2ea49148f4fd32a01bcf7ae0173: Bump github.com/docker/docker (@dependabot[bot])
* 06225f6217d75d38e0bac48bd3bd34c4a812c1b9: Bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 (@dependabot[bot])
* f39eb307c8f4896242a90ca5870d379a5dee98b1: Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot[bot])
* d805cd28bde6343c85ba6c47eb9e4cd3db87f5f4: Bump golang.org/x/sync from 0.6.0 to 0.7.0 (@dependabot[bot])
* 2948faf973f14052ae3682129d69ce9a4395d99b: Bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 (@dependabot[bot])
* 0668b888a68ef84315a866a4e9691e3c4b25faab: Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (@dependabot[bot])
* 80a8c1a6fafdd30c1b417e5cae5a16751fb0ebca: Bump slsa-framework/slsa-github-generator from 1.9.0 to 1.10.0 (@dependabot[bot])
* 3a9206dcdf8d3da0c11cfb6b90af4a0b9e9ee59b: Bump slsa-framework/slsa-verifier from 2.4.1 to 2.5.1 (@dependabot[bot])
* e16003f2c3ab95746b27f82d5fc55469488935e7: Fix unit tests by upgrading the buf hash (@JAORMX)
* 2b6cf0415025575816f0f45e0a517a1f1060be31: Merge pull request #101 from stacklok/dependabot/github_actions/slsa-framework/slsa-github-generator-1.10.0 (@JAORMX)
* 0f0ee66ffd64d120974168159bb3252f8dccacc8: Merge pull request #102 from stacklok/dependabot/github_actions/slsa-framework/slsa-verifier-2.5.1 (@JAORMX)
* 916e329ed4cca7855ab4a4d77796f8ea867d3327: Merge pull request #103 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.10 (@JAORMX)
* 0c8a0b99c62e08029398449887196d2f47f66a1e: Merge pull request #104 from stacklok/dependabot/go_modules/golang.org/x/sync-0.7.0 (@JAORMX)
* 8d6b451be4cde7fbd5ec13cfe1cec9c43ba8c5a0: Merge pull request #105 from stacklok/fix-unit-tests (@JAORMX)
* cd903fc962d1bd1e4295a91f622ea0b6a5710804: Merge pull request #106 from stacklok/upgrade-go-github (@JAORMX)
* 4234146cdb48a9bc7f2ea604f0c3f0627c6ac787: Merge pull request #84 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.8 (@JAORMX)
* 86907c059d6999acf1c746274b01e95d2c84786a: Merge pull request #85 from stacklok/dependabot/github_actions/sigstore/cosign-installer-3.4.0 (@JAORMX)
* 720b7c48a24edf0ebb4eb805927db88abbab7f98: Merge pull request #86 from stacklok/dependabot/github_actions/actions/download-artifact-4.1.2 (@JAORMX)
* ff2b9f33368ef134d91ebf5b6092b9a5bd53fadb: Merge pull request #87 from stacklok/dependabot/github_actions/actions/upload-artifact-4.3.1 (@JAORMX)
* 559cb925ac1b7124277bd10e56a1e2679bdf5b69: Merge pull request #88 from stacklok/dependabot/github_actions/arduino/setup-task-2.0.0 (@JAORMX)
* 3e7e6d7d9d625ffbebc589a40533dfb28b728884: Merge pull request #89 from stacklok/dependabot/github_actions/golangci/golangci-lint-action-3.7.1 (@JAORMX)
* 6e35c5db2e7d556ce9effd5c22062eff969ed194: Merge pull request #90 from stacklok/coverage (@JAORMX)
* ce2b86a6cfa1be1405251cd68ef3b55a31a0983f: Merge pull request 

## Changelog
* 0209140420eb6f3fae0feebc2668230dff61ae17: Adding issue templates to project (@dussab)
* 9d89ad18ca6412b809a7ac8540e49ba90b8f7ac0: Bump actions/download-artifact from 4.1.0 to 4.1.1 (@dependabot[bot])
* 9817e2080f5caef67562f94833751b498b345157: Bump actions/upload-artifact from 4.0.0 to 4.2.0 (@dependabot[bot])
* a832add47eecfd35ab364e286e1d6ab7ca5a5e26: Bump actions/upload-artifact from 4.2.0 to 4.3.0 (@dependabot[bot])
* 71a67841f19177cfcbd5a41c3d6eb70c74f88e6b: Bump anchore/sbom-action from 0.15.1 to 0.15.2 (@dependabot[bot])
* eeb98a31d916c2409bb2c1aae4e5f5dd3a30e333: Bump anchore/sbom-action from 0.15.2 to 0.15.3 (@dependabot[bot])
* 69e78c60d7626de2942599b9e9886df443c0e030: Bump anchore/sbom-action from 0.15.3 to 0.15.4 (@dependabot[bot])
* 2b51221ad53673949dccb5477ab7fb589d3ecb97: Bump anchore/sbom-action from 0.15.4 to 0.15.5 (@dependabot[bot])
* 29d091528ed9046d34f7b1c09ccf3f0edd13c9f7: Bump anchore/sbom-action from 0.15.5 to 0.15.6 (@dependabot[bot])
* e55455c6d2758c17fb3577bfb9c642f7a39519c4: Bump anchore/sbom-action from 0.15.6 to 0.15.7 (@dependabot[bot])
* 90ae8acd013450906ac1fee2f2dbf321dbe4ccba: Bump github.com/deckarep/golang-set/v2 from 2.5.0 to 2.6.0 (@dependabot[bot])
* 00c7c214af588d1534f2ea1c941a61ac46001f4b: Bump github.com/google/go-containerregistry from 0.17.0 to 0.18.0 (@dependabot[bot])
* 42c9720aa0c142b675d0491a7fd3e128af923e88: Bump github.com/google/go-containerregistry from 0.18.0 to 0.19.0 (@dependabot[bot])
* aa65d5bdcad623da8201d673c0dc01882f64f4e0: Bump golang.org/x/sync from 0.5.0 to 0.6.0 (@dependabot[bot])
* b38eb009f91caf205c981044bce259ba3f1fad6e: Fix change in buf setup action checksum (@JAORMX)
* cdcae14b4cc2f5e6431846a7105d0487bb65ee94: Merge pull request #56 from kranurag7/kr/add-version (@evankanderson)
* 0c8be2f04becfc5684ec5bce116b61a8430fbcc5: Merge pull request #58 from kranurag7/kr/add-ldflags-to-goreleaser (@JAORMX)
* 2f8ac5678fbdd8b9e404f19e03793023177f446e: Merge pull request #60 from kranurag7/kr/add-table-view (@JAORMX)
* c16d3d8bf2806eb145a9ec88cc3c7f6573f22406: Merge pull request #62 from stacklok/dependabot/go_modules/github.com/deckarep/golang-set/v2-2.6.0 (@JAORMX)
* 267f06efb7eb11ae805a6dbb231b19d68ec26c13: Merge pull request #63 from stacklok/Add-Issue-Templates (@JAORMX)
* 752763c1eb2e90413bf3a6140127dfca98923006: Merge pull request #64 from stacklok/dussab-patch-1 (@JAORMX)
* 601cd2a5eb0e7c88f9a4a4adc43acd7236c18fa7: Merge pull request #65 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.2 (@JAORMX)
* dcc8597eedf73cc48311bedc4c37e3618462452e: Merge pull request #66 from stacklok/dependabot/go_modules/golang.org/x/sync-0.6.0 (@JAORMX)
* bb5f5ca1f5b8018a1a88bee5dc1c27051a880de7: Merge pull request #68 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.3 (@JAORMX)
* 658aefee0c3222143daeedcbb15754094f8cef99: Merge pull request #69 from stacklok/dependabot/github_actions/actions/download-artifact-4.1.1 (@jhrozek)
* ad431ef9ca6f0756e8832b72969ba4176491594d: Merge pull request #71 from stacklok/dependabot/go_modules/github.com/google/go-containerregistry-0.18.0 (@JAORMX)
* deb14796dcd1952c8551d14d7ac71155e45d7e5f: Merge pull request #72 from stacklok/fix-tests (@JAORMX)
* 53e1131222d4fab8c04865510735c6838f5d1941: Merge pull request #73 from stacklok/dependabot/github_actions/actions/upload-artifact-4.2.0 (@JAORMX)
* 0e7ebea00a7498afb3e532c8fdeccf595f4365eb: Merge pull request #74 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.4 (@JAORMX)
* 5139f46d3ed06fe6afc35fdd39f9bbd9d90826bb: Merge pull request #75 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.5 (@JAORMX)
* 638935ee4a68d45957fd082d241ba4cf9a6e39d0: Merge pull request #76 from stacklok/dependabot/github_actions/actions/upload-artifact-4.3.0 (@JAORMX)
* b4a38b51ba5df674d06d271ab10173c90d51edb4: Merge pull request #78 from stacklok/ghactions-list-globals (@JAORMX)
* ba2ad40fcf45f53d775ca79160d17539ebba0f7a: Merge pull request #79 from sta

## Changelog
* aa48c1a4d9e1d22e4415791010e899de566d5d56: Allow excluding just the action name (@jhrozek)
* 305a3f1f1fc0826b40862f89460cf90e730357b5: Bump actions/download-artifact from 4.0.0 to 4.1.0 (@dependabot[bot])
* c72bf21b62943531f7ca7c4f5b7c4390d9f8b283: Merge pull request #53 from jhrozek/exclude_basename (@jhrozek)
* 6186d62fe12aa936199f403152fae64af97d64cb: Merge pull request #54 from stacklok/dependabot/github_actions/actions/download-artifact-4.1.0 (@JAORMX)

## Changelog
* 241a0bf8e6eabec0a74ab2b5463f7b17fa16a051: Add utility function to parse frizbee configuration from a billy FS (@JAORMX)
* b7db63b2084f4506f84eb293dca4de6a5e29fcf6: Merge pull request #52 from stacklok/config-from-fs (@JAORMX)

## Changelog
* 9ac977c692d348be5200af08133c721e013da95c: Add descriptions to task targets (@JAORMX)
* 429215ca0bad4e64cc889fe84cee19b37ce426b9: Bump actions/checkout from 3.6.0 to 4.1.1 (@dependabot[bot])
* 036bc8f5413572abe88609797bbbbaf7cc56db5c: Bump actions/setup-go from 4.1.0 to 5.0.0 (@dependabot[bot])
* 9a9c8bfbaf0e53a06a2e22fb905ebabc4fb297e4: Bump anchore/sbom-action from 0.14.3 to 0.15.1 (@dependabot[bot])
* 8c8e12b6c2f91bcf1073d61eaa77a8892d93f24e: Bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (@dependabot[bot])
* fe613e508fd00cf8f4fe14c1d5abf9bbb245fa08: Enable dependabot for GitHub actions (@JAORMX)
* de4567590d4259b0851b2d90c189b2767a7d8340: Merge pull request #41 from stacklok/dependabot-actions (@JAORMX)
* ba2664a9f80c00317e15cab99922aaad6d36b765: Merge pull request #42 from stacklok/dependabot/github_actions/actions/checkout-4.1.1 (@jhrozek)
* ff69a857c88321b68804f3cee90ea5c6a3facb80: Merge pull request #43 from stacklok/dependabot/github_actions/anchore/sbom-action-0.15.1 (@jhrozek)
* af491040b0e386db2b4e33351b7b632a1c42dd37: Merge pull request #44 from stacklok/dependabot/github_actions/actions/setup-go-5.0.0 (@jhrozek)
* e9384757742a9e3afb2b6d7f7fec986fb4e613c7: Merge pull request #45 from stacklok/dependabot/github_actions/sigstore/cosign-installer-3.3.0 (@rdimitrov)
* 26083e51a872e5ddeefebfb5c9db774e3d539841: Merge pull request #48 from stacklok/upgrade-down-up-artifact (@JAORMX)
* fa5fb2f6493cce98a22c36de25701bc9e78225f8: Merge pull request #49 from stacklok/task-desc (@JAORMX)
* a7de07e2585fe8ea8253d714355e6b6e59ae6c9e: Merge pull request #50 from stacklok/frizbee-tok (@JAORMX)
* 213f1df40c63beda1481038c9e010d0d9c7cd0f3: Merge pull request #51 from stacklok/ghtoken-help (@JAORMX)
* 4e747edcfd081db55dab8e3e0373026068bda8e7: Output informaiton about the `GITHUB_TOKEN` env variable in relevant commands (@JAORMX)
* 7722703032a5590afc780b82afe3a1046efaf50d: Upgrade download/upload artifact github actions (@JAORMX)
* dcc94fcd0d4fdab62420dc2aae2652a5d825681d: Use GitHub token for doing frizbee CI check. (@JAORMX)

## Changelog
* 5a2bf7aeb4d04348c6504e5702aea312d1c83354: Merge pull request #40 from stacklok/skip-local-list (@JAORMX)
* c55c1bc6e8f5f4202683d9b6293ef0b66420b145: `ghactions list`: skip local references from list (@JAORMX)

## Changelog
* 72dfb94b52c08d4180098b2c4f9bbde52f8b0771: Add `kubernetes` and `docker-compose` sub-commands (@JAORMX)
* 180ecd8b4056c65a427778bee823c6cf5dbfa185: Bump golang.org/x/sync from 0.2.0 to 0.5.0 (@dependabot[bot])
* 2f968c68da4f897032c75cb18fb44b9b4f3ac7b1: Merge pull request #34 from stacklok/dependabot/go_modules/golang.org/x/sync-0.5.0 (@JAORMX)
* 1cefc1eabc1852dbc901fdccb21b95ab64182746: Merge pull request #35 from stacklok/k8s-and-compose (@JAORMX)
* 52c1435a5a4cdc72c6d01f370b62a52d56bfac00: Merge pull request #36 from stacklok/codeql-go (@JAORMX)
* bb4bdfa30d73b84fb3e7af07c1bb7f0d47c2c1f7: Merge pull request #38 from stacklok/fix-tests (@JAORMX)
* b16c6ef06e60a2f3f5815e50ce546082d26b3963: Replace `require` for assert in container tests (@JAORMX)
* 0d16815513eb2b28f1f8d71dc353566db3390ccd: Set up go in codeQL action (@JAORMX)
* 4fb10d9e0a9f302863d0ffccdccfd24ca64ea71b: Use an even more esoteric domain for the test (@JAORMX)

## Changelog
* b006fb89d12ad1331ed686157b06288cadffe40e: Add cache implementation (@JAORMX)
* be7bc4d8bfd6c284a58f98b624130466c617f31e: Merge pull request #33 from stacklok/cache-references (@JAORMX)
* 85ed3a59dda1d780f29565064ac5c5f2e6ad1546: Use thread-safe cache for replace commands (@JAORMX)

## Changelog
* 786a080c2712abc65cb1a5d3da5e9479e01d9107: Add CodeQL scanning to frizbee (@JAORMX)
* f70c2afb7acbd52cfbdb71b3abf9403fa75f5e05: Add `dist/` directory to gitignore. (@JAORMX)
* 11a0da32a865368935811c3586b7588f2c1953d1: Add security policy for frizbee (@JAORMX)
* c84b3633925539391873a24c592ceb5925d8b420: Bump github.com/deckarep/golang-set/v2 from 2.4.0 to 2.5.0 (@dependabot[bot])
* eac25428d97c3405237b63bfe57cc6c50c98d2a2: Bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 (@dependabot[bot])
* dc9c79b00f33acd752f601839711497763026569: Fix replacer tests (@JAORMX)
* 5057b23b946b80870031f71101c4f9490e231ce5: Merge pull request #23 from stacklok/dependabot/go_modules/github.com/deckarep/golang-set/v2-2.5.0 (@JAORMX)
* 007af949aff0a608e0fa705c49d0938ae2534fad: Merge pull request #24 from stacklok/dependabot/go_modules/github.com/google/go-containerregistry-0.17.0 (@JAORMX)
* 48bc4cb693986c249e333897f7d3158550b927e4: Merge pull request #26 from stacklok/fix-containers-replace (@JAORMX)
* 44a5ea656234d075e099cedb86493b09527dbfcb: Merge pull request #27 from stacklok/dist-gitignore (@JAORMX)
* 2e527c175a446d9b6634eeadfe8b9b27532e97b5: Merge pull request #28 from stacklok/security-md (@JAORMX)
* 16e9d2012e666c673701cac54caa05ef480748b6: Merge pull request #30 from stacklok/replace-parallel (@JAORMX)
* 41c54fac48f8c0f0fd6d576de06dd229354e2794: Merge pull request #31 from jhrozek/interface (@jhrozek)
* 59913730266f13bb9de6745f941f171bb8958e1b: Merge pull request #32 from stacklok/JAORMX-patch-1 (@JAORMX)
* 00a01f340f497e43bbbf76fdd2b16c353cb96b14: Process replace commands in parallel (@JAORMX)
* 659cb542fc4038486d377309ac23f9d2f4ff17d2: Use a wrapper interface instead of using go-github directly (@jhrozek)
* b329ae7855d108ce2cb904dd6a8736832633c337: Use commit references for CodeQL (@JAORMX)

## Changelog
* 84fa687ea65a90ad45617b98c4d64dcfebe3112d: Add README and project information (@JAORMX)
* 6d631282271c39d4e67be51790d1b6b4402c1b35: Add container image support (@JAORMX)
* 05ed3a56a70aa194e319bebb51b30442ef15ee3a: Add utility to replace image references in YAML files (@JAORMX)
* e2cd8484e5323f24d5220d89fd0838d1df31e513: Address stacklokbot comment (@JAORMX)
* 202b2b405cd190dc8dbdbd326117b4546da65658: Bump github.com/deckarep/golang-set/v2 from 2.3.1 to 2.4.0 (@dependabot[bot])
* 90fcc08b72560a238b05b1f9a31bdd1dcaa93260: Merge pull request #18 from stacklok/dependabot/go_modules/github.com/deckarep/golang-set/v2-2.4.0 (@JAORMX)
* 82768f4811caf6bd3c0ad3a2f3b278fc9fe6bc33: Merge pull request #19 from stacklok/containerimage (@JAORMX)
* 6b87dfc115dc9673759c5a17f71891e863e3d6d7: Merge pull request #20 from stacklok/yaml-container-replace (@JAORMX)
* 022aed280b5e991d3537b871029ae27fcf475d9b: Merge pull request #21 from stacklok/readme (@JAORMX)
* dd9454173fe8525e7931cc9c9bfd0f79cfa45e9a: Merge pull request #22 from evankanderson/simplify-frizbee (@JAORMX)
* 5cfdca318e5a980e2f1b1d05cbf51da64a256ae3: Remove custom setAsSlice for ToSlice, switch to ThreadUnsafeSets (@evankanderson)
* 7a050669200e158462df27cc716f98bcc7ef7769: Update comment -- the methods should still be thread-safe (@evankanderson)
* f83d02213a2534cc8f70c0de9790ef433e7614e9: Use `go get -u` instead of replace. (@JAORMX)
* aad820de3346b7085146cd9371552493c94cb369: fix lint issue (@JAORMX)

## Changelog
* a614da5a870a79bcf0ebd3478b4e8ddec40a9ffa: Merge pull request #16 from stacklok/rename-title (@rdimitrov)
* 01bddb80b95df79905b0df001db3534c68f27a65: Merge pull request #17 from jhrozek/gomod (@JAORMX)
* 8c187895303b87a7a70839f0feff651d59a44d67: Only require x.y version of go, not x.y.z (@jhrozek)
* 6fe6795aa94f8aed0f322006074e20d1f4ac5c19: Rename frisbee to frizbee (@JAORMX)

## Changelog
* f2595bc289ebacc0978c3957d13ef8e2e04ddb38: Add Dependabot configuration for gomod (@stacklokbot)
* 1e7f5ef7bed706c922b1c4addfb1e7a7ba8ba8ca: Add full action name in list (@JAORMX)
* 07990fa8d9c04ea040b3f706eddd906841ca8f6f: Add json tags to the Action struct (@jhrozek)
* c76466a25ac9547b34028f9c08eadf40a68d66ed: Merge pull request #12 from jhrozek/list (@jhrozek)
* 68ab48be54e1a4c4b7be410e0f02a0cc3dca1175: Merge pull request #13 from stacklok/action-in-list (@jhrozek)
* 7867501e6deb43b801932957a4c3978da2915f69: Merge pull request #14 from jhrozek/tags (@JAORMX)
* 8f6b150b318fc37de9d9da4a3db0707c21d69f7a: Merge pull request #15 from stacklok/minder_add_dependabot_configuration_for_gomod (@JAORMX)
* 990310b5dd2d898542c5b7b49ed48da56d08df27: Use a set for the list to avoid duplicates (@jhrozek)

## Changelog
* 79595de18b973101ee41bb1c5a5d556e68af7faa: Add configuration for frizbee (@JAORMX)
* bf979bb56cccbb65bd07398c286ebc0574426d3e: Add ghactions list (@jhrozek)
* b340bf7b069fa9cafbc4b576ad144003e2eb57d0: Merge pull request #10 from jhrozek/list (@JAORMX)
* 30218a2385a42f6c4db42bc76124f5127d9eb9c5: Merge pull request #11 from stacklok/config (@JAORMX)
* 48a8cbfe539e3a69dfb4af57f0802c6358bae1b6: push configuration file for frizbee (@JAORMX)

## Changelog
* 1215fdad66275d2e2322aee9b4163a1404612b4c: Add Apache LICENSE (@JAORMX)
* e6abf063602de45a6b7e192ae03ec90727ef2ece: Add `one` sub-command (@JAORMX)
* 19c6e7c07fa9c4f9419d09dccd1a21f7be344dde: Add basic CI (@JAORMX)
* 91b2a759821393f13d79876f819602be2fb1c5a1: Add capability for tests to receive auth token from github (@JAORMX)
* 1640e160ad185e6024418ef0e82c8a15176af9b0: Add contextcheck linter (@JAORMX)
* 25c4540b9de7c8610120cd1fa9735459c7d11b57: Add decorder linter (@JAORMX)
* 8a8987f62cc4b8596f879899fc570a3489dc5df2: Add dependency for boomerang job on build (@JAORMX)
* 49ec1b9dd6f533fc35a407f175808abc48ef262c: Add dry run flag (@JAORMX)
* d92d70be139b41a88a54c81c4075ae8d2fd8885d: Add errcheck linter (@JAORMX)
* de3d13fc4e3a44955a024ade52e7dd7cf1be584d: Add exportloopref linter (@JAORMX)
* 6e8f3c2c03262d9f43f922acea0ee64752ade37f: Add forbidigo linter and fix (@JAORMX)
* d83bafebb6a7d02622a0fde85b0f7a91357e8f61: Add forcetypeassert linter (@JAORMX)
* c9a3bc75c52f90561a24811fe36ebedd9a5e2b90: Add gochecknoglobals linter and fix (@JAORMX)
* e1af347f0decf97925694990d79ec8ea8d26746e: Add gochecknoinits linter (@JAORMX)
* 242cd312bca49e5e6effb7520a1562f42353f12d: Add gochecksumtype linter (@JAORMX)
* d7f6d9fbf881d98ddc412aacc4532d16c8892465: Add goprintffuncname linter and fix (@JAORMX)
* b4d86de3b67a7bf3a1829be74c50a23cf9d131b4: Add goreleaser configuration and release workflow (@JAORMX)
* 1eb4a38880c9e9a1a428c6f7772e883e518b0027: Add interfacebloat linter (@JAORMX)
* 558728c6345402e01c2c12721f20e976d0f6e152: Add lint job (@JAORMX)
* bb3ce53b08466281c9e2cf0c610199a7691767da: Add lint task and fix issues (@JAORMX)
* 9cebbc28427e72a28797f1530140adeda1d5b9d4: Add long description to ghactions help (@JAORMX)
* a7b59ecba6bc7d8936fb81e07b92ccd0e16fe705: Add makezero linter (@JAORMX)
* 5e8f0430b291e6c8d6694b4a341642e756465c09: Add mirror linter (@JAORMX)
* 2c037381d018a02795b7d5d2d2277cf640061a97: Add missing golangci-lint config (@JAORMX)
* b84d0f31611d464e5c7d9c669abebdc7538a8b0c: Add noctx linter (@JAORMX)
* fa76e95f1c2ce10300ea251968b4d6f6b4d0c383: Add nosprintfhostport linter (@JAORMX)
* 7191a041cf3bd8ac0b6958253d2782eea971ec9a: Add perfsprint linter (@JAORMX)
* 76472510de6447a3564e1b36094dff76f5772fd2: Add support for sub-actions and fix tests (@JAORMX)
* b74d88750781939afa3ec8c9ba7e5b1cde533f7e: Add support for virtual filesystems and fixes (@JAORMX)
* 8d35210fb9f0cbe0805d19f0bba860b8a3b50b33: Add tenv linter (@JAORMX)
* c9fd191db43e630960237c45edc5a68557e9f075: Add test task (@JAORMX)
* 17155275ce3c9288a14a3b191a0382782d52279d: Add usestdlibvars linter (@JAORMX)
* 5ea98207df26b34d654c5c2f2026ddb84a2eb05c: Don't use BINARY_NAME (@JAORMX)
* a801f76945085b581d13ddfbc952597cef25fd5e: Don't use BINARY_NAME for artifact actions (@JAORMX)
* cf2968c1afb26db97518f8cee24398d921b128e4: Fix CI with repo name change (@JAORMX)
* 1590a513e32c2779f38699c275f124705c7efd9e: Initial command line implementation (@JAORMX)
* b16169eba4cf029688e3ed594b4a752d95c2b473: Initial commit (@JAORMX)
* fb89543d01957196bd85ab0d7480bffca0d6a428: Make boomerang executable for boomerang run (@JAORMX)
* 055aa8c15e8dfdcc7ab1e67d8275445bbb91bcef: Merge pull request #1 from stacklok/boomerang-on-boomerang (@JAORMX)
* 8c37858081435f016e3fdd4a4eb8cbe582bcdefa: Merge pull request #7 from stacklok/goreleaser (@JAORMX)
* 11e2ae134dffb031a1d150e693ffd314524a4edd: Merge pull request #8 from stacklok/task-token (@JAORMX)
* 5b53f944ba6f2650b8ebcf48223639e3bc5b1d42: More changes to the CLI (@JAORMX)
* e0738f5f9a8a753821d02b3617f44c3ddf2055a6: Only overwrite files that are modified (@JAORMX)
* 8efef800b980502a0771f2a72d74d9983a4d76a1: Remove debug printf (@JAORMX)
* f8d48c3574b787787072993e85c5cc69e82b24a1: Remove gosec excludes (@JAORMX)
* a45854186274b824027542f1fb75e36a9deb7022: Remove prerelease flag from goreleaser (@JAORMX)
* 9a05b12499a329744228f52ede226f4c1cd0db96: Remove trailing slash from .github/workflows directory if any. (@JAORMX)
* 917cb82e520dc16417