minder: baixar versions anteriors

## Changelog
* f0b736a1e16a1de8d2008df85b1e2ba3567e1bba: Fix a few control oversights (#6689) (@evankanderson)
* 4ee15fa5e51570ccadb23403a96d99344173c740: Fix lint errors which crept into the codebase (#6670) (@evankanderson)
* 5176703f954fd44192f962531d0514ef8a384151: Prevent Compose from creating config directory (#6681) (@maxi-maxima)
* d418f1e2257cbcb7b99cc2d60a8073035b986e1b: Update dependabot for codeql-action (#6649) (@evankanderson)
* 621a30d65bbe6db47625e91f3762a88ac3f5e5e5: Upgrade lestrrat-go/jwx to v3 (#6668) (@evankanderson)
* df934341361b641b8b24be399a0b91020f971b59: build(deps-dev): bump globals from 17.7.0 to 17.8.0 in /docs (#6674) (@dependabot[bot])
* cefe3aa7cb4c0c4e4b0f7736fa66bfd611114364: build(deps-dev): bump markdownlint-cli2 from 0.23.1 to 0.23.2 in /docs (#6673) (@dependabot[bot])
* aa52154ddac9fac54077aeae77a39afbaa72c9d6: feat(ruletest): Expose rule evaluation output to Starlark tests (#6666) (@krrish175-byte)
* 4c2a63737d6251a6f647b1fa593d172163db5709: feat(ruletest): expose eval output to Starlark tests and fix CWD-sensitive path resolution (#6682) (@krrish175-byte)
* af371efd767c312c19d35b87cc7aeddceae4bfb3: fix(ruletest): initialize params map to prevent panic on template rendering (#6688) (@krrish175-byte)

## Changelog
* ee6220095164a921b5a61122a3db98d8384d784e: Advance the Rego V1 migration while retaining V0 compatibility (#6622) (@dakshhhhh16)
* 8e663204f5b0482050513a600cafc02d0405386f: Auto-generated cli documentation update - 2026-07-27 13:44:39 (#6632) (@github-actions[bot])
* 907160803ece1006fcdb5b13ece349c824d747e3: Complete Rego v1 migration safeguards (#6607) (@dakshhhhh16)
* d6bb677adc9493c056b46c0f82a2916f932da7b5: Enable test framework to test rego-format ruletypes (#6639) (@evankanderson)
* 359da9e53ad97689c1a6a0ffe0df87f111880a39: Feature: support ruletype definitions as rego + metadata (#6558) (@evankanderson)
* a38043d0b7285b677636948c4019860b4d2029a0: Improvements to ListEntities (#6535) (@evankanderson)
* 387255c89bfbaa4d23cee261754f28c4c000563f: Support labels and assignees for issue remediation (#6609) (@codejasleen)
* 5cadb69542cbb52f646eac4c6915c233010361d5: Update golang.org/x/text (#6640) (@evankanderson)
* fe821cfe8afe46d978b707ac8c9438ff449cb4f8: build(deps-dev): bump markdownlint-cli2 from 0.23.0 to 0.23.1 in /docs (#6643) (@dependabot[bot])
* cb7d76c231f1a16bc07f25e6efca5b32f3bbbd8a: build(deps-dev): bump prettier from 3.9.4 to 3.9.6 in /docs (#6644) (@dependabot[bot])
* 5ce605dbd27a3fdb443b653a1513333b96b78075: docs: document issue remediation (#6631) (@codejasleen)
* 7ef0d3b529827fd560835f96322bb9e7c8508d13: fix(mindev): exit with non-zero status on syntax errors (#6637) (@krrish175-byte)

## Changelog
* 902e7f5229565714cf5d18e74afda1fd4ffa552d: Additional goreleaser fixes (#6610) (@evankanderson)

## Changelog
* c2874b807b8ed5a6f1125155d171e91b9d659922: A few minor datasource docs fixes (#5930) (@evankanderson)
* 68092f24ef5452a9ec11e059f82aee36be2ca107: Add CLAUDE.md (#5946) (@JAORMX)
* 7310899edbe0341e9c69e2f29b349d4f88b22e4d: Add device authorization flow and request debugging logs (#6107) (@evankanderson)
* e4f6f47174741920b42f111777b83ffaf7cf41e6: Add names to returned entities-with-types (#5944) (@evankanderson)
* a9b31bc0abd3e198d9e795538686acb69a4ba98a: Allow omitting `def` in profile rule definitions (#6137) (@Copilot)
* fcf05e488fc8f370db468a8db70d07fe811b81ca: Avoid leaking internal error messages, simplify code (#6074) (@evankanderson)
* ac1c209ee3fb7137ddef3778697279414e82f730: Deflake flagged_driver_test by expanding mutex (#6062) (@evankanderson)
* bd8ef91d7d26d44c61e10916e62172bf473f5aa2: Document bootstrap target in CLAUDE.md (#5947) (@JAORMX)
* 833ab1808278ea58646ccef9694ad82ccdef5cbc: Fix race between message.Ack and field access in tests (#6075) (@evankanderson)
* 4902e2709c913a7e199b4d726c4906c98bd5af2d: Fix race in invites service test (#6092) (@evankanderson)
* e71edd2f9114a9c8247f4f7aaa9fcdbe90d0ca90: Fix remaining lint error (#6140) (@evankanderson)
* 124a9ad670da7dd809f30f8d2e8f772cc9667545: Fix terminal checking on Windows (#6141) (@evankanderson)
* 9d5854a7a4aa1d60bde53b0ef3d87d940735b245: Generate and store failed test results for later consumption (#6073) (@evankanderson)
* 7c76bb232d768ac6ef3393ca341f817b164684ca: Implement RegisterEntity consistently across providers, with test (#6047) (@evankanderson)
* 6247f45ac1a6f3962c7b5a3252ffea1563eb729e: Implement RegisterEntity generic API endpoint (#5959) (@JAORMX)
* 11e78c0056f85d3449fe51b837adaa0cdd553d93: Phase 1 + 2: Remove legacy table writes and migrate reads (#5913) (@JAORMX)
* 1b9742c21789e0dca33d6bd26b2a24377dee2188: Phase 3: Drop legacy columns from evaluation_rule_entities (#5931) (@JAORMX)
* 5eed5e2b4d1078de46bb022fd987e24a3669ac8c: Phase 4: Drop legacy entity tables (#5932) (@JAORMX)
* 7a779f4695945485fe24666f17db2ba4d70c24e9: Publish docs to mindersec.dev domain (#5948) (@evankanderson)
* 0f98d9824e6993ee05bf765dfccabd3f4a671117: Refine error messages in batch processing (#6142) (@evankanderson)
* 74cf67b44cd3bc0725f28e36341cb8bb90e237d3: Remove user_management feature flag (#6106) (@navnitms)
* 7a1fa1770959ab590ae74ffe4c11292161c1e51c: Remove: machine_accounts feature flag. (#5971) (@Mujib-Ahasan)
* 3c1f652ffe984a53c8d18a6e5935736d229910b1: Replace mock service with simpler-to-configure fake (#6052) (@evankanderson)
* 3455e6b5fbb639d4da5dc5c09b0d12c3ac32834b: Several Minder client/server fixes (#6088) (@evankanderson)
* 11175222d2a408f354a3ed60ec049d5c33f2a80d: Update direct tools requirements and regenerate code (#6051) (@evankanderson)
* 4d2e6c12d71374c7b82de97d53ee61527d46f168: Update pull request CI to produce markdown summary (#6063) (@evankanderson)
* b9783cbf5a08826caf317664a6e3c29398b5a1ee: Update tools for golangci, buf, and oapi-codegen (#6167) (@evankanderson)
* df91bd971ff532887f0ca12b8638060311daec62: Update tools, including golangci-lint, and fix errors (#6124) (@evankanderson)
* d35a9a53c17ea35ba03a1b91bacf8e3d71e8957a: Upgrade github.com/sigstore/sigstore-go to resolve CVE (#6031) (@evankanderson)
* faa60a8fff10a0895a9b87b31abce720f9b6746f: Use rule short_failure_message as fallback for evaluation failure message (#5933) (@JAORMX)
* 033e57898bb4caab08931a2f030cf317d3fb1062: build(deps-dev): bump ajv from 6.12.6 to 6.14.0 in /docs (#6123) (@dependabot[bot])
* 6a0f7f67d801d699f265d1c03aae6cc07f504a2b: build(deps-dev): bump globals from 16.4.0 to 16.5.0 in /docs (#5955) (@dependabot[bot])
* 5e5f0ab3d81f9017873f719454566e2fd29b3f80: build(deps-dev): bump globals from 16.5.0 to 17.0.0 in /docs (#6046) (@dependabot[bot])
* 44ddfdd7de1152ddd78d13199b4a69808c19572a: build(deps-dev): bump globals from 17.0.0 to 17.1.0 in /docs (#6071) (@dependabot[bot])
* 54a34725e38171655d8a2441b7a95c7df4ca6802: build(deps-dev): bump globa

## Changelog
* 84d523a59882445fc9110dfbd62e3eb2a6146894: Add Nondeterministic flag to the Data Source function (#5801) (@wdsjk)
* fe48fe93525bc09c8f1f91bd56bc7a6b2204ec81: Add Provider authentication for DataSources (#5899) (@evankanderson)
* 9cdb569d046da248bf15a265ffd215bb1ec3857f: Add SMTP sender as outbound email option (#5799) (@evankanderson)
* 3e8c19be664b788c7dfb45798ebe69fa72d137df: Adjust usage of IGNORE_IF_ZERO with respect to field presence and empty-but-present values (#5800) (@evankanderson)
* 4b61fdc1f129af89c5e6d10d2f37c601f5a7ea72: Avoid panic from re-registering on http.DefaultServeMux (#5912) (@evankanderson)
* ffc018402d9ee2ff5bf4a5a73b561d05fbdf0729: Move a number of engine interfaces to pkg/ (#5788) (@evankanderson)
* 43889bcd86f10ce7ca87d9aa85784487d519883d: Shorten changelogs to avoid winget publishing failures (#5777) (@evankanderson)
* f6fa9e20ac1b80ebc85be056fbfb75eee3db21b9: Simplify PR requirements (#5914) (@evankanderson)
* e9f3277866544190d63e9a2006c6ebdc8c33d14e: Simplify use of buf.build/go/protovalidate (#5767) (@evankanderson)
* 20d6d682197177794c20c2e3d87aedd52ee9cd73: Specify boilerplate directory, pin boilerplate action (#5900) (@evankanderson)
* 802991131d024133f91d5da08c1b6c989ba4c854: Switch to SetProviderAndWait to avoid data races when switching OpenFeature providers in tests (#5884) (@evankanderson)
* c5c2ece33859385bae33e09b955c5ea325c32180: Update protovalidate for new IGNORE_IF_ZERO_VALUE (#5798) (@evankanderson)
* b3a6f1008905cbc2c17db1870245f2a1eddaf946: build(deps-dev): bump globals from 16.3.0 to 16.4.0 in /docs (#5863) (@dependabot[bot])
* efcac526f02f36483efd2afc83f5a027cd60b707: build(deps-dev): bump the eslint group in /docs with 2 updates (#5759) (@dependabot[bot])
* 5e209d0f23fc8921a51f12921a19ecf3525064da: build(deps-dev): bump the eslint group in /docs with 2 updates (#5779) (@dependabot[bot])
* 39fc65db1a45c9059ba87986b37cbd8941317182: build(deps-dev): bump the eslint group in /docs with 3 updates (#5808) (@dependabot[bot])
* afad189a3e7fbbb54aac7266ff632298a2d42ba3: build(deps-dev): bump the eslint group in /docs with 3 updates (#5836) (@dependabot[bot])
* bd50e72a31cbe30c4a4c3bf76a6bbfa912f97adf: build(deps-dev): bump the eslint group in /docs with 3 updates (#5848) (@dependabot[bot])
* 0f59576709b1d588737297dc2ae0fcea24567c91: build(deps-dev): bump the eslint group in /docs with 3 updates (#5871) (@dependabot[bot])
* b1605e575cf86290b32d0b47f7c6d26ad958f00c: build(deps-dev): bump the eslint group in /docs with 3 updates (#5896) (@dependabot[bot])
* 301782a8ddcc087414fd42525da412cdda4e7051: build(deps-dev): bump the eslint group in /docs with 4 updates (#5747) (@dependabot[bot])
* f239134ceefbc78cbc722f7725df5fe86e6c5b3b: build(deps-dev): bump typescript-eslint from 8.37.0 to 8.38.0 in /docs in the eslint group (#5770) (@dependabot[bot])
* aadb74e6c5b2201c6c7b9a183293f2ac4700498b: build(deps-dev): bump typescript-eslint from 8.42.0 to 8.43.0 in /docs in the eslint group (#5867) (@dependabot[bot])
* a0ca0da2118704b7ad22fa2981e8602b598ec950: build(deps-dev): bump typescript-eslint from 8.44.0 to 8.44.1 in /docs in the eslint group (#5878) (@dependabot[bot])
* a5e7d296fb14b3faf5ee7676e389154ff355b657: chore: fix some function names in comment (#5778) (@suobitong)

## Changelog
This is a new minder client release. Server releases are in the helm chart, which is published on each commit.

Highlights of the client release include:

**Improved CLI output**, including emoji for rule status (disable with `--emoji=false`) and more informative columns. Here's a sample:
![458136843-77b657ed-dc4b-45e0-949d-311731b1109c](https://github.com/user-attachments/assets/32b20a26-d1be-4df0-83ff-f535f2ed78aa)

**Reduced CLI noise** -- `minder` will automatically attempt to authenticate if your token is expired, rather than asking you to run `minder auth login` again. Also, you should no longer receive a message amount no config file present after the first invocation, as `minder` will automatically create an empty config file in your home directory.

## Client changes
* Minder CLI output cleanup - column changes and emoji by @evankanderson in https://github.com/mindersec/minder/pull/5711
* Polish default CLI behavior by @evankanderson in https://github.com/mindersec/minder/pull/5745
* Add GitHub Actions auth token support by @evankanderson in https://github.com/mindersec/minder/pull/5746

## Server changes
* Use current branch when sending pull requests, rather than hard-coding main by @evankanderson in https://github.com/mindersec/minder/pull/5630
* Clean up project naming: avoid UUID-like names by @evankanderson in https://github.com/mindersec/minder/pull/5642
* Allow project context and profile to use name as well as UUID by @evankanderson in https://github.com/mindersec/minder/pull/5653
* Allow delete ruletype by name by @evankanderson in https://github.com/mindersec/minder/pull/5665
* Enable outputting 'message' from deny-by-default evaluation by @evankanderson in https://github.com/mindersec/minder/pull/5664
* Simplify ingestion interfaces for engine by @evankanderson in https://github.com/mindersec/minder/pull/5688
* Include redirect URL in provider enrollment, rather than defaulting to first callback URL by @evankanderson in https://github.com/mindersec/minder/pull/5697
* Add templates for REST ingest and remediate, and YQ remediation by @evankanderson in https://github.com/mindersec/minder/pull/5702

## Documentation updates
* Fix return value documentation for actions list by @evankanderson in https://github.com/mindersec/minder/pull/5667
* Add documentation for using GitHub Actions identities by @evankanderson in https://github.com/mindersec/minder/pull/5666
* Auto-generated cli documentation update - 2025-06-24 09:40:05 by @github-actions in https://github.com/mindersec/minder/pull/5712

## Changelog
* f256d12150e5bb99096a6c0f6a713637a41e659e: Add support for service admins to delete resources via API (#5587) (@evankanderson)
* 902365f34413a5ab8cd98c97e7717f2758e61e3e: Auto-generated cli documentation update - 2025-05-05 15:55:02 (#5628) (@github-actions[bot])
* 3474f9cf451b63442ddcc1c82ca176f70fc9fc67: Avoid overriding default transport with a limited round-tripper in some cases (#5614) (@evankanderson)
* 98d69d0d20f45d5719a117bd5ece887214cb82ee: Enable CreateProject and DeleteProject on top-level projects (#5586) (@evankanderson)
* 67c5c114834bfdc2f2204a1b32b368e6d8cc9d32: Fix flag protection logic on project delete (#5590) (@evankanderson)
* 69deec17ce32713587e37353b696505a5afc7d64: Remove a bunch of references to Stacklok APIs and services which have been retired (#5617) (@evankanderson)
* d42f99ee956e47d2de451ac3ff7c3ec5713644f6: Simplify interfaces in RTEngine (#5600) (@evankanderson)
* c225e9e4ddd44ac507565e38ab3e080d34889689: Support EvalResultOutput in PR templates (#5615) (@evankanderson)
* 438304a7102fa849ce041fe184bfc482d34c3f33: Update email template context to include invite code and project ID (#5585) (@evankanderson)
* 9c6933bbccee46ad463fb7e434f4c7d3e2ac9755: Update to go 1.24.2 (#5613) (@evankanderson)
* 59b9b0f21662b9162a6f0d2ac58f628e4db38ce3: build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 (#5581) (@dependabot[bot])
* c6c2ba352e6b28dde3c191e387462fb52ad49c92: build(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 (#5606) (@dependabot[bot])
* 39f1996c916dbce85338494ea2d5b766c14815a9: build(deps): bump buf.build/go/protoyaml from 0.3.1 to 0.3.2 (#5599) (@dependabot[bot])
* ae165b191cd423b88cf9074d415e1fb51ae1d4a0: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.41.2 to 1.45.0 (#5584) (@dependabot[bot])
* bebf0b6a99ca462f3df5ba35f553b2975cf8c002: build(deps): bump github.com/bufbuild/buf from 1.51.0 to 1.52.1 in /tools (#5573) (@dependabot[bot])
* 4968ed7ce3845cd3ef74a47d93853f9be32cf455: build(deps): bump github.com/bufbuild/buf from 1.52.1 to 1.53.0 in /tools (#5602) (@dependabot[bot])
* 38b90a5fdc24fd1f0348ffa21950174215997e35: build(deps): bump github.com/charmbracelet/bubbles from 0.20.0 to 0.21.0 (#5597) (@dependabot[bot])
* 2d341f6a36cff9a4ca56888ac0c97088ea82d590: build(deps): bump github.com/charmbracelet/bubbletea from 1.2.4 to 1.3.4 (#5583) (@dependabot[bot])
* 883385dadceeec3f747a318894b08ee7f584cd97: build(deps): bump github.com/golang-migrate/migrate/v4 from 4.18.2 to 4.18.3 (#5607) (@dependabot[bot])
* b5a5b616ecc2baec83c34ecf34f27f3bd463f9eb: build(deps): bump github.com/golangci/golangci-lint/v2 from 2.0.2 to 2.1.1 in /tools (#5570) (@dependabot[bot])
* e4eeb8ff50a3fe510a85c502e56c13718dc9d0c1: build(deps): bump github.com/golangci/golangci-lint/v2 from 2.1.1 to 2.1.2 in /tools (#5593) (@dependabot[bot])
* cf5331af1ba6b065da4ec2c55b5a19d7a5a971c4: build(deps): bump github.com/golangci/golangci-lint/v2 from 2.1.2 to 2.1.5 in /tools (#5601) (@dependabot[bot])
* 335c62c133ed4175a3bee84c1683e4d08c7cea0b: build(deps): bump github.com/golangci/golangci-lint/v2 from 2.1.5 to 2.1.6 in /tools (#5626) (@dependabot[bot])
* 55257df927f55a1d4bc9c8c6a0696942d05258d0: build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.3 to 2.1.4 (#5580) (@dependabot[bot])
* 22ea3109bb211d63d5bbe69996a85b8ae212c20d: build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.4 to 2.1.6 (#5620) (@dependabot[bot])
* 3548e5ecc6385c70e2c3b7f16f00d2d439411d54: build(deps): bump github.com/mikefarah/yq/v4 from 4.45.1 to 4.45.2 in /tools (#5624) (@dependabot[bot])
* 1f04b4202db55d6f9c9c4d3f1c87fea6c4d82ad4: build(deps): bump github.com/nats-io/nats-server/v2 from 2.10.25 to 2.10.27 (#5588) (@dependabot[bot])
* a37dcdd2866cdb072fbd6a22b28adbce347cb26a: build(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.4.2 (#5621) (@dependabot[bot])
* a35d0683f0797c933a0429b8cd9a3fb6cddb9724: build(deps): bump github.com/openfga/cli from 0.6.5 to 0.6.6 in /tools (#5603) (@dependab

## Changelog
* 42cac15e194fddd8732a036b5fcc240a219e5c19: Auto-generated cli documentation update - 2025-04-04 02:35:18 (#5561) (@github-actions[bot])
* e6e1386d931385a858d7388cc4f23aea6031870a: Clean up react dependabot batching, remove old docusarus v2 holdbacks (#5556) (@evankanderson)
* 70b1a9a0d2500f4be7f9da7b253c5d7ebf20187f: Don't return errors when getting properties (#5515) (@JAORMX)
* 0706c2deccc927cd846dc7c443d0957fea6020ef: Support different credential files for different API hosts (#5560) (@evankanderson)
* 29fa3c3d7b739302716e12d04a6c0379fa965735: Upgrade to go 1.24.1, update /tools (#5555) (@evankanderson)
* 88c3074f3539f92d7de50a77ed81fa15d783d2b1: build(deps): bump bufbuild/buf-action from 1.1.0 to 1.1.1 (#5550) (@dependabot[bot])
* dc7e3fde21f9ea7add853202c6f21e2fa3582e37: build(deps): bump estree-util-value-to-estree from 3.2.1 to 3.3.3 in /docs (#5567) (@dependabot[bot])
* 9630828be2b16c1c0ecee573f30302111e09873b: build(deps): bump github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.0 (#5546) (@dependabot[bot])
* 68ac3ad709b6a1fe84ffea9b46724da2f67626ab: build(deps): bump github.com/rs/zerolog from 1.33.0 to 1.34.0 (#5544) (@dependabot[bot])
* 2aab903171a5de31f1b6e68e601ef41e87fb0094: build(deps): bump gitlab.com/gitlab-org/api/client-go from 0.120.0 to 0.127.0 (#5563) (@dependabot[bot])
* 29c489b8a90911b9bbe8bc0df7afd3a51277d861: build(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.29.0 (#5562) (@dependabot[bot])
* 43f6319502e20585d9069733946c88af6b72ab53: build(deps): bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 (#5548) (@dependabot[bot])
* 8cb2239d618ec0f0c3fb49ae41b75fe4d15099a0: build(deps): bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 (#5549) (@dependabot[bot])
* 2b6ec465b0a4e25df618e1532670e10bcc54871a: build(deps): bump helm.sh/helm/v3 from 3.15.2 to 3.17.3 in /tools (#5568) (@dependabot[bot])
* 7c700397e7f84c88245b4bd9b0012823e4a0f51e: build(deps): bump image-size from 1.2.0 to 1.2.1 in /docs (#5559) (@dependabot[bot])
* 3e99ca4fc43318e04e21ab6df4bc4bf8f8854d31: build(deps): bump prismjs from 1.29.0 to 1.30.0 in /docs (#5569) (@dependabot[bot])
* 5ac3f9619101291d50b7c88392ef500b6cd37760: build(deps): bump styled-components from 6.1.16 to 6.1.17 in /docs (#5564) (@dependabot[bot])
* c9693c45cc3e78f7434a420fe02206a679ad9436: build(deps): bump the react group in /docs with 3 updates (#5557) (@dependabot[bot])
* 0f5ecd80ebf8a7734e08ceba9c2c54898f05724a: build(deps-dev): bump eslint-plugin-react from 7.37.4 to 7.37.5 in /docs in the react group (#5565) (@dependabot[bot])
* e6ce218c66fcbad573a0dc609d566c5608abf814: build(deps-dev): bump the eslint group in /docs with 3 updates (#5566) (@dependabot[bot])
* d8085ff1d7f3de63add0613b5fb99a011aaf043c: build(deps-dev): bump typescript-eslint from 8.28.0 to 8.29.0 in /docs in the eslint group (#5558) (@dependabot[bot])

## Changelog
* 37a301933c8c617bf87316645450e8d59893516a: Add profile export and top-level apply commands (#5540) (@evankanderson)
* abc4295e0d4af1fd78afaf2ff7c455ed09559fb8: Auto-generated cli documentation update - 2025-03-28 06:33:04 (#5541) (@github-actions[bot])
* 73d14c955f651a50edc71fd5b9b2d4e6bb13d8eb: Clean up transaction handling for datasources to avoid error messages (#5521) (@evankanderson)
* 399b2b1106edcbaf89067f289a113db38dbf813c: Fix detected race in interna/providers/github/webhook by locking channel access (#5537) (@evankanderson)
* f3a02ee0d32e9eaa86f86bc99111c908e25df426: Move email file parsing (and env setting) to TestMain to reduce flakes (#5523) (@evankanderson)
* cb5fb10006ee8a0e77dd72bf2c59ad8195cd8f13: Update go-jwt to fix security scan issue (#5536) (@dmjb)
* 657d281b643cb41e8a30da08fb07ce0064d6841c: Update regal to 0.31.1 and OPA to 1.1.0 (#5522) (@evankanderson)
* da385ad7e8d531205d681f4339e155dce0ecb5db: Upgrade OpenFeature to 1.14.1, simplify flag interface (#5493) (@evankanderson)
* 68a9966367e656488286b5290016f3b125aefa22: Upgrade grpc-gateway in tools (#5539) (@evankanderson)
* 4a67d0f88affc9e73f72fb51806dffadabcbaa7a: build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 (#5534) (@dependabot[bot])
* fde7ad263fbf10be9cc7bc083b3be0fd9ffa7657: build(deps): bump actions/setup-node from 4.2.0 to 4.3.0 (#5512) (@dependabot[bot])
* c2383c7759f1c17e81cd0bffaaadb184107dd51a: build(deps): bump bufbuild/buf-action from 1.0.3 to 1.1.0 (#5514) (@dependabot[bot])
* 737dd9351590d42adaccb112d3c69faf52c30cee: build(deps): bump github.com/bufbuild/buf from 1.50.0 to 1.50.1 in /tools (#5509) (@dependabot[bot])
* 1830ce49006ee0bb743ded8bd09ab52941ea40dd: build(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.27 in /tools (#5518) (@dependabot[bot])
* 87ef302f6b7fd09e6512213b789057d02e8d3793: build(deps): bump github.com/evanphx/json-patch/v5 from 5.9.10 to 5.9.11 (#5510) (@dependabot[bot])
* b0263fcf0333d1c15ec2c7e0b367cbe0a1f7bc4d: build(deps): bump github.com/go-critic/go-critic from 0.12.0 to 0.13.0 in /tools (#5532) (@dependabot[bot])
* 0f2176e1b11a2c0eb7277fa6c666ba10d0ffbf22: build(deps): bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /tools (#5531) (@dependabot[bot])
* 3ef77c35ec4712e7a64ac57ed69f62f5cf88e8a5: build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.40.0 to 1.42.0 (#5491) (@dependabot[bot])
* 60c2fdce2b436f800f7ef3ba6f566daf5e58bc0f: build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 (#5535) (@dependabot[bot])
* 0eb2fac482fd9f606e9c223c96dc65d4352438a5: build(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 (#5533) (@dependabot[bot])
* a5bdae14e6620b94633d8ad619ed1773ec861a66: build(deps): bump mobx from 6.13.6 to 6.13.7 in /docs (#5528) (@dependabot[bot])
* 76771b64105b0b7b1f2c34dfaaf23550faf57742: build(deps): bump redocusaurus from 2.2.1 to 2.2.2 in /docs in the docusaurus group (#5527) (@dependabot[bot])
* 094fb8ae704ba000dabd0d8579814a3b01272bb9: build(deps): bump styled-components from 6.1.15 to 6.1.16 in /docs (#5529) (@dependabot[bot])
* cb682e0ba8930c021214e30247e84bec073f0da5: build(deps): bump the otel group across 1 directory with 7 updates (#5524) (@dependabot[bot])
* 5004847d53740c9099f7a7bc857a0b8ec7d9e4f2: build(deps-dev): bump the eslint group across 1 directory with 4 updates (#5538) (@dependabot[bot])

## Changelog
* bb26492d1e6b76c6fc1446161a1f29fc3baa0928: Add API for dealing directly with entity instances (#5480) (@JAORMX)
* c22b561cde7a03bcdb999d71cf03b43bf5edb357: Add data_sources docs (#5455) (@teodor-yanev)
* f763d730a8453567643796bde6681c96fb3c850d: Determine authentication host based on WWW-Authenticate header (#5502) (@evankanderson)
* 13235d0bf7c7235c789e991ada8eaaeddd1a036c: Don't mix GRPCRoute with HTTPRoute on the same hostname (#5504) (@evankanderson)
* 4e72fbe4536e67d3cf9813b9225294b1136a40e7: Fix GRPC routing as well as HTTP routing (#5506) (@evankanderson)
* 5b9a701bab2cc35f29054b72fcbc350956b2d4fc: Fix GRPCRoute definition based on experimental evidence (#5494) (@evankanderson)
* 74a996b967b5e32004c5f599ae1ee63c0fc8d03a: Fix formatting of GRPC client address (#5520) (@evankanderson)
* edc78df88ae8aac22470306ef7acb1ce3fd67363: Fix race in webhooks test (#5495) (@evankanderson)
* a1767e80d10cf919376b97dc56c539cd612f2c53: Fix token URL for offline token use (#5517) (@evankanderson)
* c235920d3f7c35262723e8b995cfc60d84508fcf: Implement a SendGrid email sender (#5497) (@evankanderson)
* d1ba5afc0fc644c578f8461c1ecadbd5b238235b: Move email templates to data (#5496) (@evankanderson)
* a8d2baaee7c9a0c961c802601c915127696e0bf7: Record Metrics for Reminder (#4831) (@Vyom-Yadav)
* 3cb22b6aa37dd3f54af46c3156dd09c4eda60105: Release .tar.gz bundler functions (#5438) (@eleftherias)
* 56b0bf9b0acd8e912d94026b16eb9e74e6a333aa: Release PR comment alert type (#5437) (@eleftherias)
* 2b26b78ff0a33d44349d39d7d42cb989eba398a5: Release new vulncheck error template (#5452) (@eleftherias)
* f9c90d2fc77e01bfa2d894fd796a1d14832fc9a5: Remove data sources feature flag (#5456) (@teodor-yanev)
* c9c74c1d1d4e988399c7c156935c3176c2e599f7: Remove hard-coded 'stacklok' realm from minder (#5478) (@evankanderson)
* 54c6673a2849be8172ee28c5685f719f81fe8dd8: Update commit author for winget releases (#5477) (@evankanderson)
* 0c2fb50f28e1c40b0fa0fd3ea50a0f3024bbdb0d: Update maintainer list to point to community (#5479) (@evankanderson)
* 969fe2ab185b083d3cc3aeecd863e1facd7d36e2: Upgrade to 6.5 golangci-lint, now with schema checking (#5482) (@evankanderson)
* cb72e6fdadf97f8e8a9605ed2826ab48d0f6a8a2: Upgrade to protovalidate 0.9 with new interface (#5481) (@evankanderson)
* 9a4fc88c06e7ae03d902025bd540f31159da175a: Use proper comment syntax in YAML files (#5505) (@evankanderson)
* 9e81674b6b64765f24d43f2a80659393fae34538: build(deps): bump @babel/helpers from 7.26.0 to 7.26.10 in /docs (#5498) (@dependabot[bot])
* d7e3b5b1fa4419b89fb4d7a541d72a54152bad35: build(deps): bump @babel/runtime from 7.26.0 to 7.26.10 in /docs (#5500) (@dependabot[bot])
* 1379ca48157d8cba9731fefb446d0f10aab49434: build(deps): bump @babel/runtime-corejs3 from 7.26.0 to 7.26.10 in /docs (#5499) (@dependabot[bot])
* db48dc053ba67a90b9441556e46182944fd83c18: build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#5513) (@dependabot[bot])
* 993acf51b169a2bec477147f572eadd86d994747: build(deps): bump azure/setup-helm from 4.2.0 to 4.3.0 (#5466) (@dependabot[bot])
* 45bb19f7f2973b39984c01e8f26661fc5580cd11: build(deps): bump docker/build-push-action from 6.13.0 to 6.15.0 (#5468) (@dependabot[bot])
* 3e865f65e73f4bf5a307f0b1f5b34437e864f9b3: build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (#5470) (@dependabot[bot])
* 8723bb3c7c528f7b3b166138328ff8d036712914: build(deps): bump dompurify and mermaid in /docs (#5451) (@dependabot[bot])
* be6ba2e721d59ec232c56649a6bfe7e108b4173e: build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.34.0 to 1.36.3 (#5475) (@dependabot[bot])
* 4f6f5700663c231fe08b6a02ac63180900200c27: build(deps): bump github.com/containerd/containerd from 1.7.24 to 1.7.27 (#5519) (@dependabot[bot])
* 78c7d374bf202b5420b14e475eeaaff49cdf7758: build(deps): bump github.com/go-git/go-git/v5 from 5.13.2 to 5.14.0 (#5490) (@dependabot[bot])
* 5e063597538e4f35a0cec454e2e1fb526a9818e9: build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4

## Changelog
* f26bf334f49cf30d1f6e4c910f218d0fd7797a85: Add data source service to querier (#5409) (@eleftherias)
* 324121f4169fcb62609f7ccd32ec811c70c53b5e: Add support for Gateway API (HTTPRoute) to Helm chart (#5401) (@evankanderson)
* 53e45aeaa79835c087bf2725e8e7c338ee64fac2: Auto-generated helm documentation update - 2025-02-07 12:26:35 (#5410) (@github-actions[bot])
* 0ac4d28d324917f538adcb3b2b16e4b5e5d3e0d3: Fix GitLab webhook url (#5428) (@teodor-yanev)
* aae3ac4e289596b6ac90e5a21c04dd30aa634524: Fix check for direct rule grant, add unit tests for same (#5411) (@evankanderson)
* 17ef78ee8c51197fc8f3ec40588e35d9043668a4: build(deps): bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (#5425) (@dependabot[bot])
* 17ba09438f4773bc08ed4f81a939ad86075a6620: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.26.0 to 2.26.1 in /tools (#5420) (@dependabot[bot])
* 8aba270ebe92e6d8e56a3684efd2344e7e1a3486: build(deps): bump github.com/openfga/cli from 0.6.3 to 0.6.4 in /tools (#5419) (@dependabot[bot])
* f200afd08b268464c652f6cd325e7cd03f3408f8: build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 (#5417) (@dependabot[bot])
* 38b0f8051e6933bf4492df31540e903b4045354b: build(deps): bump github.com/std-uritemplate/std-uritemplate/go/v2 from 2.0.1 to 2.0.3 (#5416) (@dependabot[bot])
* a670cb79bfa2aa760821503b91552a07a54a1797: build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 (#5421) (@dependabot[bot])
* 956196192751d39b81ea52df41b886b00befe1fa: build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.1 (#5424) (@dependabot[bot])
* f96703df79ad5f2999b8310f0430dd2c8b55626d: build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /tools (#5418) (@dependabot[bot])
* 5aebae76dc62df04d5f4b5540ecd2d39839915b7: build(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (#5422) (@dependabot[bot])
* fd454f14ce5f707393fea4c4f4a791a27fcd6593: build(deps): bump slsa-framework/slsa-verifier from 2.6.0 to 2.7.0 (#5423) (@dependabot[bot])
* c7439ad3278c66ec20cf8d5f2ca572e7567e74d6: build(deps): bump styled-components from 6.1.14 to 6.1.15 in /docs (#5415) (@dependabot[bot])
* eef6c2d52244587e138e05d908cf960d6ce6c36f: build(deps-dev): bump prettier from 3.4.2 to 3.5.0 in /docs (#5414) (@dependabot[bot])
* 5fe5c4572f493f9dca90e588007dd1419a22471c: build(deps-dev): bump the eslint group across 1 directory with 3 updates (#5427) (@dependabot[bot])

## Changelog
* e2859dd739b9b0d12f6d3b45f5b3892a336ff944: Add metrics and additional logging for Data Sources (#5404) (@teodor-yanev)
* 3fd28e16fc6522d5eea39ac62eac29e3be12312c: Adds ability to specify files to be applied positionally, as well as … (#5388) (@mesembria)
* ad750bd42961bbf6d61b31d73246494bcc24b0c5: Adds check to ensure config file exists. Fixes: #4513 (#5387) (@mesembria)
* 337d75df3205911c7488b06336770a00ad165d96: Auto-generated cli documentation update - 2025-01-31 08:31:16 (#5389) (@github-actions[bot])
* 99282006e2c905fbfbd917a8a8999b5154db917f: Enable Algolia for minder docs (#5405) (@evankanderson)
* f9b49bfb88394f55b6e26e5cd1cf81c964af050e: Enable additional identity providers for machine accounts (GitHub Actions enablement) (#5385) (@evankanderson)
* f5f00edca754605d5aa7cb82bad34c5e9769e784: Expose data source list method to querier (#5400) (@eleftherias)
* f770400923984649a287d7215410ef108e845af8: Fix typo in UUID regex (#5403) (@eleftherias)
* fdc94f05cdeb5937336f2ca68a53f49da5431ba3: Limit datasources to public networks (#5391) (@evankanderson)
* 07e670c3f48e9af40ff386a702cced07c9e7e514: Move CLI utilities into internal/util/cli from internal/util to balance tests (#5386) (@evankanderson)
* 15f65badf55b8933d875213f6e52de32988c1e66: Refactor: Move Properties to pkg as Public API (#5402) (@gajananan)
* f07f1703f04bade938fb431a5392f5e45685e910: Remove score from trusty evaluator (#5390) (@eleftherias)
* 4dc5256a7351d49fee46162d3078e47cd8c3f022: Rename Trusty to Stacklok Insight (#5398) (@eleftherias)
* bc651b1e8b4671eeddd17aa0837b51f7629e33a1: Return ID when datasource is created (#5406) (@eleftherias)
* 82ea152b7aa9531dd2129ec7dee8681f59bef8aa: Run tests that set env sequentially (#5399) (@eleftherias)
* ee9ba3299200295d4090c2155c040b33b75c5b7b: build(deps): bump bufbuild/buf-action from 1.0.2 to 1.0.3 (#5397) (@dependabot[bot])
* ffc5044dbf194d312c035ab105573b20dcaf4cf6: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.25.1 to 2.26.0 (#5395) (@dependabot[bot])
* 00e3bc4bcefd81bb351da0cab4a957b61176b1a7: build(deps): bump github.com/sigstore/protobuf-specs from 0.3.3 to 0.4.0 (#5393) (@dependabot[bot])
* aa5d24a0377e93f487168ffafc3a5ee1eb984941: build(deps): bump github/codeql-action from 3.28.6 to 3.28.8 (#5396) (@dependabot[bot])
* e7d85f5088015c4f51893da62cddafa928ea4ae4: build(deps): bump mobx from 6.13.5 to 6.13.6 in /docs (#5392) (@dependabot[bot])

## Changelog
* 09913c9cbf23addd08ff8b9becb4de9fd0d2d856: Add additional test coverage for helper functions in Util (#4651) (@gajananan)
* fc18f0fd0f1efeca31b9f5eb50a6630858c2007f: Fall back to generic env for selectors (#5379) (@eleftherias)
* 84abd7a57a0361019a943101ca7a73e827489542: Increase the max length of a rule description (#5364) (@eleftherias)
* 33c70614a647dd369b0e8cdff40c5db282b29dfe: Relocate comments to rego.Function.Description in preparation for auto-generating documentation. (#5354) (@evankanderson)
* 070c32d5f9953ccb039f3bc3921022ed7c2657b8: Update dependabot.yml to weekly updates (#5370) (@rdimitrov)
* 1c9ca7df3a403ee8efb772915a1251f26a5a12e9: build(deps): bump actions/setup-node from 4.1.0 to 4.2.0 (#5358) (@dependabot[bot])
* 2bead034ced6fefd68ef5826eecb3b6f71d6a5c2: build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.2-20241127180247-a33202765966.1 to 1.36.4-20241127180247-a33202765966.1 (#5356) (@dependabot[bot])
* 40d955e714b886c7a72f91ee69afcdbc08e71d69: build(deps): bump coverallsapp/github-action from 2.3.4 to 2.3.6 (#5361) (@dependabot[bot])
* 32071ec0f4e933db9c20ce157831555aef718fc5: build(deps): bump docker/build-push-action from 6.12.0 to 6.13.0 (#5359) (@dependabot[bot])
* ea62178e0d42f9fa2e6ee413c55065cc86ada39e: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.29.1 to 1.29.2 (#5373) (@dependabot[bot])
* 4141e8273c7f0e4d36d1d6af62fbcba8c8c7ce35: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.41.1 to 1.41.2 (#5367) (@dependabot[bot])
* 24fff27772d1a64d32267c4aeb81f16366aff2df: build(deps): bump github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.10 (#5371) (@dependabot[bot])
* 9df2515d27409b2f38fde598b90ea1a71e543b6c: build(deps): bump github.com/goccy/go-json from 0.10.4 to 0.10.5 (#5369) (@dependabot[bot])
* 93575a2e6f716d69cbcc4fb2be5b06b342d2fc5f: build(deps): bump github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.18.2 (#5368) (@dependabot[bot])
* e947b073fbbd53b8cbb1e15675691a7163b3ee51: build(deps): bump github.com/google/cel-go from 0.22.1 to 0.23.0 (#5355) (@dependabot[bot])
* 58972c8c7368b02c190c2317080277c629ad1fc7: build(deps): bump github.com/sigstore/sigstore-go from 0.6.2 to 0.7.0 (#5372) (@dependabot[bot])
* 2f6fc21049a97447ac7bcdb1de9ef4911feb1387: build(deps): bump github/codeql-action from 3.28.4 to 3.28.5 (#5360) (@dependabot[bot])
* f0d805708e7921c04a6ae46a32870c6179c920c3: build(deps): bump github/codeql-action from 3.28.5 to 3.28.6 (#5366) (@dependabot[bot])
* 13dee450e51e243411cd7e05422bf409c0048e99: build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#5357) (@dependabot[bot])
* c7547af78dd40ca6d5314fe6f1d781b8d8e03cbc: build(deps): bump google.golang.org/protobuf from 1.36.4-0.20250116160514-2005adbe0cf6 to 1.36.4 in /tools (#5362) (@dependabot[bot])
* 7ae5c3e4b8079b3cfb49cfef629314bb978e6706: build(deps-dev): bump the eslint group in /docs with 2 updates (#5363) (@dependabot[bot])
* 361bebc31f187bff55ec9eaeba0a45f36e3453ca: build(deps-dev): bump typescript-eslint from 8.21.0 to 8.22.0 in /docs in the eslint group (#5365) (@dependabot[bot])

## Changelog
* b9bfd4b969ba19c25e580ffd3d34c32e769ef51c: Add "Key Concepts" documentation (#5275) (@JAORMX)
* 2caea0580cd8cb87b0cb443d83e213e4727ef7d9: Add `mindev ruletype init` to kick off a rule type (#5228) (@JAORMX)
* 9b2ecaa8c3143dcab6e6e4a30f9dd0ab34619d5b: Add alias to data source reference (#5292) (@eleftherias)
* c33baeba145cab3e127cb06804d860e731b8bf1c: Add dependency extraction functions (#5326) (@evankanderson)
* 45e84c4a8eec2b33acb459d2e37c2786d87a6ca7: Add documentation style guide and tool configs (#5320) (@danbarr)
* 8265f5cf8124d3e1ced279411817700a33760034: Add myself to the list of maintainers (#5329) (@teodor-yanev)
* 1bad8de966e019c4fed96ea3481fcf3382898ba9: Add support for Get Profile Status By ID in Cli and Api (#5100) (@navnitms)
* 4b34fb3b1a16f03a49c3f226c2aad5454a29e1f9: Add support for subscriptions to data sources (#5271) (@eleftherias)
* 058a2ff22ee2218b00e5031f1add339b9fdb5e37: Auto-generated DB schema update - 2025-01-09 13:37:38 (#5274) (@github-actions[bot])
* de2ce2b8b4b574893474a4c5cf0b9957ca2d9131: Auto-generated cli documentation update - 2025-01-09 09:45:59 (#5270) (@github-actions[bot])
* 1a425a60672f558180f0fadebc0ec9aceb93314e: Datasource cleanup: introduce some types and avoid pass-by-context (#5317) (@evankanderson)
* 7644c7263c38869f0193f2988056879d5d3439c3: Expose data source operations to Querier (#5310) (@eleftherias)
* ac4f2fccb07e5cf0f1fa3efaa77550f916f328d5: Fix localhost detection for URL redirect protection (#5293) (@evankanderson)
* 990e2677a25c1cdfcd69f5c423b1d262a7ccb178: Format and lint all docs (#5336) (@danbarr)
* 6c712544970cb78a0cf97ec79c7ca2835626b91b: Improve test coverage for handlers_profile (#5269) (@teodor-yanev)
* cc38ccde3608df3370d4eb8e71a12d08f46dde1b: Introduce rego function to parse TOML files (#5294) (@JAORMX)
* f2e2365af6dd4a1edf3bac682a1f5d9028e4cdb9: Limit allowed redirect URLs from GetAuthorizationURL (#5282) (@evankanderson)
* bcebbae9c2858985f527ff0b49155927c853cc69: Limit http.send in rego evaluation to "normal" public IPs. (#5281) (@evankanderson)
* 8373b8030ec90dbde8a19dd9b7a7f5c3639112d3: Support data sources in bundles (#5301) (@eleftherias)
* 4f22b50784505887a0c0bd157e99ac673316aede: Update CoC CONTRIBUTING.md (#5284) (@staceypotter)
* d0cff631ec12153f2180ed82320e9e538b54858f: Update dependencies in tools (#5346) (@evankanderson)
* 1edf0476123213e28c659825e743409261d218ac: Update generated proto reference doc to .mdx (#5340) (@danbarr)
* 4ab28e8d6f60485fd4aa7ad8ab5f2f2e4cd42ec6: build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 (#5331) (@dependabot[bot])
* b7d3a26ae6b0676cda98c7239d01471e9ebd726d: build(deps): bump actions/stale from 9.0.0 to 9.1.0 (#5330) (@dependabot[bot])
* 0f726c74a48b48de9d3be4cbbfcc7382a83a8ed8: build(deps): bump anchore/sbom-action from 0.17.9 to 0.18.0 (#5348) (@dependabot[bot])
* 836b3c0e15605cca5a6eb2484a301c8dec3449d9: build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.1-20241127180247-a33202765966.1 to 1.36.2-20241127180247-a33202765966.1 (#5265) (@dependabot[bot])
* d4640156886f1f8fe9ce2c71e27a986e82703a84: build(deps): bump docker/build-push-action from 6.10.0 to 6.11.0 (#5276) (@dependabot[bot])
* dc32266b20375abc1b007f3c11609cdce592bfe1: build(deps): bump docker/build-push-action from 6.11.0 to 6.12.0 (#5312) (@dependabot[bot])
* 14b29076ed7edae324a054a8e5894d2bd0f59fbd: build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.1 to 1.4.2 (#5278) (@dependabot[bot])
* 0a089beb20a3e819fa4b730bf40bac7728164050: build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.2 to 1.4.3 (#5296) (@dependabot[bot])
* fcb8ab6cb0ef7ec0cccc0b9869428f350287cc37: build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.3 to 1.4.4 (#5325) (@dependabot[bot])
* 7f725bcbb1833ce3979635d3a8b0a95955e3b2b9: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.10 to 1.28.11 (#5303) (@dependabot[bot])
* b0145f27eb8ad815edacc31cc5c542cd588f0d1e: build(deps): bump github.com/a

## Changelog
* 9286b3173e53065ad0ee4013cd09ea83bd86fd6a: Actually attempt to get the GitHub app's user ID (#5214) (@JAORMX)
* a6d9b2295746fed45ad7fef0c24b021d3a7b1a6a: Add NATS publisher support to reminder (#4829) (@Vyom-Yadav)
* d843a4556ac3eacac1e5b45a9d737b2a4f1d4986: Add `EvaluationResult` as rule evaluation result. (#5144) (@blkt)
* 593a76cdd421bae039a91e0975f131c8fbd607ba: Add entity properties to rego evaluation context. (#5215) (@blkt)
* 81d0096ebc6bdee0284bc6c3db139c9eb38e3fad: Add mocks for provider interfaces (#5211) (@JAORMX)
* e66fa17527b3c8cf32fcf3b1d4aa89cc67fe4d85: Add support for base and target trees in git ingest, add .tar.gz bundler (#5181) (@evankanderson)
* 88c104dfd2743f7dbeb98b7cf4d441b03200d72d: Add tests for common.go (#5191) (@teodor-yanev)
* 412dadb535b2c981691d9e9993134d3faa8fc721: Allow path templating for pull request remediations (#5216) (@rdimitrov)
* 59faada46187945da0ef48df4d93bd497e94a6f4: Allow template in pull request alert comment (#5192) (@eleftherias)
* d03d9e4339a447e9f15853ff99edf3b901b1c3ba: Auto-generated cli documentation update - 2024-12-12 15:29:54 (#5190) (@github-actions[bot])
* 0068f4d7452e8db6d5e4fcea9442cf7e58377e3d: Enforce defaults in `deps` ingest pull request configuration (#5226) (@JAORMX)
* 8ca828114e5321ba1878570456c50a7624840513: Fix mindev linting command (#5218) (@eleftherias)
* de9b376add4d4fd25b878250a713e7e00f3d212a: Fix options reading in `history purge` command. (#5243) (@blkt)
* a02f7548b08561e4a9f4a1ddec629a90092c618b: Fix type hint in delete history by ids statement. (#5249) (@blkt)
* 4a53a4565abfae19f594a4ae50f980323579bfbc: Output GitHub properties for repos and pull requests (#5213) (@JAORMX)
* dee36be89131c92046ac8aab38968cb85aadd014: Remove short flag from `history purge` command. (#5242) (@blkt)
* 77e06032b493b375b1115ccbeab5ac64e7257a76: Replace the winget reference from stacklok to mindersec (#5198) (@rdimitrov)
* 5169b2258443d7ee93b82d73ec012b506bf8f9b5: Return EvalResults from rego constraints evaluation (#5204) (@eleftherias)
* ad7c2d239d9a9c8f5ad0f5884d58f89b5d88905b: Revert "Actually attempt to get the GitHub app's user ID (#5214)" (#5217) (@eleftherias)
* 9f35e1c0640a2ef352d128be105796a00dac68de: Revert "build(deps): bump gitlab.com/gitlab-org/api/client-go from 0.116.0 to 0.117.0" (#5212) (@JAORMX)
* 85ec911e432d6f27f6fc9361a654fa0051f17978: Skip testdata yaml files (#5240) (@eleftherias)
* c1f1acd9b8cafca0a4d4bb8310b303e76c5d8a7b: Support the release entity for the GitHub provider (#4921) (@JAORMX)
* 58df36cf1717f5cfc0a602a890b6ff0cf8312e5c: Update docs with newly-added rego functions (#5235) (@evankanderson)
* 8ba8d0d7831a9a6d02dd5f3c657337c915ca8da9: build(deps): bump anchore/sbom-action from 0.17.8 to 0.17.9 (#5203) (@dependabot[bot])
* ee82c4bba036cda57679368d06adce032a396e61: build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.35.2-20240920164238-5a7b106cbb87.1 to 1.35.2-20241127180247-a33202765966.1 (#5070) (@dependabot[bot])
* 4cd5e165e7d162f3c3635f78661c306dd39f547c: build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.35.2-20241127180247-a33202765966.1 to 1.36.1-20241127180247-a33202765966.1 (#5237) (@dependabot[bot])
* 53a92839475ef9603e054d7f6b7d38afcde48f69: build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0 (#5206) (@dependabot[bot])
* 57e937e6973f282038a69eaa151f3604648058de: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.6 to 1.28.7 (#5232) (@dependabot[bot])
* 41e97e820f776922bfd910e6b791731406e93683: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.4 to 1.40.0 (#5183) (@dependabot[bot])
* 457beb5f1d7fefb653afe71095a57c03106e1721: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.40.0 to 1.40.1 (#5234) (@dependabot[bot])
* a5d9774652ba15985a2978b121eb559eb7ec3a09: build(deps): bump github.com/bufbuild/buf from 1.47.2 to 1.48.0 in /tools (#5231) (@dependabot[bot])
* aa31c2eb854c5828348cd4aafa04

## Changelog
* 8502c321b4d7f1b8f21b708ba468adbd0e5c6a61: Add ingress configuration for data sources. (#5186) (@blkt)
* 9336b1b406d90a83268249bce8773cc917bd1084: Allow empty version to be the same as v1 in providers (#5172) (@evankanderson)
* ddb0af9d8d8d9bda26ce1a65d54b1336c20d9ee0: Migrate away from github.com/xanzy/go-gitlab to gitlab.com/gitlab-org/api/client-go (#5180) (@JAORMX)
* b69d87de33106bb520e680d416f0ce97909bd97c: Register the project flag for minder datasource (#5189) (@rdimitrov)
* f2d6feb173a4f6db97cbff08f45c15c9ea3ff454: Structured data source driver (#5165) (@puerco)
* 1f6847921e1e71a279cbf1cb9ce853e880721e69: build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 (#5174) (@dependabot[bot])
* bf62df29031a565ce9f2fe0b8e28e40dc3a30d57: build(deps): bump github.com/xanzy/go-gitlab from 0.114.0 to 0.115.0 (#5178) (@dependabot[bot])
* 7d818e975dc1fb3506df8abd2b1f77e56cb7530a: build(deps): bump github/codeql-action from 3.27.6 to 3.27.7 (#5173) (@dependabot[bot])
* a942a86ce8832c28ff8457fba7acd2d1704a8128: build(deps): bump k8s.io/apimachinery from 0.31.3 to 0.31.4 (#5176) (@dependabot[bot])
* a0d2477c7573d5290bc8b9c077f2ad10cc265b5c: build(deps): bump k8s.io/client-go from 0.31.3 to 0.31.4 (#5177) (@dependabot[bot])
* 7d9416e499eec5551cdc88a442964f15c39f7f9a: build(deps): bump nanoid from 3.3.7 to 3.3.8 in /docs (#5179) (@dependabot[bot])

## Changelog
* 4e29d370e71095969d589fd81a839d1ac80fb2dd: Add diff ingester, increase test coverage (#5168) (@evankanderson)
* a0d9e90eb4a41bc07d51a66e1681cff52dfb69ed: Allow `git` ingester to work on Pull Requests as well (#5170) (@JAORMX)
* 5160fae79090300ac37e98230313826a5d8e0031: Bump components' versions in docker-compose.yaml (#5152) (@prezha)
* 1ba2e84daadd4ccb1940b9986ae08ef1f9733166: Docs: Fix up logos and remove alpha note (#5159) (@danbarr)
* dc1d2ef0a35ea515597d0217ed5df83711c4a917: Fix enabling repo auto registration for providers (#5171) (@rdimitrov)
* dd7a7020c3981646490bcd48626c03935fe8bc90: Inform user that datasource is not found when creating rule type (#5163) (@JAORMX)
* ad08eec2a18197d1b1620c59fe5ae91c3ceb2f63: Promote pull request properties (#5169) (@JAORMX)
* fc56c1fd90eddbff8cfbfe80836f657c50d0b187: Update guides to ensure proper perms (#5153) (@prezha)
* d001f169220f6eabaada09d0228ea493abdbbec4: build(deps): bump github.com/fergusstrange/embedded-postgres from 1.29.0 to 1.30.0 (#5161) (@dependabot[bot])
* 0c4a111035f95fb19357ac98f5b6885073f65454: build(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 (#5162) (@dependabot[bot])
* ba80578e8175764039d44cb3ad812bd3da1341af: build(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 in /tools (#5160) (@dependabot[bot])

## Changelog
* ff1fca9f2356051c2b45ac7c01fe7208a1f9cb2f: Add basic pull request comment alert type (#5133) (@eleftherias)
* edf31a2cbc973f3bac93eb1e5792704368279a4f: Add simple exponential backoff to data source rest driver (#5142) (@JAORMX)
* fd38412499a615699937de1d8d09b889dfe3ae2e: Allow REST data sources to form bodies from input (#5130) (@JAORMX)
* d6b346fc1a8fb92e2ee087232520bba82e0b5558: Bump go to v1.23.4 (#5151) (@prezha)
* 4077bb5d3d35ab162364cf3b66b9d5659455a0b6: Docs updates for Trusty rebrand (#5149) (@danbarr)
* b4fc9e370f8d3996a4ed8fc417aeae3a8eb84bcd: Don't force default branch in deps ingest and fix segfaults (#5143) (@JAORMX)
* 036082bb12108756aa884d24448930d45b36a66a: Exclude go binary scanner from scalibr, as it sometimes panics on python repos (#5150) (@evankanderson)
* f36d06e3cfcd3d4e2b24249a621f7d1c38891cc5: Fix dark mode background and API doc colors (#5126) (@danbarr)
* 3837e7bb05d49b4f6aa41fe8f42b2c4d6d45e298: Get data source string from protobuf struct (#5125) (@JAORMX)
* 56ff5e31a237122ae3e6decb16f057daed6495e4: Handle synchronize events for pull requests in github (#5141) (@JAORMX)
* d60cba702a08daea6037e61d967c6da488f95b4b: Run PR check action on `synchronize` (#5140) (@dmjb)
* dfecd0af749637e343961782be27fb88172a7be5: Set required proto fields for provider and eval history (#5123) (@eleftherias)
* 8e6e17da83f5aab7ca5bbc969048e0c470729b29: Set required proto fields for rules and invitations (#5110) (@eleftherias)
* d26452d65750295d9c4450d17e953517caa32074: Simplify propagation of action settings (#5132) (@JAORMX)
* 07400b06b043d6ae5dcd560f55f90a846285a30e: Update winget-pkg releaser details and forked repo reference (#5157) (@rdimitrov)
* 6c55c76224d489a24a37b114225395fb7d48db80: build(deps): bump github.com/openfga/openfga from 1.8.0 to 1.8.1 (#5156) (@dependabot[bot])
* e67d43ef68e4a4bcdefa5e81ad59597930d803d6: build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 (#5129) (@dependabot[bot])
* d2978bda36ee7b0eb230519cd287734d5eebb258: build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0 (#5138) (@dependabot[bot])
* 9c06f7dd69d7343f658a31991bfb8f03a001fd2a: build(deps): bump golang.org/x/tools from 0.27.0 to 0.28.0 in /tools (#5134) (@dependabot[bot])
* c2d9126d2921d984220620c17fa1a40bae83f4f5: build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 (#5137) (@dependabot[bot])
* 251fa882671c9d2725b6b0f40f75b1c28faf1f1b: build(deps): bump path-to-regexp and express in /docs (#5155) (@dependabot[bot])
* 19a4d9fbadfba918696647e5965abfcfe613c9c4: data sources: Validate individual function updates (#5131) (@JAORMX)