minder: descargar versiones anteriores

## Changelog
* 6ac62d2ecbe255cb5dd84b7fc9f9cdee27f1922a: Add Datasources Update (#5072) (@teodor-yanev)
* c7e8d6db3cc3b5b095dd064738e1bfedc24766b3: Add data source processing to rule update/create. (#5111) (@blkt)
* f91642064fc030479c90188b5ef82115bd0d25f1: Add data sources service to server. (#5073) (@blkt)
* 1bb85718e5a85ce71e8b0e294a9003735b2246c3: Add delete statement for `rule_type_data_sources`. (#5097) (@blkt)
* e8bb67350c1dd52b0921d07b8b0c2bf55a891427: Add insert statement for `rule_type_data_sources`. (#5082) (@blkt)
* f10e99aeb364b4c0892e18e8a1e0aab4581f54e3: Add test for API field validation (#5071) (@eleftherias)
* 1eb3600ccf32b9e57b3b85ac927fd392bb9a546d: Add test for listing ruletypes (#5106) (@eleftherias)
* 8c13a679faa8550ce1e64109fd8aa5a34c1ade8c: Default project ID for data source create/update (#5122) (@JAORMX)
* 258f3e2ca09458b1e591f7a6b5749cbbbffadda8: Delay data sources initialization, wire ingestion to init (#5091) (@puerco)
* f6afcd49bd2ea79a685d58d43bd98f73d288193a: Dependency ingester (#5058) (@puerco)
* 3daf7d1e2ed3e1ba256bdfd887c842c2e9911dfa: Don't require context in API calls (#5081) (@eleftherias)
* c7b6f8d8bf85471b4919779146b9fcbf8db274be: Enable CreateDataSource and UpdateDataSource API calls to complete (#5101) (@puerco)
* 532e3be0da531a4c5a1337336c2ca6b596d7bafe: Explicitly check server name in client TLS configuration (#5095) (@JAORMX)
* 943c9991acb9e33cd53ea62416de715de7aab621: Fix missing data source id in update (#5115) (@puerco)
* 911855a9e07b81f018d11a29cc9c328b3c75b39c: Fix on delete cascade in `rule_type_data_sources`. (#5085) (@blkt)
* 285391064676e8ac6c2da65f677bf4b19e0dd096: Fix race in deps branch test (#5087) (@puerco)
* 41bfc8a8b9cfcbba37e3bae077f12103d54e7296: Implement the Create handler for data sources (#5079) (@rdimitrov)
* 531313b9c3d22175119126d72843188d035b3fa8: Implement the rest of the handlers for data sources (#5080) (@rdimitrov)
* b84d50423cd30f48f4183dac45f68eb66e4ad05e: Introduce a dependency extractor abstraction (#5092) (@puerco)
* 7e41aa9e38398308291bdaf69cdc95131533e465: Move PullRequest to internal proto file (#5067) (@eleftherias)
* 9523a8ee3aed54391f0f92f81fc188e1cb996cba: Pass context with ingestion to data sources (#5093) (@puerco)
* 7f5f068d65ae1f776a7d62f06dba643e18b12f69: Remove `ValidateRuleTypeReferences` from data sources service (#5077) (@JAORMX)
* e23c57ec9aa242ebd76a36d1bcad9364b45577cd: Remove unused BranchProtection message (#5083) (@eleftherias)
* 76bb3a680d519f020f447bd4b77d9cb432be3573: Set required proto field for user and provider token (#5096) (@eleftherias)
* 7d21b200c9f5b28f226f4d59eac8f7196cd1d8f7: Set required proto fields for profiles (#5099) (@eleftherias)
* 719d4179104658feaf690f2d24495e8a494cb4d0: Set required proto fields for project and entity evals (#5109) (@eleftherias)
* 425352bb428e1da84ac09353bbaa9f21aee5e549: Set required proto fields for ruletypes (#5108) (@eleftherias)
* 85126cb7dea51d50e885f38b877d28ae2ded77d1: Set required proto fields in invite and authz messages (#5078) (@eleftherias)
* 93c054ada70b19ca8bbc68521ca81a6b0abd0f6b: Set required proto fields in repositories (#5086) (@eleftherias)
* fe301774250b8522f3e09feccd5fd2c42ce900bf: Use Data Source ID only to check for rule type references (#5121) (@JAORMX)
* e71d4d94adf9e2accb2011f6beae2dc6c8c92c93: Validate Data Sources when creating rules. (#5068) (@blkt)
* 23fe208434adabc7b10a3086e6f625a49b0c5c12: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.5 to 1.28.6 (#5104) (@dependabot[bot])
* 1d5c370221cc37263aa96e57076742f4a9e6c718: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.3 to 1.38.4 (#5103) (@dependabot[bot])
* fb7b2f7b41253490fcf0fa0a759087ede031d21a: build(deps): bump github.com/google/osv-scalibr from 0.1.4 to 0.1.5 (#5069) (@dependabot[bot])
* b41a72320064ce63312b142c836927ce475c6819: build(deps): bump github.com/itchyny/gojq from 0.12.16 to 0.12.17 (#5102) (@dependabot[bot])
* d045aa7ca30e8be955629dae846f4171fa4470c

## Changelog
* ef132da5c615a9844d893c6a1ae6e19b22fa3954: Add ListRuleTypesReferencesByDataSource db query (#5057) (@rdimitrov)
* a3fbb21d6fb159f69022f086dd82488ac7efd1ce: Add Trivy's own cache to ignore list (#5033) (@puerco)
* 5183ed0fa0800b8ec43d406756f82a6a501c3b97: Add project id foreign key to data sources tables. (#5026) (@blkt)
* 98e4797af23757d1f56a1026a60cb49a7bd1e878: Auto-generated DB schema update - 2024-11-25 07:52:38 (#5034) (@github-actions[bot])
* e51bae0e5f42957d6903e411717aeff497a05855: Datasource Service Create (#5056) (@teodor-yanev)
* 613030bd172c9438de49b185b012edb3b947f1fa: Fix the failing auth login command due to missing credentials (#5031) (@rdimitrov)
* 7cc496937bdfc16c4af40a1b6e1575c26be308e6: Implement `BuildDataSourceRegistry` in data sources service (#5050) (@JAORMX)
* 135cf2ffdca67008ab4aafeda10c6fa41b43f656: Implement the Delete handler for the datasource service (#5062) (@rdimitrov)
* 0626447f74f01cb9cd6703c90b82daa9775c1a1c: Implement validation functions for Data Source protobuf object (#5064) (@JAORMX)
* 8b25d8c6a29a9751ebc83cb3d5878a983de9436d: Include provider ID in minder CLI response (#5029) (@navnitms)
* c4f98a9490a4a1636f93d26d5f67e5c4f4b58a73: Instantiate data sources from the policy engine (#5060) (@JAORMX)
* 4dff82fcd9a16f5e3d82c7ce12790e603701b83f: Kick off data sources service (#5022) (@JAORMX)
* 3fbc363333534124020671fbe39d19b12e471c86: Migrate trusty eval engine to Trusty v2 API. (#5013) (@blkt)
* 134b9024dfdff9a4a517756dc0c485b51cf397b0: Remove `GetRest` leftover from datasources API validator. (#5065) (@JAORMX)
* 0cc4d090525c45981e336dd8bade41d15dbfa85a: Set required proto fields in artifact messages (#5063) (@eleftherias)
* 5170f0738f9cbd6c264801e18d72a0be57437297: Set required proto fields in cursor messages (#5061) (@eleftherias)
* 27464eea2eed36c4119cd503ce46a5e964c836cb: Update the time delay when deleting an account (#5066) (@rdimitrov)
* b090dc59e2b542b7e519890810c6086c2c1be13f: `mindev`: Add ability to parse and use data sources (#5055) (@JAORMX)
* 2b44edbcd3aebb65735da953e8e7c9ab710ecc76: build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0 (#5059) (@dependabot[bot])
* 79e69a069ef50400ced099f737f256e5d307c7ab: build(deps): bump github.com/charmbracelet/bubbletea from 1.2.3 to 1.2.4 (#5052) (@dependabot[bot])
* 43d02cd59e6753eb3d589a5a64c83c3f7ec12154: build(deps): bump github.com/golangci/golangci-lint from 1.62.0 to 1.62.2 in /tools (#5053) (@dependabot[bot])
* 6e94aa934baa1571fa5b7c9007c825259f68aa80: build(deps): bump github.com/google/cel-go from 0.22.0 to 0.22.1 (#5038) (@dependabot[bot])
* 8b2d089f828e2490b42d0bb53349f1f05b99f5bc: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.24.0 (#5036) (@dependabot[bot])
* 7a14caca3779c73e3c10a9b82c9936bab89b1185: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.24.0 in /tools (#5040) (@dependabot[bot])
* 86f92b5854cfb60c8310641f1cde752f6dc5b856: build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.2 to 2.1.3 (#5037) (@dependabot[bot])
* 90e3352e4dee14a9b61d1f5d48f0b5c1a3e95d79: build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#5035) (@dependabot[bot])
* 6f591d58859c620cfd6ac541bb3d4cb4466ca07a: build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.38.0 to 1.39.1 (#5039) (@dependabot[bot])
* 60012e2ed4fb009fd5a77ca91fb3d926fa8535c8: build(deps): bump the docusaurus group in /docs with 4 updates (#5041) (@dependabot[bot])

## Changelog
* 5f4407f7af57ccb72ed91b16507ab722b6e1c5ee: Add Minder resource parsing using protojson and use it for data sources (#4981) (@JAORMX)
* 0c315ea2b1193e6e4dc798119902cc7350a0e524: Add data sources to ruletype API (#5019) (@JAORMX)
* 3ae9f53f5082ff2de7a4ca7d36ea8455a7dfcf2f: Add datasources CLI stubs (#5020) (@teodor-yanev)
* 6bd6f55f09cb19254dae19e17d71ad802ace63b4: Add entitlements assignment at the time of project creation (#4963) (@teodor-yanev)
* 64aec6a0996f49a3e27d53814c47d8a687d6ed72: Add migration for data sources. (#5008) (@blkt)
* c6efd48497d33ea63e5f4b8cafdab5713b3d31e0: Add more queries for managing bundles and subscriptions (#5028) (@rdimitrov)
* ea52b4b617be36f9357a6aa457243cf42bdfeb6d: Add support for labels to `minder history list`. (#4961) (@blkt)
* 088cba81637c82f8e52bd4c40df67d4fbdd4299e: Auto-generated DB schema update - 2024-11-21 13:21:56 (#5021) (@github-actions[bot])
* 11a3d5c72d2a650a52264551827f4cf4323f10d0: Auto-generated cli documentation update - 2024-11-22 15:49:21 (#5027) (@github-actions[bot])
* 657bf015e97b53d58cb057bc87420b31c4fbeeb7: Decouple Trusty engine from Trusty SDK structs. (#5011) (@blkt)
* c8469dde13c5e470005702f48b739f73ca5d31a0: Expect `GetContext` for context v2 resources (#5025) (@JAORMX)
* 8590a3048f0eec8d2ac4c986ee85e7f6d2b56b3b: Fix the unit tests validating for required rule type fields (#4998) (@rdimitrov)
* 3cc4ae8caa711a8f087332cfdeae399ebbc16c47: Implement REST datasource driver (#5009) (@JAORMX)
* 77b19918e119f973550cbe4500ac57982a3877f1: Implement data source interfaces & registration in rego engine (#4997) (@JAORMX)
* d41e3aa4e564a13fe861a6e055567b64bba8382c: Remove leftover printf (#5007) (@JAORMX)
* 15a256549f3e13d856cdac305f77ac7daddc22d6: Remove unused RetrieveProperty function (#5014) (@navnitms)
* 2f26b0e099295eec5ae4baa26dc0a6b64f092b85: Surface ruletype validation errors to user (#4989) (@eleftherias)
* 3a80b9b5846df8ae212fd3d7a1965c5cc695b871: Use correct structure to validate data sources input (#5010) (@JAORMX)
* 39380da260fc7e819400403b4224d2fa24f7d069: Validate rule type alert during creation/update (#4991) (@eleftherias)
* c88ec8cd32c707e3300658fcf3404ba5ecd3c5bd: Validate ruletype remediation during creation/update (#5003) (@eleftherias)
* be229259a83ef56913a78f8f95f7f1d5cb67e186: build(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8 (#5023) (@dependabot[bot])
* 0179d5c5b28efef9eb50bf524d6eb4ae03fd7996: build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 (#5005) (@dependabot[bot])
* 40ba6c91542ceaa1687b7fc0a443813dde586d1a: build(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /docs (#4987) (@dependabot[bot])
* 2a9f72edc4b462e59f4885bf4703ee0ef72fd6ab: build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.32.4 to 1.32.5 (#4992) (@dependabot[bot])
* 7f13a58c0e3ad012d4a97955796295fa2e778971: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.4 to 1.28.5 (#4994) (@dependabot[bot])
* c31b50d975862574b23108c6364f05798ee68c64: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.2 to 1.38.3 (#4995) (@dependabot[bot])
* 44958cad062dbcefc2bf3733173a9200957b56bf: build(deps): bump github.com/bufbuild/protovalidate-go from 0.7.2 to 0.7.3 (#4996) (@dependabot[bot])
* 26f4beabefdbfd61256d034d9a6aa6caad3b63ec: build(deps): bump github.com/charmbracelet/bubbletea from 1.2.2 to 1.2.3 (#5006) (@dependabot[bot])
* c32d7c611e7c43cf196ed0d81246c936ed40679a: build(deps): bump github.com/go-playground/validator/v10 from 10.22.1 to 10.23.0 (#4985) (@dependabot[bot])
* bf7b27ee87ecf092e7cdcf87c9e787e0bf52e474: build(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 (#4984) (@dependabot[bot])
* eb0cbed7d93459ff765e39a83072b2144ce784ac: build(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 in /tools (#4983) (@dependabot[bot])
* da599d1baff76c46b521e193c1c5a2d73f00df60: build(deps): bump github.com/styrainc/regal from 0.29.1 to 0.29.2 (#4986) (@dependabot[bot])
* 88695dccbadb94aa3712bc88309988758

## Changelog
* f117ed11ba5bc671d8bb2e31d718aa8f9054ae3b: Add data sources protobuf (#4962) (@JAORMX)
* 5f7b253158abbdfddc01294faca38e2be44b8f7a: Add more code docs for the `required` field validation (#4979) (@JAORMX)
* 5ff31847742c86194807f36ba1d7cbb91a76ac51: Add tests for rego validation in ruletypes (#4969) (@eleftherias)
* 84d517afa0a6abc44914dd3594f411d88f82eaec: Allow creating/applying ruletypes from standard input (#4959) (@JAORMX)
* 290dc7d0eda206a95ca7c1ce053a25dda67326d3: Exclude profiles with labels from history. (#4910) (@blkt)
* 6e1914a8da33804c0bb33216c4919cab3d3f290f: Fix properties update validation (#4980) (@JAORMX)
* 9b7eaac9dbbdaf29e9a0d3cf192885c01add28af: Kick off CRUD API & Minder API Authz (#4970) (@teodor-yanev)
* 81435d5a52ca7d75141df9602cb435d9b00598b2: Print YAML with 2 spaces for indentation (#4958) (@JAORMX)
* 220f695f28d40a54d0e33c9b34e4702567db6a36: Rule Type schema validation: change library and apply defaults (#4953) (@JAORMX)
* 3384d36be796fd57e1659a705264dac19cdea631: Update oapi-codegen to v2.4.1 (#4947) (@alexandear)
* 140b139a1dbe6cc20d4f00da157c9e78d1cfd7bc: Validate JQ query during ruletype creation/update (#4966) (@eleftherias)
* 54b0b31a7a7440c7b4b6b0e3e1f517d1f051547e: build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.35.1-20240920164238-5a7b106cbb87.1 to 1.35.2-20240920164238-5a7b106cbb87.1 (#4975) (@dependabot[bot])
* 2ecbf6ab0cb48513ee3d84ae3818e07dfc2f9a34: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.3 to 1.28.4 (#4976) (@dependabot[bot])
* fe47832844ca7503e3c37ba40426fdaa15419413: build(deps): bump github.com/bufbuild/buf from 1.46.0 to 1.47.0 in /tools (#4967) (@dependabot[bot])
* 8edba54ff90de09fe6b6f04351120af4b1105964: build(deps): bump github.com/bufbuild/buf from 1.47.0 to 1.47.2 in /tools (#4971) (@dependabot[bot])
* 2d61715c9267a23a9afb8898c08116eab1350726: build(deps): bump github.com/charmbracelet/bubbletea from 1.2.1 to 1.2.2 (#4957) (@dependabot[bot])
* 5092894d548e530e9e872d2c5701868d9f5ff4d6: build(deps): bump github.com/styrainc/regal from 0.28.0 to 0.29.0 (#4956) (@dependabot[bot])
* a8966e52d48e6ba2079e6e336e1d0cd94b871760: build(deps): bump github.com/styrainc/regal from 0.29.0 to 0.29.1 (#4974) (@dependabot[bot])
* 2c2572b73c75d386e9dadbaa4ff303510b163bf3: build(deps): bump github.com/zitadel/oidc/v3 from 3.32.1 to 3.33.0 (#4955) (@dependabot[bot])
* da841ba3cb2f8e985d8d47ecbcc49446d03dc4d9: build(deps): bump github.com/zitadel/oidc/v3 from 3.33.0 to 3.33.1 (#4968) (@dependabot[bot])
* 9cdc36abfc9333ff93088b0232bb43f8f54e27ef: build(deps): bump github/codeql-action from 3.27.1 to 3.27.3 (#4954) (@dependabot[bot])
* 0c9296cd8af765b5c38166e4b19cfb17847d0187: build(deps): bump github/codeql-action from 3.27.3 to 3.27.4 (#4978) (@dependabot[bot])
* 7198f5fd90a7c9b8a53cdfeb6e7198c5d53d189f: build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (#4977) (@dependabot[bot])
* de8b31639344aa9c4deb270d243863581ac1e84e: build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /tools (#4972) (@dependabot[bot])
* 4c7b5abc795429010bfefe2a7cd66185b753614c: build(deps): bump the otel group with 2 updates (#4973) (@dependabot[bot])
* 3bbd422c7e0b1dc7b22ed5b14cef938516edf7bd: cli: Print profiles as applyable YAML (#4960) (@JAORMX)
* c1c035843362bdff1ea1eb7b4d7e63542186a159: cli: Print rule types as applyable YAML (#4936) (@JAORMX)

## Changelog
* a6ded251ca461dafe7df6ea43225f827d7ebf557: Add proto validation for EvalResultRequest (#4908) (@rdimitrov)
* 3eaf97a91feb00ffc97b86ddcb840116e09b2915: Add proto validation for OAuthService (#4901) (@rdimitrov)
* 4aa7e7204526778dac87745fe9d48c3c4ddc7796: Add proto validation for ProfileService (#4905) (@rdimitrov)
* 74db684c5d27552c6ce0fd122b513d5c6056c3fa: Add proto validation for Projects (#4909) (@rdimitrov)
* 3c86de3b4f2a3bb256575fbd3a53ec91e887b563: Add proto validation for Providers (#4911) (@rdimitrov)
* ebc9be89e185768106304ba4834a4f59263b7920: Add proto validation for RepositoryService (#4902) (@rdimitrov)
* 59717288f8f99023599155db37f18671979b52eb: Add proto validation for RuleType (#4907) (@rdimitrov)
* 491dbff33e7408e81ee9bd9274c22faba655ac46: Add proto validation for UUIDs (#4880) (@eleftherias)
* 0786906ac36a429fd5b8dd4bbea19c664559cffe: Add proto validation for artifact filtering via from (#4892) (@rdimitrov)
* 8c9cbb1269ece7c902182f0563236b04a6e33815: Add proto validation for cursor indexes (#4891) (@rdimitrov)
* 3dc58b628cdfd5251d07ac47bd66ddb21c263005: Add proto validation for entity type in ProvidersService (#4903) (@rdimitrov)
* b96d7919faf2ea79dbd624ecbee9e926cf94c289: Add proto validation for evaluation history filters (#4904) (@eleftherias)
* 95d36665c4cdbb0434c18c251f272e4142fcb2d0: Add proto validation for integers (#4879) (@rdimitrov)
* 7270a42a90d0c3941b2193094b6beb8eafff2fbf: Add proto validation for invite codes (#4893) (@rdimitrov)
* e84f8041a63615a401e616d8e48bf16838a70dd6: Add proto validation for names (#4890) (@eleftherias)
* 8b01055900eaf728c9ca2b25c4a7fe6d8ae14b24: Add validation for jq eval type (#4919) (@JAORMX)
* f34196afbd68e4192c3f16ff22990951ae1a92ce: Allow display names to have brackets (#4937) (@rdimitrov)
* 01c526c6a8cf16569335c423732c05a1a54c0460: Allow for the ' character in names and descriptions (#4923) (@rdimitrov)
* cda126fedd9038be2bfe5d76861d123327b832a2: Allow repo names to start with . (#4950) (@rdimitrov)
* 1015fc206a8657a6ec647bd05561faa30f21f5b9: Bump `trusty-sdk-go` to latest release. (#4922) (@blkt)
* 0b2c412c496d3236d478121b368bb2f966a28601: Deprecate the port proto message (#4881) (@rdimitrov)
* e3ea1efce750b89face37c267f723a5ece3401b2: Deprecate unused provider field in proto (#4878) (@eleftherias)
* 13afc71727591e327f05fc817a51d6d52a270ab6: Fix linting errors for golangci-lint v1.62 (#4933) (@rdimitrov)
* 45300d50b457953ac645d27def3253625491e141: Fix nil flag client, and warn about use in future (#4885) (@evankanderson)
* 9195268e8b44e8749e107a52e74d3200df89b48d: Fix type from `trusty-sdk-go`. (#4917) (@blkt)
* fee774bfa0a231521965c40dbd0dd571598a5d69: Fix validation for getting profile by name (#4924) (@rdimitrov)
* 7e6460ab59c658a0cd8c0375bf47607e8e6e49f7: Have run-docker-teardown respect services variable (#4884) (@evankanderson)
* ca27ab102a55bd158702a8d20c44295962d8d99b: Make description optional for project create and update (#4920) (@rdimitrov)
* 29c9fbc63be81f4262a56302077cfe42484fbe00: Remove unimplemented rpc from proto file (#4889) (@eleftherias)
* 34cc40a29119c2bd5505669d2d3c9a53a8e41926: Sort profile status table by entities (#4886) (@evankanderson)
* 9a6ff919de954682296be2e7f8aec13846f5cfa4: Update ignore_empty to either use .ignore = IGNORE_IF_DEFAULT_VALUE or remove (#4883) (@evankanderson)
* 9adfb57642b24adabf24f07b4a16eab87ab31d14: Update proto validations (#4948) (@rdimitrov)
* 2507dbf82ba7ee1e0e02f5796222553f5386ab47: Update proto validations for from and cursor fields (#4895) (@rdimitrov)
* 5d71aaa78348bc27ddc1d62ab45781bf4a5b96ba: Update the embedded secret_scanning ruletype used in quickstart (#4946) (@rdimitrov)
* 9dbe0507160a2266413c378dd038d5b1c352aabb: Update the project validation and return a user visible error if email validation fails (#4918) (@rdimitrov)
* 2683161069ba385c729d1d0a038956d983278509: Upgrade to golang 1.23.3 (#4934) (@JAORMX)
* 67bd38d9a35e26a19041c1084a4f0be91c06ea82: Validate rego when parsing rule types

## Changelog
* 800526c908661165c5ddde9635a7e99c61abd561: Add a YQ-powered remediation function (#4830) (@jhrozek)
* db23bc1916eb973f5b6f140c475a038f386815c6: Add email field validation to protos (#4861) (@eleftherias)
* abfbdc5ad3a2576d10d79cd6f81914d006944e21: Add flag-driven event publisher (#4784) (@evankanderson)
* dc6fce9bbdf3026d6f964e3782d12f2f929be571: Add pkg/querier package (#4849) (@rdimitrov)
* 46c21255be67571c250cd56f0611a474685a23d4: Add proto validation for entity IDs (#4869) (@eleftherias)
* dfc41637cf1153b6030af3eeb9f421adde3de2eb: Add proto validation for profile ID (#4870) (@eleftherias)
* 3477898a6fb1710c5dc2e695f32ee50ab5bfb59c: Add proto validation for project ID (#4862) (@eleftherias)
* 393e01f47ad6c33a2d282ef291a51a07edc2513e: Add support for proto message validation (#4840) (@rdimitrov)
* be140432047d636984574287f1bee56e190dcfa4: Allow proto email to be empty (#4852) (@rdimitrov)
* a93a09d229c73b7176229c87b132253e04330813: Fix a 0.2% natschannel_test flake with some forced scheduler sleeps (#4841) (@evankanderson)
* cfd99e2d1620653f855ebeba8151d596567ae0f1: Fix docs references in README.md (#4863) (@staceypotter)
* 656e68718bc5d4c7f2fbd7cf27992dac624d29c9: Fix proto validations for project and display_name (#4854) (@rdimitrov)
* 94b802fbf9cfa061db79bb36db2073dd762f23df: Fix the set bundle version query for the subscriptions table (#4860) (@rdimitrov)
* 9a9c589aeeafe7dfbcd11d6b3adf69e421e89321: Group docusaurus PRs into a single update group (#4876) (@rdimitrov)
* 9a240c45ad81998ccbc6596ae26fefb3dc0569c6: Measure coverage for `pkg` folder. (#4845) (@blkt)
* 31672a5e7e737b93a459eb81b2b88abe4fb0a15f: Remove duplicated if statement in NewEventer (#4859) (@rdimitrov)
* fdca1cbbfe6a6625d07517a4cfe1d8c3eb31488e: Simplify logic for required branch parameter to gh_branch_protection (#4801) (@evankanderson)
* c8a0b7bc825968685e27564518bb14126a7da7f3: Skip rule test files (#4836) (@rdimitrov)
* 7b4e9387f1cc87f64185efd6ad943af25bed8545: Update docusaurus to 3.6.0 (#4875) (@eleftherias)
* df4a1ea749a6192d647eddb7bd777d39c104431f: Validate the user invitation HTML templates (#4835) (@rdimitrov)
* 7c2d6f696e34eb0c3cc493231d5fa488b4278c22: build(deps): bump anchore/sbom-action from 0.17.5 to 0.17.6 (#4844) (@dependabot[bot])
* 981fd9c5c6f7b1e3f011f4562d45b268998e4995: build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.34.2-20240920164238-5a7b106cbb87.2 to 1.35.1-20240920164238-5a7b106cbb87.1 (#4856) (@dependabot[bot])
* 91ebdcde9c355513c61848cb8228b7b13fa36f6a: build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.7 to 1.4.0 (#4842) (@dependabot[bot])
* 2a7849d7f06d930b2b97900e408e03825f2d28ef: build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.0 to 1.4.1 (#4867) (@dependabot[bot])
* 75ca2528c968fee37eb82d5065f78556d17f4fd9: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.0 to 1.28.1 (#4837) (@dependabot[bot])
* 815300a53616d15f25fbeba78b836ee49e636cb9: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.37.0 to 1.37.1 (#4839) (@dependabot[bot])
* 32f814a05ba4077207245d440d887222a317604e: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.37.1 to 1.38.0 (#4858) (@dependabot[bot])
* 7168590bb2909871e66d032e205d350d44c1f4f4: build(deps): bump github.com/bufbuild/buf from 1.45.0 to 1.46.0 in /tools (#4843) (@dependabot[bot])
* 6c0bb901b1a45fa7904a95f66e3b27f8e7cf75c6: build(deps): bump github.com/charmbracelet/lipgloss from 0.13.1 to 1.0.0 (#4855) (@dependabot[bot])
* 2852659de820d6d1eb52a5314c2f04c9b2a68856: build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#4865) (@dependabot[bot])
* 26de5f8631af2bd0416482f0007315d18737ade8: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 (#4864) (@dependabot[bot])
* 02e3f79e10e56e76bdae82811bcface07f7c261f: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 in /tools (#4868) (@dependabot[bot])
* 93e05cf4

## Changelog
* f75a16cfae134353f2b2a76ca051e44ac2cf350a: Document mindev entity schema (#4820) (@ethomson)
* 1bc9af58b176e29225f0f43f757aa42edb9a3639: Fix `mindev ruletype lint`. (#4828) (@blkt)
* 226f2fb40aec8ffff521df11e211b581ac7fb4d5: Move config from internal to pkg (#4805) (@rdimitrov)
* 30decca32c4689f93a1df3ecee9639df81107753: Move events from internal to pkg (#4812) (@rdimitrov)
* f27c512eed8f540b953a61c6dbb0a4db6f1cb46d: Move getting a logger from config to the config package (#4816) (@rdimitrov)
* 2f4770ad50c015b2123637e9cacb287d285b35c6: Move profiles from internal to pkg (#4811) (@rdimitrov)
* b8434fecb743f7ab49db566202ce7ec1ffd6a0fb: Move ruletypes from internal to pkg (#4810) (@rdimitrov)
* 29e07066356634a19843e14810aae393f99ba3c8: Move selectors from internal/engine to pkg/engine (#4813) (@rdimitrov)
* c8678a1ffce12f4cd17e77cc90d7988990b63ca0: Propagate project and entity information to rule evaluation logs (#4818) (@evankanderson)
* 19e38a31d511a61844f43ae2608242470db9f5d3: build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#4802) (@dependabot[bot])
* 95fb367d74eab4bad3a9992be199db85935ea8e5: build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (#4827) (@dependabot[bot])
* b47785025576ff6bc94df5a6e982fbe90461cb3c: build(deps): bump actions/setup-node from 4.0.4 to 4.1.0 (#4825) (@dependabot[bot])
* 828a944363699a6d03891a0104e5edab1d0772ac: build(deps): bump cookie and express in /docs (#4806) (@dependabot[bot])
* 2bd37263cb515479722f51406b4e4de9b218e48f: build(deps): bump coverallsapp/github-action from 2.3.3 to 2.3.4 (#4826) (@dependabot[bot])
* 387f74210101757298374b81cd97c8ae857cbdf4: build(deps): bump github.com/charmbracelet/bubbletea from 1.1.1 to 1.1.2 (#4823) (@dependabot[bot])
* 9032ea0b63b635b65a5bb3f36c49b643bbbdce45: build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.36.1 to 1.37.0 (#4824) (@dependabot[bot])
* 693862c9771d20bcd36a7639c87f94aee07283a3: build(deps): bump k8s.io/client-go from 0.31.1 to 0.31.2 (#4803) (@dependabot[bot])
* 25548df7a29d078d8be6298604842398e06f4ab8: ko-build/ko broke their latest v0.17.0 release (#4822) (@evankanderson)

## Changelog
* e51472fa9d992523e9bf49bf86536587d438b4ff: Apply a bunch of dependabot updates (#4791) (@evankanderson)
* f545b5e9ecdf99e50a37ed5112cdd6b99c40d4f5: Expose a helper to run a JQ expression on YAML input through our Rego library (#4793) (@jhrozek)
* 99a4d2d9c71c8f590376edad63e3d0cc2f7deaee: Fix auto-generated keycloak client (#4796) (@JAORMX)
* d8014dcd542c201af20b8dfacd729adda8ac8c2e: Make `minder ruletype` `apply`/`create` smarter (#4798) (@JAORMX)
* 9b67cf140167aabaf61b1512134788834295b8a1: build(deps): bump github.com/charmbracelet/lipgloss from 0.13.0 to 0.13.1 (#4794) (@dependabot[bot])
* 0217f108c14b0116bc845eccafbc706aee6d77ae: build(deps): bump github.com/openfga/go-sdk from 0.6.2 to 0.6.3 (#4795) (@dependabot[bot])
* 1d45b12039228d6970e4faa631ae2c25b9a13209: build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 (#4797) (@dependabot[bot])
* 7667c8fb2cb8faf75723908f6734618be8f22540: build(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7 in /docs (#4799) (@dependabot[bot])
* d9007e3ed4a726e2dc00f77eebafc104d301076d: build(deps): bump mermaid from 10.8.0 to 10.9.3 in /docs (#4792) (@dependabot[bot])
* 8375079cdf630adf97c6d154d2f85815bc75b765: mindev: Add new subcommand to validate ruletype updates (#4790) (@JAORMX)

## Changelog
* 9f5ff5807bf9a6f77b4bf884bfbfd94a951b3857: Add another mirror for Trivy DB in security.yml (#4776) (@rdimitrov)
* 3b93bafc5088ce98d2ecd93c5c4cb4b6e417569a: Auto-generated cli documentation update - 2024-10-17 13:33:06 (#4774) (@github-actions[bot])
* d3f88cffac85f05b670be699b101da281f15b388: Change defaults for pull request rules (#4773) (@eleftherias)
* 503e9bc3dfaa8ae11a441a7a4def58d8a69e605e: Introduce `ResourceMeta` and general resource parsing (#4783) (@JAORMX)
* 88d5d8a8a22ae9e5b011dd093d8c813568505f3e: build(deps): bump @mdx-js/react from 3.0.1 to 3.1.0 in /docs (#4782) (@dependabot[bot])
* 8d36fc5ed627a28889f02fcf95bbae8861d50816: build(deps): bump anchore/sbom-action from 0.17.4 to 0.17.5 (#4789) (@dependabot[bot])
* 44e8d4c1c2adbf73cfe8826da504db45cee03927: build(deps): bump coverallsapp/github-action from 2.3.1 to 2.3.3 (#4770) (@dependabot[bot])
* ccd00f40fba622fbfba78a7885d45fa7ed829249: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.43 to 1.28.0 (#4768) (@dependabot[bot])
* 280ae2e86bb05934042c5855caedc30c24eedacf: build(deps): bump github.com/nats-io/nats-server/v2 from 2.10.21 to 2.10.22 (#4779) (@dependabot[bot])
* ca40640ed807439b4a482c393c09caaadc6aa7c2: build(deps): bump github.com/open-feature/go-sdk from 1.13.0 to 1.13.1 (#4781) (@dependabot[bot])
* 51ac5010de01f021221e07cd168f2928c21c2b86: build(deps): bump github.com/stacklok/frizbee from 0.1.3 to 0.1.4 (#4778) (@dependabot[bot])
* dc1f798a1e042ac985a292c16ef9718690ef4432: build(deps): bump github.com/yuin/goldmark from 1.7.7 to 1.7.8 (#4767) (@dependabot[bot])
* 78aa43d77814c020020f83b08cf3d1db4c860688: build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0 (#4777) (@dependabot[bot])
* 871936fa7e4963d6818d35445fa2067433655ce5: build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0 in /tools (#4780) (@dependabot[bot])
* 978431ad80f8fb73e9d34ff0a30161b1d6407bcd: build(deps): bump mobx from 6.13.4 to 6.13.5 in /docs (#4765) (@dependabot[bot])
* 18ff35fd46b6d23bd852e1eb94b38387f24055c8: build(deps): bump the otel group with 2 updates (#4766) (@dependabot[bot])

## Changelog
* 1d818b17d1e111055c488f31e6975ac044647b93: Rule Types: Skip `.test.yml` files when linting/applying (#4772) (@JAORMX)

## Changelog
* c34f35443910c023809627a9d548453c16f3adb2: Add evaluation error to security advisory (#4761) (@eleftherias)
* e4f47e8e32373da1fcf8415ee7f5a5fd1febbcf0: Add request id to logs. (#4461) (@blkt)
* cb3f28d000319c36ab97aa2ce089fc004178493c: Deprecate pushing a brew formula to stacklok/tap (#4769) (@rdimitrov)
* 89e17bff5fa0f83a6b11f528bce2939f6699005d: Display request ids in the CLI. (#4763) (@blkt)
* 1f78eb13f7820d1eb77db7353153ebb5f1302b66: Implement Minder TestKit (#4762) (@JAORMX)
* 932d21d6e94d7b8b4a2df0e312a29e0e546cf5bc: Output test coverage from unit tests action (#4752) (@JAORMX)
* c5a45aecdd1a8430cca6cd507c317a59cf3fc745: Re-enable NATS test (#4746) (@evankanderson)
* def7ff3689a5f65444b2aa612b62abea81e5fb22: Revert "Temporarily remove migration check" (#4771) (@puerco)
* 7a669b55fd33438f2e3e5b8f147d859a96a952b4: Update Copyright headers, add workflow to enforce (#4764) (@puerco)
* 84b66ec8d61b903772b872ee1b7be6837899c6fe: build(deps): bump anchore/sbom-action from 0.17.3 to 0.17.4 (#4756) (@dependabot[bot])
* 1129e402a9e0250b094bd92090c21f65c5ae7420: build(deps): bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 (#4757) (@dependabot[bot])
* c0a29ba84d2543b0f53f6a81cb5f0bd4a8602786: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.36.2 to 1.37.0 (#4760) (@dependabot[bot])
* a05636e423326f33312976947832a840b3734f90: build(deps): bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 (#4759) (@dependabot[bot])
* 64ebcf8b302f0b0b82655232b3da614076c0bafa: build(deps): bump github.com/xanzy/go-gitlab from 0.111.0 to 0.112.0 (#4749) (@dependabot[bot])
* f7f14d49343ee92cdfd3a080e507fd02da423bf4: build(deps): bump github.com/yuin/goldmark from 1.7.4 to 1.7.6 (#4748) (@dependabot[bot])
* 94a3290912674f4b9e54e92902f6497ea335f85f: build(deps): bump github.com/yuin/goldmark from 1.7.6 to 1.7.7 (#4758) (@dependabot[bot])
* 87d15c23308c47e70b62cf0ee6f18763a1b538f1: build(deps): bump mobx from 6.13.3 to 6.13.4 in /docs (#4754) (@dependabot[bot])
* 8753b730e641f5a3041b74f1104450769039edea: build(deps): bump the otel group with 2 updates (#4747) (@dependabot[bot])

## Changelog
* 6dfba6572aa54d16d843825c93ea9c33e540ceb7: Add eval details for rego constraints. (#4730) (@blkt)
* f85900b49e29a125ae621632e78579d76b5bbaea: Add eval details template for JQ (#4739) (@eleftherias)
* f7814a98da55cdde469001e3ba3e79c329778ef4: Add osv-scalibr as a dependency extraction method for PR remediation (#4688) (@evankanderson)
* a4d5c7fd7599dbee64ed4e193c04fe5c9de1bf95: Add template mapping functions (#4714) (@JAORMX)
* c43a6a4a49fb9202ca7edef99a18cc0417254348: Deprecate pull_requests database table (#4713) (@JAORMX)
* abeca43febf8763915840f0d3cdf13e1c052e7c5: Don't look up the same entity multiple times in ListEvaluationHistory (#4715) (@jhrozek)
* b9094402b2f15df261f2b8dda237800566434003: Explicitly do `go mod download` in CI (#4741) (@JAORMX)
* 610290dfa2985ea0c6f8a777f0f4aba06af895b7: Fix dependabot grouping of otel dependencies. (#4740) (@blkt)
* db959efbf5a48f0625639fe0f5791360d83d075c: Fix diff full ingester double deref. (#4732) (@blkt)
* a491cfc0e9b8d60d65783af7fca6e67082c51060: Fix race in github webhook handler tests. (#4721) (@blkt)
* 11b9b31c2ed76660e0e5acc978d90fb7a755efe4: Gitlab: Add support for the `Release` entity (#4706) (@JAORMX)
* 9cc6df99405d8e28b0430b4bf848ba5f57688d61: Handle gitlab release deletion (#4733) (@JAORMX)
* f191f5d1e5afa4f5502f09d955c8340f733c048c: Implement an entity cache for the properties service (#4729) (@JAORMX)
* 2b9013cbff79bdc62b1d871a98a7f41d9689dcc8: Move the github webhook handler to the provider (#4738) (@jhrozek)
* ba60b0949696dcc097e82b488d08d416f35447d0: Prepare docs for OpenSSF Migration (#4649) (@lukehinds)
* 8e7669ff01ed2a6f8010f43d8cab4e6e87e8c7eb: Remove database use from handleRelevantRepositoryEvent (#4705) (@jhrozek)
* 43cf1ad095afc4769b65b9e85357802707250bf6: Remove most zerolog messages from the properties service (#4716) (@jhrozek)
* 844e31fe48d3ebdcb6da871e4c5845eaa1e63507: Remove unused RefreshRepositoryByUpstreamID (#4734) (@jhrozek)
* 75bec06c4c6bab0c30c3ff39c706df57b0669368: Replace stacklok/minder with mindersec/minder (#4742) (@rdimitrov)
* 566d76fa5117dc0f15caa2752371dcd883411129: Set `mindersec` as "release" owner in goreleaser config (#4750) (@JAORMX)
* 2fa96c9c67c7f8b55f7b6886103166ee70548d86: Set entity columns to be 'timestamp with time zone' to avoid TZ-related test failures (#4720) (@evankanderson)
* 01be8a3c70f00f810fe6e13ac5f961174a2ee3f7: Use the new property cache in ListEvaluationResults (#4731) (@jhrozek)
* c4ebd6c8f2a4286f90eef0b0b191e741d6af2503: build(deps): bump anchore/sbom-action from 0.17.2 to 0.17.3 (#4737) (@dependabot[bot])
* 27ee7ac8598fb7f836dd15b3489d95337daf4471: build(deps): bump aquasecurity/trivy-action from 0.26.0 to 0.27.0 (#4724) (@dependabot[bot])
* ae5c149978ea309b6202faffe0a3eaed363ee16c: build(deps): bump bufbuild/buf-action from 1.0.1 to 1.0.2 (#4707) (@dependabot[bot])
* c45fbccf0beba426bf7cba9e93f3615a8800701d: build(deps): bump coverallsapp/github-action from 2.3.0 to 2.3.1 (#4723) (@dependabot[bot])
* 6c76fa4f2c89dd64ec7b2ac4f6abe9e14a092507: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.42 to 1.27.43 (#4693) (@dependabot[bot])
* d86e99c005b19059abbc14f58eaa44d03cc5b78b: build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.35.1 to 1.36.2 (#4694) (@dependabot[bot])
* 6bc17c5091676069a7415c2040565fd472a40999: build(deps): bump github.com/stacklok/frizbee from 0.1.2 to 0.1.3 (#4709) (@dependabot[bot])
* 9f9a8a3c2db53fb7db92e4a4e91f5a17882590ab: build(deps): bump github.com/xanzy/go-gitlab from 0.110.0 to 0.111.0 (#4726) (@dependabot[bot])
* 03b32e16747199c28d9a9b13edefe1449604b715: build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 (#4743) (@dependabot[bot])
* f6936de3d4d453c68b2dbd689ecd0d70100e4513: build(deps): bump the otel group across 1 directory with 11 updates (#4745) (@dependabot[bot])

## Changelog
* fe0a93929a2997015217061f30c2109bf878ac47: Add Vyom-Yadav as a maintainer (#4533) (@evankanderson)
* 83874e3b21729b9124ec08e3622483c320159776: Add `ReregisterEntity` to provider interface (#4541) (@JAORMX)
* d869bce785bceee8feba8af274b5dabccbb47740: Add a method to retrieve an entity by upstream ID with a hint (#4519) (@jhrozek)
* 3ee8d6df24357ba527788d360bd8c184c0513def: Add constant comparison operator to jq evaluation (#4512) (@eleftherias)
* 8a591d6c5f6a0cb45097966c37fe5faad8d373e5: Add github/pull_author_login as a property for PRs (#4535) (@jhrozek)
* 292c4ceb12b29399d9e83def00f01c9f1a5f8999: Add two more generic methods for EntityInfoWrapper (#4518) (@jhrozek)
* 275579a0a21ce0ccf3aca4aa13bb0eda56da25d4: Add unit tests for `TestPropertiesToProtoMessage` in Gitlab provider (#4544) (@JAORMX)
* 9b83ffedb1dd9e059a04d63222ec9a6fe105f521: Add unit tests for gitlab entity registration (#4546) (@JAORMX)
* f6ba405a8eaee7aac4d07d3a62614e29679577dc: Check PR number value before casting from int64 to int (#4516) (@jhrozek)
* 31a94e0a60a53a04a6449eecb643bb9a35ffc55a: Do not reply that a package has an unfixed vulnerability when in fact it is malicious (#4530) (@jhrozek)
* 01a8bea5829081dee31ed6079ac11b960655ac76: Fixed wrong indentation of HTML in PR comments. (#4531) (@blkt)
* fabeea9b44e6df1460c20fd577c10fe9b88827c1: Include the name of the package for which we couldn't find a fix (#4524) (@jhrozek)
* 62eccf6641e0ac35775cccf865352367de9faf88: Make max number of idle connections configurable. (#4527) (@blkt)
* 3cd5378cd1fe0191269517e2ca57f3c23ed28f96: React to archived packages in trusty integration (#4522) (@JAORMX)
* 9054b74d9464ea780860ba51aebc952af0de96c2: Use appropriate logging functions were possible (#4523) (@JAORMX)
* 66044f9d6fbd706ced4bab126a01d3679038bff5: Use encoding/csv to when parsing selector record (#4515) (@jhrozek)
* 5ed129fbd08ea766bfe00ac79b048bd353e5ae4a: Use shortfailure message for alert title (#4491) (@teodor-yanev)
* c7b32a7868034925f3ffc827fa0c9d3ad1a7277a: build(deps): bump dompurify from 3.0.9 to 3.1.6 in /docs (#4503) (@dependabot[bot])
* e3f7dae472fcf206c0fcd2f7d4e2fe23cbbfba98: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.33 to 1.27.35 (#4521) (@dependabot[bot])
* 50bb09fab226ff390b51baa7bc6e0b9667d23af9: build(deps): bump github.com/bufbuild/buf from 1.41.0 to 1.42.0 in /tools (#4539) (@dependabot[bot])
* 9013a2fcd617f78d0f745e09bfeb12409bff720d: build(deps): bump github.com/styrainc/regal from 0.26.2 to 0.27.0 (#4538) (@dependabot[bot])
* 4666fb5b64886f3ba21872313bfa6735fd8f7a6b: build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.33.0 to 1.34.0 (#4499) (@dependabot[bot])
* 75eab726db66657d97b6294c96dc3a4fb3225c01: build(deps): bump github.com/zitadel/oidc/v3 from 3.29.0 to 3.29.1 (#4497) (@dependabot[bot])
* 23b1ac7759ef440bc1f85a7e45114f6feda94d5e: build(deps): bump peter-evans/create-pull-request from 7.0.2 to 7.0.3 (#4496) (@dependabot[bot])
* b8fefb400819c3372f41ca46f0dfc3a77bdd5701: build(deps): bump peter-evans/create-pull-request from 7.0.3 to 7.0.5 (#4540) (@dependabot[bot])
* 0d7ffbca23fb429ede836598c750d3caf83fb74e: build(deps): bump redocusaurus from 2.1.1 to 2.1.2 in /docs (#4520) (@dependabot[bot])
* 4bd3303a9dce2ef0a9b1a021254e3d866c625467: build(deps): bump send and express in /docs (#4536) (@dependabot[bot])
* b1c4e7903ddcb52462d12b25352e817e9fd7e088: build(deps): bump serve-static and express in /docs (#4442) (@dependabot[bot])

## Changelog
* c8bcfd2d9b8a4c2d550676568cc061e24c08b570: Auto-generated DB schema update - 2024-08-29 13:37:06 (#4314) (@github-actions[bot])
* b1f13f90e035f616b032f73e987cc6961bf5bf2f: Don't overwrite UserVisibleError when updating selectors fails (#4334) (@jhrozek)
* 22600c4c1efc2b214cefe6efad0808265e26f78d: Finally remove per-entity columns from EEA (#4305) (@JAORMX)
* e1845dc1060b4793a4a5d86b0a5326efdd439617: Fix rule type name that has no pills. (#4333) (@blkt)
* 4a80ebd91772b68bf30c1953513dffef8400a437: Get entity by attribute (#4311) (@jhrozek)
* 9a439d5b36a4bc5a076de8aee10e0f43001c29d0: Project deletion metadata audit log (#4262) (@teodor-yanev)
* f6e1b9be4b1146523b3472c3b0e88851755ffe32: Refresh properties before reconcile and profile init (#4332) (@jhrozek)
* e0376fe09baa536cddd5e0fc8b9471e670826e60: Remove test code from..tests. (#4313) (@jhrozek)
* a8b4f815c2ada103f08eea065eff2e74ac1bd881: Render rule `guidance` as markdown in the CLI. (#4303) (@blkt)
* 3688fb9a1904d7fe497f7f892059c5d50ac3e932: Split ProfileService proto to ProfileService and RuleTypeService (#4234) (@ChrisJBurns)
* b1b1484eb7b6c31ea90003dfe52db5d5d81bf551: Take the property service into use in webhook and repository service (#4299) (@jhrozek)
* d3523ebf2e88295d2a6ffcb052c815b78d2def5b: Validate rule `guidance` strictly. (#4304) (@blkt)
* a3e6db18ba764186835c8f2d02f4ba10ed4390bf: build(deps): bump github.com/ThreeDotsLabs/watermill-sql/v3 from 3.0.2 to 3.0.3 (#4320) (@dependabot[bot])
* 8f63f4b6e370216384c3ec555a825f2fb2709b12: build(deps): bump github.com/charmbracelet/bubbles from 0.17.1 to 0.19.0 (#4306) (@dependabot[bot])
* 332a59c6d8445f615465eb969f5444f55790f419: build(deps): bump github.com/charmbracelet/bubbletea from 0.26.6 to 1.0.0 (#4308) (@dependabot[bot])
* 8a93223861704f8bb93baa86654245b068a594ac: build(deps): bump github.com/charmbracelet/bubbletea from 1.0.0 to 1.0.1 (#4321) (@dependabot[bot])
* 4c2ce8a8130e9665627292d30dd740e14b438f47: build(deps): bump github.com/charmbracelet/bubbletea from 1.0.1 to 1.1.0 (#4337) (@dependabot[bot])
* a39a3d234b39c9cac0c5b99c41f52179f5d067a2: build(deps): bump github.com/charmbracelet/lipgloss from 0.12.1 to 0.13.0 (#4310) (@dependabot[bot])
* e89b8152e3f6f507e730adc6e231c1d723e5157e: build(deps): bump github.com/nats-io/nats-server/v2 from 2.10.18 to 2.10.19 (#4307) (@dependabot[bot])
* 6b2fa3cdede667daa4049e221e907fd74c770895: build(deps): bump github.com/nats-io/nats-server/v2 from 2.10.19 to 2.10.20 (#4319) (@dependabot[bot])
* 515815a1f94bac9cf350ae20eea4be6a124972e2: build(deps): bump github.com/nats-io/nats.go from 1.36.0 to 1.37.0 (#4309) (@dependabot[bot])
* 9b196f3593a96787003a2f165f59d79050d54299: build(deps): bump github.com/open-policy-agent/opa from 0.67.1 to 0.68.0 (#4322) (@dependabot[bot])
* 8678f4e5471aebf3212260bf160811bf51a9e35b: build(deps): bump github.com/openfga/go-sdk from 0.5.0 to 0.6.0 (#4318) (@dependabot[bot])
* a321286f3370adb62605f19edd12f1f446235f5f: build(deps): bump github.com/openfga/openfga from 1.5.9 to 1.6.0 (#4336) (@dependabot[bot])
* 0630091fcf75df00ac062691a1dfa3d93604e356: build(deps): bump github/codeql-action from 3.26.5 to 3.26.6 (#4324) (@dependabot[bot])
* 58ac0feaf809ebbb195a30b1315f6c637383bd6d: build(deps): bump styled-components from 6.1.12 to 6.1.13 in /docs (#4323) (@dependabot[bot])

## Changelog
* 02ab8b046b1e0a983fdaa976438d751c678f90c0: Add `release_phase` column to `rule_type` table. (#4249) (@blkt)
* 39b3a88128072cf109e7fd107fbdf71f5fc6bebd: Add an Iterator over Properties (#4254) (@jhrozek)
* 6112ab84172764bb90f10d36d8a09adb70f3b4b3: Add database helpers for managing entity properties (#4267) (@jhrozek)
* 42df7412b8af18de60595f6ef4a15f82934aaba6: Add experimental NATS messaging channel (#4075) (@evankanderson)
* 369ac096cd6a4ae979b97a4840a52792ff5303dc: Add general entity protobuf (#4178) (@JAORMX)
* 3990cb0de47c3c7c8af501a0ae83c8604279bf05: Add rule display name to profile status table (#4300) (@eleftherias)
* 55cc7c41a0008c95ca05d169134046d8c0d72391: Auto-generated DB schema update - 2024-08-23 17:38:01 (#4264) (@github-actions[bot])
* 2e45c7524226de13260f6fbad0d2b7258fe4be08: Auto-generated DB schema update - 2024-08-28 13:30:41 (#4302) (@github-actions[bot])
* 5374b0e6037fde007e4a44e6620b18ea0788e755: Change the Provider's FetchProperty/FetchAllProperties interface methods to look up by Properties, not just a name (#4266) (@jhrozek)
* 405ea41808ce086871ca1a1a116720005fa4b758: Checkpoint: Add HTTP URL and Method to HTTP/REST ingester (#4289) (@JAORMX)
* b87b4c7da4c27898370031d6042b335941f0d230: CodeQL: Specify manual build (#4288) (@JAORMX)
* 5887615fcfe3b5bc05c311135029bcb5f766730b: Connect reminder service to minder server to dispatch reminders (#3630) (@Vyom-Yadav)
* a97794e028049e89a5d555b406dce1220684adb0: Decouple minder core from entities. (#4276) (@blkt)
* 345b8e8ffa2a60055e19f70d27c8fa15b349cff7: EEA: Rely solely on entity instances table (#4287) (@JAORMX)
* b598620e1ecb629e121b6cf8432e7159c2bb3957: EEA: Rely solely on entity instances table (#4301) (@JAORMX)
* 0cbe5ab270b7d3510677488c81904e9a0942a0c1: GetEntityByName must accept the type, too (#4260) (@jhrozek)
* 531e326f3fbe6e53c2ad285f88e2688d9c1ec7fc: Handle int64 and uint64 in properties by wrapping it (#4253) (@jhrozek)
* 21e0927179c64d2b0dc5628a2001b00b890acc4a: Introduce a ruletype state field in the minder proto (#4261) (@rdimitrov)
* 02452ccf97dc02a02684326ed54d49e8be7786ad: Populate the release_phase response to the related APIs (#4278) (@rdimitrov)
* a277db76b942692c98f89a723e966b5a7ef3df51: Property service for saving properties to database (#4248) (@jhrozek)
* 9f27d61d8971a6dc4451e45cf409ba5d05c142c2: Remove temporary migrations and unused queries (#4277) (@JAORMX)
* 74b9fdf4e4ccd4ffed86a55ead8ecd1ab0ce6eae: Revert "EEA: Rely solely on entity instances table (#4287)" (#4298) (@JAORMX)
* 594e526c615077089ef2b01a967a51028b93c8d9: Show can_remediate: false for the ruletype cli commands (#4291) (@rdimitrov)
* d79a6bcbd31ab2e10d0a5eac233f26785fe19d27: Show rule type release phase. (#4275) (@blkt)
* ef2b9dbcbcab3b1c29da9881318819a2c276f6ca: Use 25.0 keycloak tag instead of patch-specific one (#4290) (@JAORMX)
* b30ca2efeb3ac2ae7f35bdf00f9b220e1be0f8e1: Use structpb.Value as internal storage of Property (#4250) (@jhrozek)
* 805b55a58df22933d68c7ceec5b08d0c2cc31301: Validate rule type `guidance` as markdown. (#4292) (@blkt)
* 33df427761bbb09ed8ce88e248bac1b7da79ba3b: build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.5 to 1.3.7 (#4280) (@dependabot[bot])
* af7743ae5a71f9ebcf7cb5fc30266a350bdbeb1e: build(deps): bump github.com/ThreeDotsLabs/watermill-sql/v3 from 3.0.1 to 3.0.2 (#4273) (@dependabot[bot])
* 2b9c305c667252736318a4ad0e1706b52533f10e: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.28 to 1.27.29 (#4255) (@dependabot[bot])
* b9a947d5103023f280b0b0ffa3fffece73c73efb: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.29 to 1.27.30 (#4270) (@dependabot[bot])
* e0ce8dff36c43b654449226bdde8791d4690416d: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.30 to 1.27.31 (#4282) (@dependabot[bot])
* a2f830253354e04c86481f2b0751aae661c12864: build(deps): bump github.com/bufbuild/buf from 1.37.0 to 1.38.0 in /tools (#4258) (@dependabot[bot])
* 84f86e72ce8bf3b24be3b0132f069dc47bb70

## Changelog
* 3c3cf63b332f00df61bd5adbf780a17c63872aa0: Add certificate definition to upload sigstore cert(s) from cosign (#4235) (@evankanderson)
* b2a9a00f7ee4b643eae30f57bd29c20749dc94c8: Add owner flag validation during provider enrollment (#4107) (@psekar)
* 7551cec28c8afff12ac5f18fb6b0db8226b459d1: Auto-generated DB schema update - 2024-08-21 16:17:39 (#4232) (@github-actions[bot])
* 6354e9e415efcefdf1706338232d8e93d2d727fb: Bump go-feature-flag. (#4230) (@blkt)
* 2ab6721de7c8b0329ca12f1947a7e1046d0956a4: Enforce central entity ID in EEA and rule eval tables (#4220) (@JAORMX)
* 7a0da0680e527cea6b4c051eb93fcaf994b44c92: Fix integer overflow lint errors (#4227) (@dmjb)
* a7d90234732a24f5024c91416eda2fe61a6f3953: Fix issue with missing evaluation results (#4226) (@dmjb)
* 2ae663749e566ab645c460d0a8c97398a85d19c8: Generate default ID for properties, ensure the ID is not NULL (#4228) (@jhrozek)
* d32c80cf113157df7396f3b9f6854423cd47e4db: Make `ruletype test` token's viper path unique (#4236) (@JAORMX)
* 29c9a1335905fd2f33e29f1468f3a4a85a589273: Use central entities table for EEA logic (#4229) (@JAORMX)
* d2210d0924bf722a58f12aabf5640d4f564bef1b: build(deps): bump anchore/sbom-action from 0.17.1 to 0.17.2 (#4239) (@dependabot[bot])
* d598b19bf0c01de0df796601f159a8d7d1aa368d: build(deps): bump bufbuild/buf-action from 1.0.0 to 1.0.1 (#4217) (@dependabot[bot])
* a01e2367433af721e444e33cb5a77b29d3be1f9b: build(deps): bump github.com/charmbracelet/bubbles from 0.17.1 to 0.19.0 (#4224) (@dependabot[bot])
* e290f3a77b2443e3fe3cfba3fd773ec1773334cc: build(deps): bump github.com/charmbracelet/lipgloss from 0.12.1 to 0.13.0 (#4223) (@dependabot[bot])
* d791c5bec86fb71e86f7bbcf32cbe156352d766b: build(deps): bump github.com/golangci/golangci-lint from 1.60.1 to 1.60.2 in /tools (#4218) (@dependabot[bot])
* 1cc5ac9efa8c43ac2c11a67ca7c0b5030c2c06d9: build(deps): bump github.com/prometheus/client_golang from 1.20.0 to 1.20.1 (#4222) (@dependabot[bot])
* fcd28adc2bbbeab9a59fcd5b79c2e3cc3b028ee5: build(deps): bump github.com/stacklok/frizbee from 0.1.0 to 0.1.1 (#4221) (@dependabot[bot])
* dedfaa5065cc709f584f7c18c2f6317958556b66: build(deps): bump github.com/zitadel/oidc/v3 from 3.27.0 to 3.28.1 (#4237) (@dependabot[bot])
* 21bf1f30102ea592edfb4f0a7d21eeaa296a20d4: build(deps): bump github/codeql-action from 3.26.3 to 3.26.4 (#4238) (@dependabot[bot])

## Changelog
* 0fda086d1f2f7d04b2ba345999a0b43e2458772d: Add entity evaluation checkpoint to the database (#4050) (@JAORMX)
* 9ef39af7010caca3967447388df21a4a70d016b9: Add initial structures for entity checkpoints (#4049) (@JAORMX)
* 48fc372776504db56c9baeffc6161a620b336342: Add integration tests for ListEvaluationHistory. (#4076) (@blkt)
* b82bff266b4f8d845ac31aefd2116381dc9af6e0: Add missing column to history log tests' fixtures. (#4087) (@blkt)
* 78138a22f4026d106e5f45ba74ac2195dac384c4: Additional DB migrations needed for evaluation history switchover (#4055) (@dmjb)
* 65c4109c94620940aac59762d4b0da620cac5c33: Align role descriptions with the docs (#4062) (@rdimitrov)
* c927f79b2c5ee4332ce65cac31c776c5df73c522: Auto-generated DB schema update - 2024-07-31 15:06:43 (#4053) (@github-actions[bot])
* 42fecfdb4420f35ec8ef78770b5ff245eb25ef7d: Auto-generated DB schema update - 2024-08-01 14:29:15 (#4057) (@github-actions[bot])
* a475dd126aae44330a416541662dbd85d0c8e8bc: Auto-generated DB schema update - 2024-08-02 07:48:45 (#4060) (@github-actions[bot])
* 4eae174f59ae0a6091c31b6d70ceabd9c0e3b3b7: Bump trusty client to trusty-sdk-go@v0.2.0 (#4072) (@puerco)
* 3c7dd9db57c6641ab8b6d763e490763bfaf6f505: Bump trusty-sdk to v0.2.1 (#4082) (@eleftherias)
* 9c9d0587ccba5a521c91be87b69684f244ac15b8: Change profile validation to enforce case insensitive unique rule names (#4056) (@dmjb)
* aee1626ad6570e1ed4d5a1b964252b56ae4d1922: Drop `rule_entity_id` column from `rule_evaluations` (#4058) (@dmjb)
* 66f213cfee40924720bfae376b2a0559b82831ca: Fix the AWS SES migration to sdk v2 (#4054) (@rdimitrov)
* 069f8733e83df776b825a9449eedfded058df211: Persist checkpoints in evaluation history db (#4059) (@JAORMX)
* c60ecff543e60c2ad281c14d278934a4d21f54ff: Persist checkpoints in evaluation history db. Try 2 (#4083) (@JAORMX)
* 6aeb619fbaab200e234ac107710dca4fe5df0509: Revert "Persist checkpoints in evaluation history db" (#4067) (@rdimitrov)
* 711ccb7d6721e0dd84ad2f42dea9b50ffd24bf22: Swapped order of roles in user management docs (#4074) (@mesembria)
* ba65aff387d96b3566b5bf9b31f4a4607c06f0ab: Update the email template for invitations (#4064) (@rdimitrov)
* 77946acaea01dbe18248cbc150c0c95dbfdcc3c7: Use Keycloak v25 image for local development (#4066) (@eleftherias)
* 1c07fa220860d44f77d9bb34ef6eacb66a12a96c: build(deps): bump github.com/google/cel-go from 0.20.1 to 0.21.0 (#4079) (@dependabot[bot])
* f6edcf31638af7a5990cf18869fb863e3d394e0a: build(deps): bump github.com/mikefarah/yq/v4 from 4.44.2 to 4.44.3 in /tools (#4077) (@dependabot[bot])
* 20ccd561e8fa349bf17852366f127fe4c478d69f: build(deps): bump github.com/open-policy-agent/opa from 0.67.0 to 0.67.1 (#4086) (@dependabot[bot])
* 7ada4937a7aae61f9998d6a97719d59fe7c9c845: build(deps): bump github.com/sqlc-dev/sqlc from 1.26.0 to 1.27.0 in /tools (#4085) (@dependabot[bot])
* 08da172d787e4cf548241398884edca9724f7f0f: build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#4078) (@dependabot[bot])
* fb4bc2ef0940784589673beb4a2ea27c591a17d5: build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 (#4080) (@dependabot[bot])

## Changelog
* 409ac767653e11886c885f0f8342ffef53f867ac: Add format output for role grant and update (#3930) (@rdimitrov)
* 3518a0c6d79c5e2607a58762e6f4dd3ba6f54de9: Add support for cursors to `minder history list`. (#3925) (@blkt)
* fb8bd92f86e89f02416ed66a263e92b3b2f56c41: Add tests for AssignRole (#3912) (@eleftherias)
* abb55fb3f4402ae3aa81b293dfd9cb0fe4c9ac1b: Add tests for RemoveRole (#3907) (@eleftherias)
* cb516692ac3243c402a4c44fd758c39bc2c8142b: Add tests for UpdateRole (#3902) (@eleftherias)
* e27ee5d5a2ae680a0144eb4f21bb62e121d80bc5: Auto-generated DB schema update - 2024-07-15 18:32:14 (#3894) (@github-actions[bot])
* e25716e60b96af81388f2661a8bdc62b64499492: Cache RuleTypeEngine instances in Executor (#3741) (@dmjb)
* f15a5b5400401a21246709becfacf0bcac793d30: Don't URL escape the package name when getting versions (#3915) (@JAORMX)
* 94d73eff17c421d492b264257bb8908d5da41d6c: Don't require the provider name when auto-enrolling repositories (#3906) (@jhrozek)
* 8a27510a872a17534e480fbd632d9b767c464226: Fix potential race condition in rule type engine cache (#3918) (@dmjb)
* 189bd217006080188150aaa6d55010005bc620a6: Fix typos in documentation (#3926) (@eleftherias)
* efb471b31042193ef253bd2339b827252269891a: Move ActionOpt types into a subpackage of profiles (#3901) (@dmjb)
* b57b8594657de66faeb9756d465645651f38d8a8: Remove deduplication logic in evaluation history (#3893) (@dmjb)
* e0b91afafa7c2e0b4907f61135751f91b5a4a00c: Removed option from `minder history list`. (#3917) (@blkt)
* c8a365a08a7369c089ca2bb518a8df1cc5e8f151: Require entity-type in profile status get to avoid permafail (#3868) (@puerco)
* 5acba377d165cf11a054e6d4f3e34d6b6b421a65: Show where roadmap is and how to request a feature (#3900) (@lukehinds)
* bd4ba06bf27bd5ad0368ac0f52418ccde00d6d04: Updates the Install Minder Server documentation (#3880) (@mesembria)
* 3cf2c542327b1566424606b0f8650e43a7f3be76: Upgrade go-github to v63 (#3916) (@JAORMX)
* f3fbc2d5d4cf41cda137591d4b8d981b17f151f4: Use project as targeting key, propagate message context through entity evaluation (#3827) (@evankanderson)
* 96efacb74810bd60e4f141848bdbdfc8194f83d0: Use rule_instances table in CountProfilesByEntityType query (#3904) (@dmjb)
* a175dd92e9cfe6114dea52548fa81b8a157497b3: Use simpler query to determine if rule type is in use (#3903) (@dmjb)
* 9ad4e149522d696db3c5bf2175972989d13ee7b8: build(deps): bump anchore/sbom-action from 0.16.1 to 0.17.0 (#3898) (@dependabot[bot])
* b43b39669a18d8b0f9c818e0ea266b5a53ecc9e7: build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0 (#3896) (@dependabot[bot])
* 01f1fe0b6938da0395947535f7b4b62f803d730c: build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 (#3920) (@dependabot[bot])
* 84affce28b8f07e6fd5df363d33e1d3ff59a76d4: build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 (#3910) (@dependabot[bot])
* 899c6b4949fec2d54ad5d908d244ac885f7163da: build(deps): bump github.com/openfga/openfga from 1.5.5 to 1.5.6 (#3924) (@dependabot[bot])
* b5133331ce850f38cf4b888bba9e8fa9c65c7cf2: build(deps): bump github.com/styrainc/regal from 0.23.1 to 0.24.0 (#3911) (@dependabot[bot])
* 2763336590e5f490fba74b20fb44435ef76f2097: build(deps): bump k8s.io/client-go from 0.30.2 to 0.30.3 (#3922) (@dependabot[bot])
* 709fd3550ffff5157c6c79329a0634f5284337b4: build(deps): bump slsa-framework/slsa-verifier from 2.5.1 to 2.6.0 (#3897) (@dependabot[bot])
* 1c31e65bed65ca007fb0fa07f53609dd2245e0e0: build(deps): bump styled-components from 6.1.11 to 6.1.12 in /docs (#3921) (@dependabot[bot])

## Changelog
* a37860e15c625de76a56b0fd793580cb1a46e49e: Add Execution ID in the executor's evaluation param logs (#3889) (@JAORMX)
* 3931da34475d7ba54fd1f88db05581a53cafe8ca: Add First and Last name to the user identity object (#3832) (@rdimitrov)
* 4106f31872545c974e77a7a1404ed3a549609b95: Add a flag for informing if sending the email invite was skipped (#3859) (@rdimitrov)
* 4eb788ea49a2cdec6b7bf039ce963ff23b6ff6c3: Add history list subcommand to CLI (#3867) (@dmjb)
* 87416ecc4ef221adb335050a10570ff43dfe5297: Added ListEvaluationHistory RPC implementation. (#3784) (@blkt)
* e77e1427679fc3b18111cfc565559dc661ab789f: Artifact tag matcher: Curb complexity when parsing regexps from user input (#3836) (@puerco)
* 6e4e31928f293530f5441623fe6b13a470fb9129: Auto-generated cli documentation update - 2024-07-12 10:25:04 (#3872) (@github-actions[bot])
* 4a72c5ff63143235630ae2fff8bc8deff3567dcc: Auto-generated cli documentation update - 2024-07-12 19:24:31 (#3883) (@github-actions[bot])
* 39e52ab097bf61aca6b863a29bddf2f6050f0636: Auto-generated cli documentation update - 2024-07-15 10:16:24 (#3888) (@github-actions[bot])
* 41649556972c4d7bfef81c2e2c39076834a57fc0: Change ListEvaluationHistory to use default project ID (#3865) (@dmjb)
* a441c326336596db5bb4732213abef606fb4235b: CheckHealth RPC now logs error when failing. (#3860) (@blkt)
* ab3d603c6b54c596ad566aa4b884afd475239224: Extend the db-to-pb profile code to include selectors (#3854) (@jhrozek)
* 546457ce090b470aea2bbc9b08a4bfc1e17afbdd: Fix issues with mapping of `TIMESTAMPZ[]` postgres type (#3863) (@dmjb)
* 5d73bf7a82622e836b7bba9a96b9613885fca881: Fix offline token command flags not working (#3879) (@rdimitrov)
* 33d77442880b0dcbb616a0ca96da0e1db82f5bdc: Fix project creation conflict during user creation (#3815) (@rdimitrov)
* 3be7c67c2437de8da7512c214521463c4be2f709: Fix remediation/alert counter (#3892) (@dmjb)
* 881c672a8b3aea170f3b29d00c9fd4282a994411: GetProfileByProjectAndID includes selectors (#3833) (@jhrozek)
* 23df4b30c68845dd2f3d9c2452f424c3c1def2c0: Give metric attributes unique names (#3891) (@dmjb)
* 9877dba1b0602c4bb38f1ed407b0e67740a20663: ListEvaluationHistory filtering fixes. (#3866) (@blkt)
* 8324246946c078bcba7a23f28d92c3487f076a83: ListEvaluationHistory now enforces max page size. (#3873) (@blkt)
* df6cf1c4a2026b9fcff00fa665fe6584f47fa701: Move messages only used to generate Go structs out of minder.proto (#3830) (@jhrozek)
* 6a66082de67be3db309d33baacd47bc700caf603: Print provider config in provider get, if any (#3881) (@jhrozek)
* 9fbf426cc2945313b68d75f3fc29dad8df082007: Regenerate minder authz (#3828) (@jhrozek)
* 40cbccd24f8b8d1d732a290671535df8569fd961: Replace several internal protobufs with Go structs (#3878) (@dmjb)
* ff8964a283b94643023c58075c0ebb8caa6d9369: Revert "Replace several internal protobufs with Go structs (#3878)" (#3890) (@JAORMX)
* 638124b24a8c0d9aac63918bba990051126ce1b4: Set the auto_registration.entities.repository.enabled option to true when calling repo register --all (#3876) (@jhrozek)
* 41e48333e3c329cc02a6eb688bf0192dcbd77493: Some prep work for further changes to the executor (#3874) (@dmjb)
* a5b4d9b92ed640ba937495121e13b5821b6020b0: Sort the authz roles in ListRoles response (#3857) (@rdimitrov)
* ca2c6cf601e5a141d95539c49eebec3124a67d1c: Timestamps for evaluation statuses have time zone. (#3858) (@blkt)
* 6cce1599f073c6d058274d8e58cf02ab9e203904: Track evaluation times in executor (#3882) (@dmjb)
* f1a690462fffe04f3bb7273e0257d66a19cb6158: Update openfga entity_reconcile to require the admin role (#3818) (@rdimitrov)
* b80f3aa5eada9a2dc71939dbb892f97579a0e5d8: Use Version 2 config for sqlc.yaml (#3861) (@dmjb)
* 33ae09f416ec1204630b3b6172a7c40eeee8e8d5: Wire new Release + SDLC Core Entities (#3839) (@puerco)
* 9a2ccaae156c3477620fe3d018baa6b1d477385e: build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (#3841) (@dependabot[bot])
* 9fb761f77ca32935b581dd03bc4433b7179abd60: build(deps): bump actions/setup-node from 4.0

## Changelog
* 9ab812286b832ed8888855e195eeecd2acc4855d: Add ProjectRoles field to GetUserResponse (#3755) (@rdimitrov)
* c3c9453733a1871ddd49201c38b2abec6e643d45: Add database table and methods for profile selectors (#3731) (@jhrozek)
* c01ef709f133e45a2c9b11a80b2949fa7cfd754c: Add the selector message to the protobuf (#3785) (@jhrozek)
* ff2be8477aabe4d5161dee6c715f6c24500014dc: Add unit test for GetInviteDetails (#3773) (@eleftherias)
* 2e004e1885f7dd2ae2cea3831723e15f038f579d: Add unit tests for ListInvitations and ResolveInvitation (#3790) (@eleftherias)
* 6cc166fdaf502b28e9e51dd0372b2b593a0ef118: Allow a user to remove their own role from a project (#3716) (@rdimitrov)
* 38ce57c01db5a420e931023b77fe09068a36c65b: Auto-generated DB schema update - 2024-06-27 21:26:09 (#3736) (@github-actions[bot])
* 320ab40f1537390cf9c257a67ec9fd8912b1ec27: Bump minder to go 1.22.5 (#3804) (@dmjb)
* 3f9c382483db2295ef3d9d81d0cd198d2f87ad5e: Consider the environment when generating the invite URLs (#3783) (@rdimitrov)
* 83ae180573514c1aeb1904b702f74abcd51177ce: Deduplicate event handler and executor unit tests (#3740) (@dmjb)
* d045d12960b832461feb0e4c198f26927f1e87ea: Define API structures for evaluation history (#3647) (@dmjb)
* 6efa14697c304994b55b6ca8328132c0ca023195: Disable the assignRole functionality if User Management is enabled (#3714) (@rdimitrov)
* ec370b2458f87517df0ea6cff11d1824d42a9eac: Do not allow removing the last admin role of a project (#3715) (@rdimitrov)
* 4cad6c754fc38fc492c2301a2b5450e596fe2b70: Do not try to fill roles if project has none (#3761) (@rdimitrov)
* 7b32039fc3f06aa97f7314c577939fb2d5956305: Documentation updates (#3738) (@ethomson)
* 11c145f6cb4db3f38705fdce2fe13e5ed8476717: Extend the Profile List database calls to include selectors (#3786) (@jhrozek)
* e761530f5a26c9b8dc5c5daa80c8d797392df3b0: Fix broken documentation links (#3811) (@eleftherias)
* 28b8ececaa1cacb3565694c2bc3d2022a56d2e14: Fix npm run serve example in the docs' README (#3734) (@jhrozek)
* ac1f60a097bce03662a460dde1205bc16bfda425: Fix project display name when listing invitations (#3788) (@eleftherias)
* f31b931afba5230525a37d9b2a0c969646f6f322: Fix project display name when resolving invite (#3789) (@eleftherias)
* fa80a3b1b3495bb905a49dba2bc85ead2ae9a89b: Include the email template in the event message (#3756) (@rdimitrov)
* 5e1ca1252af8ec253bbea64ac2bafa0f459962d8: Increase CLI context timeout to 20s (#3803) (@eleftherias)
* 5d519d3c068778f3e1269d5fab3b679e5257cf4e: Initial implementation of the invite email sending service (#3735) (@rdimitrov)
* f9bd74d6bd159aa25105ba45825e448e1042c2d9: Invite email: color and padding changes (#3771) (@ethomson)
* 1b8a3326341edb2729ce50d47dba4fd4944e66da: Reuse the previous invite code when updating an invitation (#3719) (@rdimitrov)
* a75c4354c980b717f3ddd23cbdf601fc8513b1cc: Separate jwt functionality into its own package (#3770) (@eleftherias)
* 924bd1af6d4a7b080b492f9c11499c3270090a5f: Show the subject display name along with the ID in minder role (#3772) (@rdimitrov)
* 674252bea530231404895bc097cf74eeba8d03eb: Split message handling logic out of Executor (#3730) (@dmjb)
* 37323cd194cc161757f6aec694991814f747b7b8: Store alert and remediation history (#3713) (@dmjb)
* 340927d41ec16f57b3343699fde49bd8a1a15e22: Update documentation site to underline hyperlinks in content area (#3742) (@ethomson)
* 35760c7edff10f1bc193820033e938e23020e376: Update error message when no project is specified (#3813) (@eleftherias)
* 0ae6f9d7a06e20c3a87ca89d8bef06b37ef654bf: Update roadmap in documentation (#3733) (@ethomson)
* 35d9eb48b51226889de8656abd3728cbc4118ca6: Update the terms and privacy URLs in the invite email (#3760) (@rdimitrov)
* 6b75a77929ed4d74da2a603cf83911ef4777bd88: Updates to the protocol documentation (and its generator) (#3747) (@ethomson)
* 5106a3ce737f4a4e7989ec166cee8c9e97c54131: Use the correct org display name for invitations (#3769) (@rdimitrov)
* d521faa4b35f2984c31f26e89b5819742780bd96: Va

## Changelog
* 81fe44f9ea5fb42fc25807c95f6f5550a070b549: Add UpdateRole rpc and an expired flag to Invitations (#3600) (@rdimitrov)
* 80fee77d006dbb05c4ceb7b700a4c7d25d2e326f: Add an --all flag to the repo-register command (#3681) (@jhrozek)
* 95a340b3a25d8d3d0461151cb8ab2a0c232933b4: Add db queries related to the user_invites table (#3662) (@rdimitrov)
* 457f6ab9bb09137dfa71edaf8d5c417ad34e757c: Add display name for permission roles and use it in ListRoles (#3629) (@rdimitrov)
* 17eb10b9731f35ff215de4824e08672c364a040e: Add docs for provider auto-registration (#3682) (@jhrozek)
* 07f93e0c1dcb59f74b6f15beb24cf684161287bb: Add email and is_accepted to invitation-related proto messages (#3665) (@rdimitrov)
* 0acb9373dfb3c1ee95e956ca823fdcb59528ab09: Add function for generating user invites (#3667) (@rdimitrov)
* 5f200ed126392f20292d9ca2fba8cfa756972bbc: Add helper functions for checking/setting invite expiration (#3698) (@rdimitrov)
* 07fc78867304ad5fa7da507fbbf750538d9ef986: Add helper functions for getting token and mail from context (#3697) (@rdimitrov)
* bd376ce8af590c957dbfb5aff77a0a07fd31f227: Add name validation for projects (#3658) (@JAORMX)
* bef52d666534910763b472a82d9622a39c66ccdf: Added minder provider update CLI command. (#3676) (@blkt)
* 0ab3019c3020dae5141d63401f52fa598735cc3d: Auto-generated DB schema update - 2024-06-18 10:19:56 (#3646) (@github-actions[bot])
* ea510481750cd805a62d0fd9a07e233afb8945da: Auto-generated DB schema update - 2024-06-19 15:56:42 (#3664) (@github-actions[bot])
* 54c62db9034e29bca022cb29c47493d2fefe761a: Auto-generated cli documentation update - 2024-06-18 15:18:38 (#3648) (@github-actions[bot])
* ef1ea3d39a3d37c7393dd2abbae8f1fe8b30e3a1: Auto-generated cli documentation update - 2024-06-19 14:16:14 (#3660) (@github-actions[bot])
* 8263c9cbf5ca4cad86bcc2cfdf6b10b20cbcca62: Auto-generated cli documentation update - 2024-06-19 21:49:04 (#3677) (@github-actions[bot])
* 7e63c4bda67ab4a05993b3b1ef95fd5610047265: Auto-generated cli documentation update - 2024-06-20 12:49:24 (#3679) (@github-actions[bot])
* 015c4757c15e05fa52589bc42aac571a59a2345a: Auto-generated cli documentation update - 2024-06-21 10:35:53 (#3685) (@github-actions[bot])
* aa3580945264449ac47787c5615ddd08fd307ff3: Auto-generated cli documentation update - 2024-06-24 18:21:37 (#3704) (@github-actions[bot])
* 8500b71a4779d6e88e589000b7819f01da4b24ad: Auto-generated cli documentation update - 2024-06-25 10:18:33 (#3707) (@github-actions[bot])
* b256788610f2742915af09efa6813fe39e873f73: Bump go to v1.22.4 (#3657) (@eleftherias)
* cd5d5b49db87560332fca4ba5cca7cf56280c281: Create an InviteService (#3628) (@rdimitrov)
* 5d33ee68d2d65b7adf974276baed17045e613f2c: Decouple Action Engine from Rule Type Engine (#3599) (@dmjb)
* 85f3123757b5ef9efb4eb376177413c07cdcba5e: Define evaluation metrics (#3688) (@dmjb)
* 98373adb14347e11bdb703df365347de476339cd: Do not allow for users to self-resolve their own invitations (#3709) (@rdimitrov)
* 53fe30a3138477a5a24e75dd86527d0130cd5859: Do not return the invite code when listing role assignments and set display name defaults (#3710) (@rdimitrov)
* 30a1884b9ed8742e01c90eb65c16ef7f11b92220: Fall back to `$XDG_CONFIG_PATH/minder/config.yaml` when reading configuration (#3645) (@JAORMX)
* ef45f63d1d948c347337eba8f186f5e5283f37f8: Fix issue with multiple entity IDs (#3699) (@dmjb)
* 6a4341b481966e213bfb23ed190a10af085e8681: Handle nil values from Trusty API (#3638) (@eleftherias)
* cfeaed8b8ae83889018cd2ee3f9cac43e31df871: Implement GetInviteDetails (#3668) (@rdimitrov)
* 13e69af1f2bc648b085521750d30dc7e72ca0821: Implement ListInvitations and ResolveInvitation APIs for UserService (#3666) (@rdimitrov)
* 6e6c00c1052e17029780fb08149a4d200bc0f70c: Implement RPC endpoint to list child projects (#3650) (@JAORMX)
* 29d4ad91ec6e88da19ee09949ae1be928ef7bf2b: Implement `set-project` subcommand (#3656) (@JAORMX)
* 6ff17deb456b8462a333db8e9b6953468b4c74e0: Log evaluation history in new tables (#3659) (@dmjb)
* 66

## Changelog
* 64a22e8d4ab0e47206058f6188d5012de4146a08: Actually return an error on branch protection get (#3434) (@JAORMX)
* a77111558b949e590aef4e651aae90781473b4b9: Add VerifyProviderTokenIdentity to the GitHubProviderService (#3389) (@jhrozek)
* 99f8dbeccbbe81a8c3b40d9dea775e349a361ad0: Add a CreateProvider rpc handler (#3385) (@jhrozek)
* 949b313f003d391dc5227806704d48ac8bba5fc8: Add new helm variables for new crypto config (#3378) (@dmjb)
* e554e73c17a25c0f80033109d397be2d7ef09230: Add provider store and provider manager code to create new providers (#3377) (@jhrozek)
* e4b0a5f90eed08e884db04eeed720f949552bf21: Auto-generated cli documentation update - 2024-05-27 11:50:47 (#3432) (@github-actions[bot])
* 7d2b11e523c4fcb7658c22b6137804d433c0cd67: Branch Protection: Error out if an empty branch is given (#3433) (@JAORMX)
* db00a0f3affbe2d1cd91e133f4d0e05b570e0cc6: Branch protection remediation now uses default branch if none provided. (#3436) (@blkt)
* 400f22efcc201888359aa7e230fbb7e50914bef6: Bump go to v1.22.3 (#3419) (@prezha)
* fb5b6f8f6018b04ebf20a5ff03c31e61f91ecfbf: Enhanced GitHub webhook handler tests. (#3370) (@blkt)
* ecf82831cef8c1b1e534da8935cfd3f7a4eb6de1: Fix Makefiles (#3420) (@prezha)
* abf4c0d0a949c38a25161a9367fd9155fb770460: Fix data race in TestProviderManager_CreateFromConfig (#3402) (@jhrozek)
* 04db03c6784f80a3d47976e5dd443e3a8da4f03e: Fix erroneous lookup in github webhook handler. (#3403) (@blkt)
* 4f1651898047b36578a8507af1c464c9cef12741: Fix packer tests (#3421) (@prezha)
* d98a822ecae7c7250cdea5912b00ab3048a70fb6: Fix reading fallback values for providers, set environment variables (#3429) (@jhrozek)
* 586144c00ddd9f86d829f52721cdee0540fca38b: Further enhancing webhook handler tests. (#3414) (@blkt)
* c886c5dd2624ad030f89cddfda7fec806650199f: Improve error handling for `GetCredentialStateForProvider` (#3373) (@dmjb)
* fe321d345b4f738de6a06b13207addc72b59f892: Merge pull request from GHSA-8fmj-33gw-g7pw (@JAORMX)
* 071adde22467226c0c8935c3d615e9546f69ccc5: Move provider OAuth config under server.Config (#3410) (@jhrozek)
* b4ef6eca7fb35ff8d7a82dbf7e2b0dc95c7bb094: Pass configuration when enrolling a provider with a token (#3388) (@jhrozek)
* 12c5e04a8fb11346245f46bae375de54c2906e07: Remove versioner in favor of adding the function to the providers (#3345) (@JAORMX)
* ebdc80df6d7fa7fdffc3351d1b19e9f12de7aedc: Rename the enroll flag from config to provider-config (#3431) (@jhrozek)
* cb61ff9f9ba8e2fc56edddd742fb3331b3d35b5b: Simplify crypto config structure (#3404) (@dmjb)
* 9442be0d74a7cad976d7b9dba5a50486ab137d9b: Skip alerts if provider does not support it (#3386) (@JAORMX)
* e707a989ebc1bf337dbd7787a635bf63231065f1: Switch to AES-256-GCM encryption for secrets (#3356) (@dmjb)
* 9ffe6bb482871366fd5518132b6cbd9df6ffc320: Trusty: Support blocking PRs through reviews (#3392) (@puerco)
* 2d7e6b3c7b17b7a15978c62228e0303e5f69271c: Update .goreleaser.yaml to fix a deprecation warning (#3375) (@rdimitrov)
* c9ff03dd8a748fcc79be2c5ac1eda20ed135cfce: build(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0 (#3384) (@dependabot[bot])
* 4e18ebf375f243524cb81274365ee3df29c5b2f3: build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 (#3409) (@dependabot[bot])
* 813d2e04b422349fb684cfb79958b966d99c37a2: build(deps): bump bufbuild/buf-setup-action from 1.32.0 to 1.32.1 (#3395) (@dependabot[bot])
* f6e61726557de028620098d651a9ac9e8ceb5e1c: build(deps): bump github.com/bufbuild/buf from 1.32.0 to 1.32.1 in /tools (#3394) (@dependabot[bot])
* 6117469145d654b58f9b30e47bce34f5853e7b43: build(deps): bump github.com/charmbracelet/bubbletea from 0.26.2 to 0.26.3 (#3424) (@dependabot[bot])
* 8741b5e9b0f17a1332df2a48acd8f19520e96f90: build(deps): bump github.com/charmbracelet/lipgloss from 0.10.0 to 0.11.0 (#3415) (@dependabot[bot])
* 3164ad60f8da82a64da4b63201c420ca9edb6ca2: build(deps): bump github.com/go-critic/go-critic from 0.11.3 to 0.11.4 in /tools (#3393) (@dependabot[bot])
* 0b66203037daefe05a8

## Changelog
* 2f83c54e4fe945846ba2b6c59ca70138f27d766a: Add provider configuration to the session store (#3348) (@jhrozek)
* 686930a41f23f1da533a6e5eed41f84e0384de5d: Allow KeyStore to be configured with multiple keys (#3335) (@dmjb)
* 61b0b5f34fe4a6d49da7114d738fee3beed2f2d1: Auto-generated DB schema update - 2024-05-16 15:06:39 (#3350) (@github-actions[bot])
* 1ccdb36b259ffa13f5f736913690bf5444cc680b: Do not post a pr review if no homoglyphs are found (#3364) (@teodor-yanev)
* 006c6fa04075c8f269ade750116a4e17fc6da9d3: Fix table formatting for found vulnerabilities (#3369) (@rdimitrov)
* ad49d6944166296140ff4d75116cf9c0242618ee: Github provider: Add support for checks API (#3352) (@puerco)
* eddc2854f6263bc0a2311f4d0a5fe38443c3eea2: Handle package not found in package registries (#3363) (@jhrozek)
* df5882032f1c35f05d0685d3e3261c6b422d1208: Implement AES-256-GCM encryption (#3367) (@dmjb)
* 797b6df6c91e2688f3398156a0a04bbce9cc3064: Merge pull request from GHSA-crgc-2583-rw27 (@JAORMX)
* bc0b4ff047df26aa1ca343b5a2067f84f158b037: Reduce code duplication in provider handlers (#3349) (@jhrozek)
* 6fde2d8b70929e1f97924e8b3a1e04ecd7d68e8d: Regenerate minder protobuf gateway (#3343) (@JAORMX)
* 1eb80d3e68fb03de0dd274b08e0e8af14628a348: Remove `go generate` statement from keystore (#3344) (@JAORMX)
* 42d4c359d099f288be752d6bcbeb693d04dcd881: Remove dependency-review pipeline (#3341) (@JAORMX)
* d736e5f5b23f83c648df7b77668336a2751dace8: Remove salt field from EncryptedData (#3357) (@dmjb)
* c0286cd9b9f582117b7a2d4ce2f89ee688b93d20: Store encrypted values in new DB column. (#3351) (@dmjb)
* f55887b31dadf0c19e71f16270adf5039af7f3da: Trusty: Refactor alternative classification, add tests (#3336) (@puerco)
* e2336a526e298faad85156fcb96bdaf27f572eb9: Use JSONB for encrypted redirect URL (#3347) (@dmjb)
* 00160754ff851269f8cacb76d7611c599f9146cc: build(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#3354) (@dependabot[bot])
* 01faadf008437fcac6d8c4afa9c1e570620d1e72: build(deps): bump bufbuild/buf-setup-action from 1.31.0 to 1.32.0 (#3353) (@dependabot[bot])
* 5524bab0d15aa95d7b00c69650d800ca1f4e0c14: build(deps): bump github.com/bufbuild/buf from 1.31.0 to 1.32.0 in /tools (#3355) (@dependabot[bot])
* 408e45ba1215703e7f5201ebeb4616cd1bc756d4: build(deps): bump github.com/golangci/golangci-lint from 1.58.1 to 1.58.2 in /tools (#3366) (@dependabot[bot])

## Changelog
* 4c3fecd4596af60154861a899adc24916b4178fe: Add OCI providers + DockerHub and GHCR (#2983) (@JAORMX)
* 5183c10d00c6e158ebc45f9ee82c888d0810e228: Add dependency review (#3314) (@therealnb)
* fcf857be1c4d7a823374e93d22de7544699376e6: Add new column for new encyrption format (#3331) (@dmjb)
* 5aab39e864c3dd89b784c96f00884ad9f1a3810d: Added utilities to implement multi-select choices (#3237) (@blkt)
* d3d95f58f90d06e49d85722b8a72444c498443ea: Auto-generated DB schema update - 2024-05-14 21:46:14 (#3332) (@github-actions[bot])
* 943a39dc72c8273ca0be3d4f985914787a438347: Auto-generated cli documentation update - 2024-05-11 12:35:03 (#3308) (@github-actions[bot])
* fddc50a3c1f5b2e99ef060d5e4eb623b3e6252d7: Decouple crypto engine from encryption algorithm (#3293) (@dmjb)
* 82dd48b9d8dc12544023c8c6759ef81b0834ff0a: Do not construct provider when validating user ID (#3221) (@dmjb)
* 6c471020bbbe65d297e423cb8c8999299e7c7619: Fix crash in 3259, add test (#3275) (@evankanderson)
* a231e84d74b31e736cd81074f484b11147589b1b: Implement EncryptedData struct (#3302) (@dmjb)
* f1e2219819801d51646a873ba3e69135e23a7ab3: Improve Trusty integration (#3277) (@puerco)
* e7f9914de9af5a69e3e6fe2bdfaaf22e62be42c0: Initial KeyStore implementation (#3329) (@dmjb)
* daccbc12e364e2d407d56b87a13f7bb24cbdb074: Make artifacts ingester work with both GitHub and OCI providers (#3309) (@JAORMX)
* 065049336aac0621ee00a0bb2211f8051d47c14b: Merge pull request from GHSA-fjw8-3gp8-4cvx (@JAORMX)
* f716baa8d6e97a5ef246c8afe1176dc8c44b07df: Migrate to go-viper blessed fork of mapstructure (#3149) (@evankanderson)
* bda5832a5843ef995df44c57beaac1208eb8b055: Minder's "repo register" command now checks already registered repos. (#3236) (@blkt)
* b575d92e1b5f928ae4434951199a0faf44aa726d: Multi select list is now ordered. (#3306) (@blkt)
* e2414bc9d5836d99229260114837fb4e2ef01ec5: Refactor engine code to use specific provider traits in more places (#3262) (@dmjb)
* e379a4a6cfc8cb6cbb889e9a8a32872ca9bcb228: Remove ProviderBuilder (#3282) (@dmjb)
* ef6ad0d8ec13ab95df8e3d7032c8515a55957b91: Remove ProviderBuilder from engine (#3270) (@dmjb)
* 4a8169d067a20ac3bbbf4a2e0feafba3fccb8157: Replace unpinned actions with pinned action (#3321) (@stacklokbot)
* 052a79d0ffef741714d0c438de06b46dde2befab: Resolve test flake in flags_test (#3305) (@evankanderson)
* 18c5a1469a3221a79e0786e17c7fbce28b74fd73: Stored procedure responsible for Profile status transitions now covers all cases (#3295) (@blkt)
* 16c3e604ec3b1cbd3252355977884cf8275ed865: Support dockerhub in `mindev ruletype test` sub-command (#3319) (@JAORMX)
* a2915c1687ab4830c280e5355828ea7928a6de21: Upgrade to postgres 16.2 in docker-compose file (#3296) (@JAORMX)
* b85645db4f497eec06f3c412a61ba58389ec58fb: build(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#3328) (@dependabot[bot])
* 2e686b5c89fb33352d3bba0cebee752ac8ce5e33: build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 (#3281) (@dependabot[bot])
* 381923acf8bb320bd30bb88574d06be5cfe47834: build(deps): bump coverallsapp/github-action from 2.2.3 to 2.3.0 (#3290) (@dependabot[bot])
* c4942efe02a89603fa105344fa5899cb7ab6578c: build(deps): bump github.com/charmbracelet/bubbletea from 0.25.0 to 0.26.2 (#3288) (@dependabot[bot])
* d1f92da66bf3aefca7944ee0e042acd7ca0087ec: build(deps): bump github.com/fergusstrange/embedded-postgres from 1.26.0 to 1.27.0 (#3311) (@dependabot[bot])
* 53ebb44990bb0a550d50a0b4306415fc4ff95adf: build(deps): bump github.com/golangci/golangci-lint from 1.58.0 to 1.58.1 in /tools (#3289) (@dependabot[bot])
* 4a868e3ea1e3ade0b87b6e8142e66a26db780361: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.1 to 2.20.0 (#3340) (@dependabot[bot])
* 1747b8b843a1bf325593445eff731425e2abd2cc: build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.1 to 2.20.0 in /tools (#3337) (@dependabot[bot])
* f94efd13f6830dd299cd44fe30715b4bb955dbb7: build(deps): bump github.com/mikefarah/yq/v4 from 4.43.1 to 4.44.1

## Changelog
* 7b5e9fdef1c2325ceefe2a92528e9ad266e2191d: Add ProviderID field to EntityInfoWrapper (#3072) (@dmjb)
* 52c53768fdb8128c9009e650a01fc7f3f136c5b3: Add `minder auth token` command (#3107) (@JAORMX)
* 8acf302c2df4ae7a32de4e4b3fdf432fdb46a15a: Add docs for user roles (#3099) (@eleftherias)
* 694649adeb56bd0661f21487659edc8248d742f2: Add tutorial about writing rule types using rego (#3103) (@JAORMX)
* 5aa349c1525730ffb95d59f5e99e4cfd343d1d4f: Add tutorial on using mindev (#3104) (@JAORMX)
* 2cc52acb3d7dc48e11cec3fce784ef490cab4139: Auto-generated cli documentation update - 2024-04-12 17:35:16 (#3077) (@github-actions[bot])
* 6253664939527439f8e68c7cd3ad4ba144fa384a: Auto-generated cli documentation update - 2024-04-16 12:56:05 (#3112) (@github-actions[bot])
* ae4dcdf8741826aaf7b0df06ef1a1c634502d051: Delete (only) root projects if they have no admins (rather than any users) (#3098) (@evankanderson)
* 4121d66dc0fc0e327516e28eedc53fb0c51dd268: Do not delete user from OpenFGA in a DB transaction to avoid issues with minder auth delete (#3082) (@jhrozek)
* 4c81e2668154032d9e5b1e57a534fa8877e29539: Docs updates (#3091) (@ethomson)
* 1846b25db9ee66dca0238d148a1ac919f07e2f5a: Fix `make gen` (#3111) (@dmjb)
* e8d41c1a96854c660ff59bb088bfd224b9db2d52: Fix endless remediation loop caused by PR create conflict (#3113) (@rdimitrov)
* d2035c27a2cb06600f5d1ebfb683df539b37d830: Frizbee: Cache GitHub action entries (#3083) (@JAORMX)
* 2a35a99677c2dfe02b74ee49d0ce37d09b50aed1: Handle `bad_verification_code` error when doing OAuth2 flow (#3094) (@JAORMX)
* 43ab650e5a8bf63f81e0720e25650212d4b21852: Ignore description and defaults when validing ruletype updates (#3092) (@jhrozek)
* dad288342986b8828d1ca6c2cdfc2b16f0e27997: Log requests using Debug() (#3081) (@puerco)
* 98366ef70d5c6faffc1ee8046e2f30b8fd798879: Provide a default configuration for the Trusty evaluator (#3078) (@jhrozek)
* 69e99a8c3983cdd455de0a4d8659d63af25f445c: Remove a link that is overlayed in downstream docs (#3108) (@jhrozek)
* 9e5f3c81c4097b4f9ae28d65d888821550be5dc8: Remove managed profiles for OSS docs (#3114) (@eleftherias)
* 63b34c64214c9a32f29d3e440509e0b045a10e17: Reorder documentation headers (#3089) (@eleftherias)
* ac4574938861c383780df5a70cb3d6c0cdc0fd19: Restructure docs for how Minder works (#3090) (@eleftherias)
* 81bbf92377301de8cf662423e4b0fb7ddba4dc19: Restructure docs pages (#3085) (@eleftherias)
* a16677a6c52a5e123d23b9ba04e079ca7855d61e: Update Minder roadmap (#3110) (@ethomson)
* 8a58240e332d8ea4473f57f38cf69017b270770c: Update docs "understand" section (#3101) (@ethomson)
* 288f96713aac72425c57ccc659025e8f8cfa8999: Upgrade to frizbee v0.0.15 (#3086) (@JAORMX)
* a1b0ba356400d8b667f8f0cccfd34d02d58b4795: Use relative link to CLI docs, not localhost (#3109) (@jhrozek)
* 6ca95b7953e7789c6874d90b9666f5dbd47377ac: Using capital case for how-to docs (#3095) (@eleftherias)
* dc5f29cd985ca3bfcc8f91a084108da6d78b8278: build(deps): bump azure/setup-helm from 4.1.0 to 4.2.0 (#3105) (@dependabot[bot])
* 966f542687d09a0a30099c26de269b9d1386c632: build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.14.0 to 1.15.0 (#3061) (@dependabot[bot])
* fb49c7f7f5f9fd3158f02f76e6ac22e5ad7ebe1d: build(deps): bump github/codeql-action from 3.24.10 to 3.25.0 (#3106) (@dependabot[bot])
* 8c5d86a66279efcdc95782dccd168b61d75ef5c8: build(deps): bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (#3084) (@dependabot[bot])

## Changelog
* a98fc3227267dd84fa54c0922a0135cb6eb2cb22: Add cascade deletion to project ID FK in EEA (#3075) (@JAORMX)
* f4807f133ce9db30f2cc084f0e494d588796ef22: Fix deleting project with artifacts (#3073) (@jhrozek)
* 3ac0a51d0f5e82830d424e24092db0bb1a23585a: Fix invalid condition in repo register (#3076) (@JAORMX)
* fd7be78d79af0f22fa7a3690f4ed24e5312773e2: Rename ProviderService to GitHubProviderService (#3074) (@dmjb)

## Changelog
* 7f579a98738136f826912cb0a625948699a25ab3: Add docs for setting up GitHub App (#3047) (@eleftherias)
* 612ad23a94847d5525b8b4441325fa6aaec8c38b: Add no-op handler for GitHub Marketplace events (#3064) (@eleftherias)
* 9187f9644e775cec9f6fe63a4919d8db15808440: Add sensible defaults to the OSV evaluator to allow running without any configuration (#3053) (@jhrozek)
* be022bb97f3a28da162132b43d64bc72232948fe: Auto-generated cli documentation update - 2024-04-11 15:49:20 (#3048) (@github-actions[bot])
* af3e2164a187e758d0b799a85b70995751085b64: Auto-generated cli documentation update - 2024-04-12 11:41:32 (#3066) (@github-actions[bot])
* 41d68e2197999fc4e040948dfd4dfb51e55a2424: Don't advertise the owner flag for enroll and upate screenshots (#3051) (@jhrozek)
* 6e21fc08480819079519b88ded0f6530d073935b: Fix CLI doc generation bug (#3050) (@dmjb)
* 2f29f40197d67de8a0891c87def8c809661b637d: Fix documentation sidebar titles (#3065) (@eleftherias)
* a089bd0d0c1aae4f177e4fb172bfced3a497e2ef: Hide deprecated flag from help (#3046) (@dmjb)
* 4a7d273974cc29d75101a6825c691aa3a6ba5b23: Log the token type while creating the installation token and during the ping received event (#3070) (@rdimitrov)
* 25f6a108f82477b2086724b7c818354ba4c099cc: Log webhook token type (#3068) (@rdimitrov)
* 538fc66ea50050a281f6fa076e2b9b860f95fa96: New documentation (#3058) (@JAORMX)
* e3f447c8b0502a3b52c9cb0c05c92c948f2a7d7c: Revert "Log webhook token type" (#3069) (@rdimitrov)
* f8f0507b1bba7e23a5c9df5337b5e618b4958819: Support Logging GitHub requests (#3054) (@puerco)
* b2a644ddda09917bceb6b4cf5c18ff055eeb3dac: Update docs label for CLI commands (#3067) (@eleftherias)
* bcaac762ca91ddd3aa37d1730598ecf7c37b4d98: skip remote repo listing if name(s) are given (#3059) (@JAORMX)
* aa2f09b1f4a0402357ba12795fce6d1c4be203b7: zerolog: Don't reuse event in `Eval` call (#3049) (@JAORMX)

## Changelog
* b8c959e3a4a30bf1189cef8f39b1fe1a275283cb: Auto-generated cli documentation update - 2024-04-11 09:40:13 (#3042) (@github-actions[bot])
* 39a6b3634d00f5d2319a341c0404096151bfa04b: Fix enrollment issue (#3044) (@dmjb)

## Changelog
* 496cfa1765d52013e2f491433662a15d826c76ee: A nicer error message when listing remote repos without an enrolled provider (#2976) (@jhrozek)
* 4e55ccb7edbfb82de1767e36309cf454a526186a: Add remediation URL to all evaluation responses (#2972) (@puerco)
* acec132aae2abef24138f7adb20296b708089cdb: Allow reading secrets from file for GH App config (#3040) (@eleftherias)
* 76bd9aa2834651edeb0382530a2368747700cb7a: Artifact index for repos was not meant to be unique (#3022) (@JAORMX)
* 06cdf21e8557e636a26f29d26532988fdd5a5755: Auto-generated DB schema update - 2024-04-10 11:50:40 (#3023) (@github-actions[bot])
* cff8774d6b8061184411a06e860c17a8fc3b0b76: Avoid deleting GH App installation if already deleted (#3031) (@eleftherias)
* 70653d401c1649bdb4bc14b6c35e85000edaef31: CLI: Get rule type by name (#3009) (@JAORMX)
* b403aeecea7ee1766a34146051b2bf564cca7ba2: CLI: Print applicable entity when getting rule type info (#3013) (@JAORMX)
* 38f55046de23ef2394c6e853d49824788aef374d: Default to github-app in provider enroll (#3032) (@dmjb)
* 6775fca3478871b96fc98c8e38ef90280d6887b9: Disable linter rules for pre-Go 1.22 loop var issue (#3029) (@dmjb)
* 471f6de2d5662dda00d144ab412a9360f4ffe7d7: Don't crash if there's no package list client (#3034) (@jhrozek)
* 0c058527a5ad8eeba3750daa57c27487cc119633: Handle entity delete events, i.e. when a repo is deleted (#2940) (@rdimitrov)
* 84da02be89371ecc3806bd24b824ddcf275dd49b: Issue a bespoke profile update message on patching a profile (#3012) (@jhrozek)
* c13a861beab0478f93c7eafe7777521c9d7d3edd: Only run deletion reconciler on repo deleted events (#3036) (@JAORMX)
* 103064ae8fd47ccd2610a68d1d253562d7bae6db: Proceed with provider delete if repo delete fails (#3025) (@eleftherias)
* 5abbaa3db945610a76812d7caaf2b926f5a788ce: Remove hardcoded dependency between artifacts and projects (#2991) (@JAORMX)
* 350aa0f2f750c72fc67ec201f588fca6433dd46f: Skip branch protection remediations for repos with no branches (#3035) (@jhrozek)
* 9b7879df0559737a425e890fb8ca1c67f4b65aee: Uninstall GitHub Apps when a user account is deleted (#3024) (@eleftherias)
* 34887a7e4117abd9ecc4b20b78b35b44f76e3d32: Use ProviderID in telemetry data (#3026) (@dmjb)
* 52a0bf8d3609eca0a995acb3566527d37da15862: Use output.formats.format in golangci.yaml (#3041) (@jhrozek)
* ffda9223fa47b4acb08e75e087524a32f438c289: build(deps): bump github.com/stacklok/frizbee from 0.0.13 to 0.0.14 (#3020) (@dependabot[bot])
* daf1ca8b52b503fce1d21d0d9368e0eb39ae6fb5: build(deps): bump github.com/styrainc/regal from 0.20.0 to 0.20.1 (#3018) (@dependabot[bot])
* af5fcf377659db9a198280cc7caa9dd46ff1318e: build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.49.0 to 0.50.0 (#3019) (@dependabot[bot])
* e1dc5e70e2c5ba7a60cef2fa2b3021c98d956f56: build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 (#3037) (@dependabot[bot])
* 68f0b351fe698e1c5e7c38b2747c56d7fe5bc47d: git ingester: Handle empty repository by skipping it (#3033) (@JAORMX)

## Changelog
* 28afba33327e209d83b39190668dcc6786db2ffe: Handle when the user declines T&C in minder auth login (#2995) (@jhrozek)
* abc3d05ae3e4683ba6b477db0905d55e65eb9c66: Remove duplicate clause in profile status query (#2993) (@dmjb)
* 371cde5be69ca1a66ddf2f23a61782ccb173b845: Return a nicer error message when a ruletype can't be found (#3005) (@jhrozek)
* 19b5d16f415b272809c30abb1d7def67da6cdee0: Upgrade go-github to go-github/v61 (#3003) (@JAORMX)
* 80d69cd15a076d97955923be2b704c780fadc215: Use TEXT as type of license instead of VARCHAR(255) (#2994) (@dmjb)
* 0e33c98286656d4e2634ddb7ed16ebc2603d1dbb: Use fallback token for listing artifacts with GH App (#2992) (@eleftherias)
* 428893c72b5e8e81fe2da6b86b0f2dbd279295f4: Validate query parameters in GitHub App callback (#3007) (@eleftherias)
* 86019beffaeea85df80cf7ecb39fae7fcd900013: build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 (#3000) (@dependabot[bot])
* 8e90d6a4cc3ebc6206937c1b73a03fe8d35a6ec9: build(deps): bump github.com/styrainc/regal from 0.19.0 to 0.20.0 (#2997) (@dependabot[bot])
* 9bf967d3e7bc503d5c9226b9b81af81a9d11f443: build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.50.0 (#2996) (@dependabot[bot])
* e1d8b7a3195f19ee50b4a764a82e1c096f864c7c: build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.46.0 to 0.47.0 (#2998) (@dependabot[bot])
* 392a11a638787fffa4e8541cd7690a14aba5f642: build(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 (#2999) (@dependabot[bot])
* 9ad78b4a9a67b046be59c450203a7588222c6e40: build(deps): bump peaceiris/actions-gh-pages from 3.9.3 to 4.0.0 (#3001) (@dependabot[bot])

## Changelog
* deefb74dd78fc49a2c240ca29e74d4bdc658b83c: Actions: Complete version tags in workflow comments (#2974) (@puerco)
* c63fe170252f16ba66c8d64d4ac4148029c9fdc5: Add a unit test for switch of a profile state to pending (#2977) (@jhrozek)
* 9c339c8f24713e75fa695bd1468d9bc93fcd90a7: Add label flag to profile list command (#2964) (@dmjb)
* c60a007b4e3edce17c88fadfc10722bad0e023ee: Allow profile/ruletype URLs to accept slashes (#2970) (@dmjb)
* f19036811e8277300d1caa13662998734606db05: Auto-generated DB schema update - 2024-04-05 11:33:16 (#2960) (@github-actions[bot])
* ccb71a8a25b1af3fca4d071971544b1296d1e73f: Bump google.golang.org/grpc to v1.63.0 (#2961) (@jhrozek)
* ed733f4d5e13e972d194654d51d4876d9dc7c752: Modify GRPCClientWrapRunE to pass positional arguments (#2967) (@dmjb)
* 9e8dc843417505eeb8e5aeb7e49479ddb2ec31a8: Track whether GitHub App is installed on org (#2947) (@eleftherias)
* c193e60807f7f61c1537296df3456328ef7dcaa2: build(deps): bump github.com/go-critic/go-critic from 0.11.2 to 0.11.3 in /tools (#2984) (@dependabot[bot])
* e0ae855aa93d476426d5a6d7ae6762069e10d84f: build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 (#2989) (@dependabot[bot])
* 95655d61e96c8ebf64ec544c689a4d100d01d75b: build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.24.0 to 1.25.0 (#2987) (@dependabot[bot])
* 855db3d1e35107e1eecfea9711346880ab2435ed: build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.24.0 to 1.25.0 (#2985) (@dependabot[bot])
* 14ba6f57f7e89e9b9994ba3bb5632105811f5ee2: build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 (#2988) (@dependabot[bot])

## Changelog
* ef50b29c829e1aa5c16f59301ffbca91cd87af75: Add delete provider command (#2922) (@eleftherias)
* 18fee755fa4267a3b7987b9a7b8c2c23dbd0c4df: Bump docusaurus packages to 3.2.1 (#2957) (@jhrozek)
* 6e7b2fb7bcbf7e065a0c25c3345d532299a865e2: Change validation error message to describe max length (#2945) (@dmjb)
* 107ebf0799276b6bc803b4a89f61c1fee3dff384: Claim GitHub App installations on first login if they exist (#2937) (@evankanderson)
* 3b93c47a3c0025e787e58b27f66e08c018e4669b: Expand docs for how to add users to projects (#2901) (@ethomson)
* 2f59882e35a4219c6bbf68a104882474cdadc0ff: Fix flaky DB list repos test (#2959) (@eleftherias)
* 1a7ee922623bc55a8324fae8fd5c8cd504fdfd41: Fix mindev ruletype test (#2939) (@jhrozek)
* 1de308eb187b2f92cb770fd2c288ae6e1638922d: Fix order of instructions in running a server (#2935) (@lukehinds)
* 11b6573ad62cfdd783a8bb52f3fce461466037f4: Fix repository delete by name (#2941) (@eleftherias)
* ca3fef5d8e5e9c1433a4efdeeb2924876b92bebb: Refactor: Move SetViperStructDefaults to utils (#2920) (@Vyom-Yadav)
* 82960acf36a415c6ab0717af138b1c45c4d38c3c: Set security_invoker=true to use permissions on the underlying tables when creating new view (#2942) (@evankanderson)
* a4c9b01323eed66dde72bdd3a81aa9d3bb7661e2: Support empty profiles by utilizing views (#2936) (@jhrozek)
* 5df15b634d7c9f31818b9fd955b0fdd9a92c6505: build(deps): bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 (#2951) (@dependabot[bot])
* 98aaeb3377eee622b846ea57cd51cea4ee0ee3e0: build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 (#2949) (@dependabot[bot])
* 85e1cc71c7d8fe0e1766652d1a8d5de47135af1c: build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 (#2950) (@dependabot[bot])
* b2656ba24aa186242ca02c0e831f67b775d4090f: build(deps): bump golang.org/x/tools from 0.19.0 to 0.20.0 in /tools (#2952) (@dependabot[bot])
* bd5d9ef0d18f8aa44d7e7c7fc99ef5ba48c29871: build(deps-dev): bump @docusaurus/module-type-aliases from 3.2.0 to 3.2.1 in /docs (#2953) (@dependabot[bot])

## Changelog
* 32aef93369083fda7f5377c50d3f26baed4b0bc5: Add `initContainers` option to the deployment settings in Helm (#2852) (@JAORMX)
* f330d61d382855dfe80a66ed4dde9c239c751560: Add a pending remediation status and support tracking opened PRs (#2833) (@rdimitrov)
* 4294cb48ead2451141aa41313df6661ef0bf1ad7: Add advisory URL to rule eval status (#2891) (@puerco)
* b3e01c0af4dcaf1b9cf5f3f7c9dd1cfb17b27cf1: Add body for rpc additional_bindings (#2909) (@eleftherias)
* 71f9a298f888c89e743e42b18fe7d0d57c936077: Add bundle build command to mindev (#2851) (@dmjb)
* 195ff2ef4da588647c62e158fca5150a67c37517: Add display name to rule eval status (#2915) (@puerco)
* 2296a1c260d997a045b8fb7a7eb484208218e3f5: Add remediation_url to RuleEvaluationStatus (#2892) (@puerco)
* dde7b81b832cdbd9ace817c2f39dd96bd343be52: Add rpc that checks if enrollment is successful based on state (#2882) (@eleftherias)
* 658b7611a26948c34b7b187af62a40e01588dee1: Add tests and remove empty-struct defaults that were previous ignored. (#2836) (@evankanderson)
* 87bb8aaa3da34c035017c95b57bad8020ae112dc: Add unit tests for providers/service.go (#2885) (@jhrozek)
* 4bdf0024df79194c13a63581bac901baf71b527b: Allow overriding config struct defaults (#2839) (@evankanderson)
* 6f8de3863954d7b2d34b2f58e3769629a9bc2352: Auto-generated DB schema update - 2024-03-28 15:11:39 (#2847) (@github-actions[bot])
* 5d9064f31853305bfc7f73f4aa584b7cf19f8c82: Auto-generated DB schema update - 2024-03-29 09:59:33 (#2861) (@github-actions[bot])
* b798545eac66058af38e855263ee4b072f872eb3: Auto-generated DB schema update - 2024-03-29 11:22:46 (#2864) (@github-actions[bot])
* 583a7826f6bf2aa5fd0f899c1d9a4221f2f5daf1: Auto-generated DB schema update - 2024-04-01 21:51:32 (#2889) (@github-actions[bot])
* afc05451a46de0ec9c5c99735d2d73748c45d758: Auto-generated DB schema update - 2024-04-02 13:26:45 (#2903) (@github-actions[bot])
* c7bf284183c1d36c9fb3a9e98be1860698887acd: Auto-generated cli documentation update - 2024-04-01 15:28:12 (#2890) (@github-actions[bot])
* c1d2d76481a108d1db8fc89c41773cc388cfaa74: Bump docusaurus from 3.1.1 to 3.2.0 (#2881) (@eleftherias)
* 0bc208b7bd2a787a1a12d37ad6a13575bed90ea9: Clean up calls to Keycloak behind config (#2886) (@evankanderson)
* 0bcbfbb7aee8b4f3e4660f0d6dfe15c2897c1f6e: Create ProviderStore interface, migrate controlplane to use it (#2900) (@dmjb)
* ef19751d92992f2ce044ef48c19535c5aa79c0ae: Create a new top-level project for users who add a provider via the GitHub App install process (#2895) (@evankanderson)
* 902468781acfd507e96c52a62fd662576ca24b1f: Disable ingest caching for artifact entities and add a wait period (#2883) (@rdimitrov)
* 01511b36cdbedac55cabf2ada139180d2654494d: Do not skip action processing decision if evaluation did not changed (#2868) (@rdimitrov)
* 0c6bd90cf1f8e60d0db6c3a87ef48494d696235b: Don't mark a PR remediation as error if no previous result exists (#2917) (@jhrozek)
* 0ee5660aaa2507e20775287a8f7fca49317ff0a5: Fix auth delete when GitHub App installed (#2904) (@eleftherias)
* 5a332ac58c417b2faf7968a680ae9caa1d5fc60c: Fix documentation format (#2894) (@eleftherias)
* a4ed59fd6cd444336f87105b4c53625cb6b204b6: Fix flagged problems in internal/engine (#2867) (@evankanderson)
* ffbae889fa0af8f03d45030d50e09ea5b635768d: Fixes a typo in the CLI - s/profile/project (#2921) (@rdimitrov)
* 2058524c8a0ed0f795579b4d9b0ded954c9b88d9: Handle GitHub App installation deleted event (#2870) (@jhrozek)
* 40002e4d105f49c2f0e0967a24bc7111c3fac2b5: Log the profile list parameters, i.e. labels (#2905) (@rdimitrov)
* dfdffb674cae17d4ce64fcaea2ff9a890e113a05: Make existing minder CLI work for VerifyProviderToken (#2884) (@evankanderson)
* 5c381cfbf3e4b7ce040ed8511a1fae1a78a0014b: Make provider an optional filter (#2871) (@eleftherias)
* 357800e960543aae139868d91b8fb73626b2274d: Migrate GH App installations to int64 from string (#2887) (@jhrozek)
* a9d3540ea62770ecb88b761572b74b3f34603873: Move more provider access methods to store (#2911) (@

## Changelog
* 6aa899a42057d3f46741573313bb2fcf3eb7f326: Add Marketplace interface (#2748) (@dmjb)
* 51c54f4339891fe4be964715129048bdc8855874: Add Provider Class to data model (#2681) (@evankanderson)
* f31c8505cf5717e91f7ea1d9c672764dc036c998: Add additional info logs (#2821) (@eleftherias)
* 8db7e06d737829682226f577930d8504c1ba3bcb: Add comment on inferProvider call (#2812) (@JAORMX)
* 809687a13f9fd8bce4b37ec2c2cd915a92f32beb: Add display names to rule types (#2824) (@JAORMX)
* e43f36fd37c2f8959b852ceb3786c01c491acdd9: Add enrolment for GitHub App provider (#2827) (@eleftherias)
* 4d685c350dcdf8c770d7c3f32087638fb4206ae4: Add helm documentation about GitHub App secrets (#2828) (@eleftherias)
* 867e4c0026d87c19a81ff1a4beadf733219e7469: Add label support for ListProfilesByProjectID (#2789) (@jhrozek)
* febf35faeb3a0ef3b7baa97920be94650d55999c: Add provider classes to API (#2762) (@JAORMX)
* 03041360fb0be8f9b60de83b210db1ddfc341bd9: Add validation for rule type entities (#2758) (@JAORMX)
* dd7347fbe74619bb0da38ebd5a42631c4c7b490a: Allow `ListRemoteRepositoriesFromProvider` to gather from multiple providers (#2802) (@JAORMX)
* a48acd0416932da9d84fda3f2477a1ec964def5b: Allow for skipping opening the browser on login (#2795) (@JAORMX)
* d50072d944bf50797aedc862980d6998fb219b03: Allow reading pointer config values from env (#2799) (@eleftherias)
* abfe76f4dbee0f28fa1373ca4e4dbcc7bdaf7ede: Auto-generated DB schema update - 2024-03-22 13:02:25 (#2760) (@github-actions[bot])
* f62696d9d123d837fe65eaedd4a60f8869a4efa7: Auto-generated DB schema update - 2024-03-25 20:19:27 (#2775) (@github-actions[bot])
* 7ed6a3d3651717a988dba4a0b90d3cf0b09d7a5a: Auto-generated DB schema update - 2024-03-26 08:08:42 (#2783) (@github-actions[bot])
* 7c0c78b6f088d938f9e4f1b36dc38bf1f805b8bf: Auto-generated DB schema update - 2024-03-27 14:27:54 (#2826) (@github-actions[bot])
* e0a7a748ff1449b5748f660ddb4ae049c8e7f2fc: Auto-generated cli documentation update - 2024-03-27 10:17:54 (#2810) (@github-actions[bot])
* 66179b892f89e053aa0766916b03f5088e686b5f: Auto-generated cli documentation update - 2024-03-27 18:06:31 (#2832) (@github-actions[bot])
* 8e3b333c39388f7922973fe554f6987d6fc30e98: Auto-generated helm documentation update - 2024-03-27 09:38:17 (#2816) (@github-actions[bot])
* ca2bb1165fd53a07eb7be36261dda8d01fb5fc74: Auto-generated helm documentation update - 2024-03-27 14:49:50 (#2829) (@github-actions[bot])
* f18a5b3f296d5ecc30f06b24efd1d0ba76db9a88: Create healthcheck as part of project creation (#2792) (@dmjb)
* ce4cf114f27faada376a2be7fc6ab0b4c1594772: Don't dereference result on error from RegisterRepository (#2834) (@jhrozek)
* 0f3dc8a1799952bd90c208f106f3e7234658d3fe: Ensure repo context is retained in registration (#2830) (@eleftherias)
* 4524f991586d2b90603718364eef0a0068e85219: Explicitly coalesce labels on create and update to {} (#2794) (@jhrozek)
* ba6e18898bdaf8bf67924a7d7e1e854996e05551: Expose and actually fix skip browser (#2809) (@JAORMX)
* 66b7a906fe0df9b20dceaa2624ef511942739a25: Fix error message when instantiating alerter (#2786) (@JAORMX)
* 3ffaeb617f88f9ffd0060c54f5388b9a6c267d0f: Fix logic for skipping browser on login (#2806) (@eleftherias)
* 4187cb030fa87b5a8f75324335a1c918189622ae: Fix pagination in provider list (#2791) (@JAORMX)
* 36019719ae6f727f8d19123f68fed72e85885334: Fix secret declaration in github app secret (#2820) (@JAORMX)
* 5a786f4b08f952a0e5cd929bd81eca18221cea9e: Make `repo-lister` interface more general (#2776) (@JAORMX)
* 0abd048562ffcc6a16755f03d93bdb8c541ea1ab: Make marketplace support multiple sources (#2801) (@dmjb)
* 3ac5c7ee10f1aa4b8185bf3baf51ef064863303d: Modify operations used by marketplace to accept transactions (#2771) (@dmjb)
* e69e23feea95a2d91d868fc39af5b93dab67ecb2: Move rule type engine code to more descriptive files (#2787) (@JAORMX)
* c88dd18e2c34d8e6f7f17201373118275e63a0c3: Move stub eventer outside of tests and into dedicated package (#2761) (@JAORMX)
* c71a423aba5076d7f5eb20f83ef0ec

## Changelog
* e6bedd738650d14bc13a585e58f87ee54214d24d: Create Subscription service interface (#2729) (@dmjb)
* 6f10d2eda77cfce7b585e201f22211d9a76f8b5e: Add GitHub App installations table (#2720) (@eleftherias)
* 0084d92e9f8d3a80f0006b3e208f7ae3bcdf3fac: Add GitHub App provider settings to configuration (#2730) (@eleftherias)
* b68ca59eec2fd3c67fa3556f7d88d44d8c66b3cc: Add a CLI for rotating webhook secrets (#2735) (@jhrozek)
* a1b2d23187b8dc76edbe0d2ca904ccb533ffdebb: Add bundle ID structure (#2747) (@dmjb)
* 29853af9430de89c61da859f4a6a4af6661b81c8: Add credential state to providers proto (#2728) (@JAORMX)
* 36cb6b9e5d9a54a866d9bfee6a9bfc83fd72040c: Add display name for profiles (#2724) (@JAORMX)
* 5cb48d52b8ca86e3187a334ca9c29a3d592733e7: Add display name to profile status output (#2740) (@JAORMX)
* d2ca6bb2266f65e8f4f8ec4cf85c03d4e6f4a095: Add log message for transaction commit when deleting account (#2745) (@JAORMX)
* 40954f55fe568e51dd08e0902969def26273ca50: Add more logging to user/project deletion (#2744) (@JAORMX)
* 309afa965b29769c02de30f311f72b06317c75bd: Add rule evaluation ID as a unique reference to RuleEvaluationStatus (#2716) (@jhrozek)
* b6560b0c79486625b4d3adaa272c381e0aa2d97b: Add the ruletype severity when returning the list of evaluations (#2710) (@jhrozek)
* 8af02a07d5a6bf583d50ccf2bc5fcd52ecc856fa: Also show display name in `GetProfile` API (#2736) (@JAORMX)
* c225496cadedb5406a5ed9078f3045ae071543f6: Auto-generated DB schema update - 2024-03-20 13:14:37 (#2721) (@github-actions[bot])
* 0a76e8e5b41191e473b1e659bf4fcdaae98d1eb0: Auto-generated DB schema update - 2024-03-20 16:57:16 (#2726) (@github-actions[bot])
* 9e3f20660fc7623b4d5e9a5f732fe4f69b8d211e: Create interface for reading from mindpak bundles (#2714) (@dmjb)
* 6b135587169302cfd0b3789fb8664d4d496d8bd9: Define BundleSource interface (#2731) (@dmjb)
* a519d3a12b099c0445c3fa5a8aa67ba3ae59845b: Detect project deletion while `ListProjects` gathers projects (#2752) (@JAORMX)
* fc932ae2b4d93bfd1ad4a715f07d0652932ac7ee: Don't parse the alert metadata if there's no alert opened (#2719) (@rdimitrov)
* 2eb901959267d3a5f371b031965b08dcb6b2ddb6: Eval Status: Return repository UUID, populate entity info (#2741) (@puerco)
* c170de2d8109621b59f188c7c4499e7d21773962: Fill in GitHub App provider (#2713) (@eleftherias)
* 5f6bcbdb2464cac6594bf63741c1b45cf18cd0a8: Introduce GitHub App installation access token (#2725) (@eleftherias)
* 2944b304a00820b14ea0dd086edc86168fb758b2: Only run transaction rollback for deleting user when there's an error (#2746) (@JAORMX)
* f1a4d07c204120dcaac005dd5fcd5de9770c7a59: Prevent modification/deletion of rules belonging to a subscription (#2680) (@dmjb)
* 306a9f2d94841fbe4dada353fd2abcad821e6c8d: Provide an array of fallback secrets to allow secret migration (#2734) (@jhrozek)
* 715d7deda2041e646f07e717e24aab866a006014: Separate the eventer into interfaces (#2718) (@JAORMX)
* 926a51c2fab9d6977bc18563350c886fa7d5b7be: Skip deleted projects while getting user (#2754) (@JAORMX)
* aee4e41265437b8da3773d096d1daaca2c59b83f: Use watermill-sql v3 not v2 (#2712) (@JAORMX)
* 03350435efe3a51b17ea3e85175a98e97a3da39e: build(deps): bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible (#2732) (@dependabot[bot])
* 01a7383fcd78412944797143e196fa81d7fe9ba2: build(deps): bump github.com/docker/docker from 25.0.4+incompatible to 25.0.5+incompatible in /tools (#2733) (@dependabot[bot])
* 85337d2b7b8c604e0a50955dffaf2a5f2a66ad93: build(deps): bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.0 in /tools (#2717) (@dependabot[bot])
* 0a2c2a40d97d1ced0b7be5deb1a6ab421a9c795f: build(deps): bump github.com/golangci/golangci-lint from 1.57.0 to 1.57.1 in /tools (#2738) (@dependabot[bot])
* f45709bea07760c88b450b663a42b2fa2b49caba: build(deps): bump github.com/openfga/openfga from 1.5.0 to 1.5.1 (#2739) (@dependabot[bot])
* 5999f8382b3e141fb4001f3d4f73a17fc9a9abd4: build(deps): bump slsa-framework/slsa-github-generator from

## Changelog
* e0569e6716a3aa3894dd984bb53caa6c1797e125: Add "display name" to project's API definition (#2698) (@JAORMX)
* a5e688fd58418dd5eb17d1086417fcc8b657e517: Add "public" metadata section in project's metadata and use it for display name (#2702) (@JAORMX)
* 6bfd13384a698563ff589f744852d45a07157f24: Add Create/Delete/GetUnclaimedProvider RPCs (#2640) (@evankanderson)
* 8035c66b5449b08fd65cb14766f4f3e64c3a19e8: Add EvalResultsService to ingress.yaml (#2644) (@rdimitrov)
* fafc696a4233a59b2b0caf3ed43b5037257fb5e4: Add alert info to RuleEvaluationStatuses (#2675) (@rdimitrov)
* ecc6c510092f437b7184049149db40d04c2ae665: Add command line flag to skip browser spawning in provider enroll command (#2696) (@JAORMX)
* 6e02b8749084487c13245c3457556fbfa60711ca: Add debug information for credentials instantiation (#2695) (@jhrozek)
* eae49a06490001703b4844aad770784374530fb9: Add project service definition to minder ingress (#2629) (@JAORMX)
* 0c5d49a231b7b55caaaeaa59bea0d1ac034cedde: Add repo reconcile command to minder CLI (#2505) (@Vyom-Yadav)
* 016d90b755fc56cf13fef1e66fe898c128dc00cc: Allow using an environment variable to override the token from the CLI (#2671) (@JAORMX)
* 212a9d87913d45005744645d9c1247d648853977: Allow using empty credential if no token (#2650) (@eleftherias)
* 07814edf28b4fe3afc4672c68f97bfd8f3844fbe: Auto-generated DB schema update - 2024-03-15 14:24:23 (#2676) (@github-actions[bot])
* 2f1ab4818fc5bd2933ed4453b0cbc02b52758fae: Auto-generated DB schema update - 2024-03-15 17:07:45 (#2679) (@github-actions[bot])
* 6dab1506fbabe51fbd37a2b07b743785ca0744ac: Auto-generated DB schema update - 2024-03-18 09:41:30 (#2692) (@github-actions[bot])
* 790a8e8ae5496913e6cd26a4515c27456dfba983: Auto-generated cli documentation update - 2024-03-14 06:45:00 (#2649) (@github-actions[bot])
* 8c83f41aaee31a389e61a36ad6c78174cfa0c055: Default explicitly to remediate:off and alert:on (#2688) (@jhrozek)
* be6e70360f03e7bde959d3a58fa0c30d5936af11: Define DB schema for bundles and subscriptions (#2670) (@dmjb)
* 8db62a2a10faddc25f3e4aad415e01f1ec4fb140: Explicitly specify owner in all package operations (#2652) (@eleftherias)
* e1e193fa9289799caf66b694ccfeae958526338c: Explicitly specify owner when listing packages (#2643) (@eleftherias)
* 0ad22ac30e5c4af6540d87009f0965fc78fbdbe6: Fix docs formatting to make build pass (#2641) (@eleftherias)
* 6d730e09129a24a37c6da68dea5f1146117e792d: Implement API to update projects (#2705) (@JAORMX)
* d20a83f1573489f0dacdc5ab94c1c03de761d312: Implement EvalResultsService/ListEvaluationResults() (#2687) (@puerco)
* a7d22bf2effc4b3ae59c27b47fdd185e63ad812d: Introduce GitHub App provider (#2678) (@eleftherias)
* d7530ac02a98598cec5e4a31eeeecb1db8f30eb7: Introduce provider Credential interface (#2604) (@eleftherias)
* cdcdd667cd152470e43338f0ea4461c5fd5850c6: Make several more name parameters greedy in the HTTP bindings (#2689) (@jhrozek)
* 8b746ae52c80ca812a44b6c659033665dc7988d4: Make the parameter of GetRepositoryByName and DeleteRepositoryByName greedy (#2655) (@jhrozek)
* e0edc36755bda745817741cc25f911592df1728b: Minder resource names should be case-insensitive (#2684) (@evankanderson)
* 5cfbb070c1cd53cd7ef1bf8a6d51bad7fdee6fd6: Mindpak modules (#2639) (@puerco)
* 5668719c79fc200b305172dfdd4281ee55bab6f7: Move profile create/update to a separate interface (#2653) (@dmjb)
* 6ac8893ec4a3f2ae140e99460fecc65a7fcb35e5: Move repo deletion into a separate interface (#2608) (@dmjb)
* d68e8e697dcd36f8c1fd9ec9d8a894903c4f2827: Move repository create to RepositoryService (#2632) (@dmjb)
* bc09ce790261702b30e432c80773bd90ffc97cdb: Overlay PatchProfile body with the current profile to avoid reverting to default values (#2673) (@jhrozek)
* 9e9fb2d9a1d90cb7ff7094bbf996508d12b77353: Project delete: Check feature flag on parent (#2631) (@JAORMX)
* 971a4aa4fb022b1758e562b28d0f3f6202f4ef6e: Put subscription foreign key on correct table (#2677) (@dmjb)
* 7b9a05a12bd5c27f310e1974d73d71ce889bd7f6: Reapply "Move reposi

## Changelog
* 7762c927ed8427a20eadb36f774a23af38f55ed0: Allow rule type linting to skip rego and read many rule types (#2499) (@JAORMX)
* 630db62bc86894265cba495717d8c1607e70d117: Ensure viper binds to env vars in mindev (#2501) (@JAORMX)
* 64a7f6768623023bb09e687adc54945c134f5bb3: Remove replace statement from go.mod (#2503) (@JAORMX)
* ebf9423e922dfc2754de7d45af435d01af5165de: `minder ruletype lint`: Also verify that rule type name matches file name (#2495) (@JAORMX)
* 009bc5654d336957e3cfd6c4857823169769799d: add lint-fix command to makefile (#2500) (@dmjb)
* da2671f939160806276be0d62576e430de3f04f9: git ingester: Allow using default branch (#2496) (@JAORMX)
* 2a72b07e84f3e83b400b6036999955fcfa4f158a: update doc yarn dependencies (#2498) (@dmjb)

## Changelog
* 78568522133816ba11a00ab8c5b9e30c3b40da59: Auto-generated cli documentation update - 2024-03-04 19:52:24 (#2485) (@github-actions[bot])
* e68fcce36136bd2a9822846458282e26a13619bf: Bump OpenFGA in docker-compose to v1.5.0 (#2484) (@JAORMX)
* f7eb7b4110486aab0bccd530d568a1dd167099dd: Include 'openfga' in the 'depends_on' section of the 'minder' server container (#2489) (@Vyom-Yadav)
* 45750b4e9fb2de33365758366e06c19e999bd2eb: Merge pull request from GHSA-v627-69v2-xx37 (@dmjb)
* b31ee906c3e835b3472bfc43c9b26a340148110f: Support for offline tokens (#2468) (@JAORMX)
* aa7c81520bdf9478671c7f25c7a35f0532da6c81: Upsert provider access tokens instead of Create and Delete (#2486) (@jhrozek)
* 753799268ce984c5a27ad97f22c4d8bddbebcff9: build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 (#2492) (@dependabot[bot])
* 42996101d4cd7d948a225d97032551bb002f3144: build(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 (#2491) (@dependabot[bot])
* e475cb65c9a0642d6267099503a5d4c5a54cb12e: build(deps): bump golang.org/x/tools from 0.18.0 to 0.19.0 in /tools (#2494) (@dependabot[bot])
* 07828de2124fedafb2e06836f05038f5229c01b2: clean up unused DB queries for repositories (#2483) (@dmjb)

## Changelog
* 9f277dfb72efe6c756adb3411619f7b009bb782e: Add explicit severity to rule types (#2452) (@JAORMX)
* b912ba3dde50f1aab3a2c0b0359246ca012b129b: Add name validation for profiles and rule types, move static validation first, add tests (#2462) (@evankanderson)
* d3fb885b05190f027ec9969eb8a9223d67a1fbf1: Add provider callback handler for web app (#2413) (@eleftherias)
* 03be497aec0f5ee6c58240e2f2c5c45490f4bcf1: Add test coverage for #2432 (#2434) (@evankanderson)
* 5ccb0bbe50dcdc66032bc738413f0888a7cecfc9: Allow for configuring CORS in minder's HTTP server (#2474) (@JAORMX)
* 964e3670364d05fe54327b8fbec9fa135b1d19fb: Auto-generated DB schema update - 2024-02-28 18:18:45 (#2460) (@github-actions[bot])
* be483db59df1f0ebcfd8fefe981ed4b6663c0621: Auto-generated DB schema update - 2024-02-28 19:08:35 (#2461) (@github-actions[bot])
* 53c5c5ad18c113270d2ef3383f8ce83ba5312512: Auto-generated cli documentation update - 2024-02-29 14:10:50 (#2469) (@github-actions[bot])
* 97fedddd9026ba5bcba2bf37a7851d89e1dccaee: Catch errors in refresh token fetching (#2473) (@JAORMX)
* 322fc189c4711dd00dfdafd47f596b37d7beb919: Do not ingest indirect go dependencies (#2429) (@rdimitrov)
* 248b9cf123bdf7d0ce1da1d3b2aec53ec26dbff3: Ensure user is logged in upon going through the quickstart flow (#2458) (@rdimitrov)
* b88c2a9e9be47f8ddb87c8688ae4d4cddb60af9b: Expose more errors as user-visible so users can adjust their queries in a useful way. (#2448) (@evankanderson)
* 08790d29e0026b6c09f899ab6340d7e6de80a69b: Fix GHSA fix with respect to int64 update in #2415 (#2431) (@evankanderson)
* 53868a878e93f29c43437f96dbc990b548e48d1d: Fix client crash with fix for GHSA-q6h8-4j2v-pjg4 (#2432) (@evankanderson)
* a3f611bb8f263712e11cd360589a3a8cdcf2b6c2: Improve logging when ProjectsForUser returns an error (#2435) (@evankanderson)
* ffb3a1aa6c9eba198e90d4f8752ab31ba417786e: Log and report operating project details when return permission denied error (#2436) (@evankanderson)
* c3c9980a851ff3aab190cdb9416bdbce0c5fb8b5: Merge pull request from GHSA-q6h8-4j2v-pjg4 (@evankanderson)
* a115c8524fbd582b2b277eaadce024bebbded508: Move webhook create/delete into separate interface (#2459) (@dmjb)
* 7f06c0a717f752c98d6f353ec60ff151c0d1ec7e: Print a helpful message in case of unauthenticated grpc code (#2455) (@rdimitrov)
* b87504e194f2793d0d89aefdb1ab518b54f68fc5: Promote Github PR ID to int64 (#2446) (@dmjb)
* e1e6c3e86aa358f67381917fbd1f3945c696789d: Use uber-go/mock instead of the deprecated `github.com/golang/mock/gomock` (#2454) (@JAORMX)
* 3ef4cc9bb1b268c7adbd67d4aab79d6e45acc7aa: build(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 (#2464) (@dependabot[bot])
* 7f134919c0e3fc80a30743ca7d3c59735fc218b7: build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#2450) (@dependabot[bot])
* 3edf3755997dd61d3a90970171ad3cdbd2dc4d4f: build(deps): bump github.com/daixiang0/gci from 0.12.3 to 0.13.0 in /tools (#2437) (@dependabot[bot])
* afa1279f5b3cac7e6753a72f21a806dd5bddbf01: build(deps): bump github.com/fergusstrange/embedded-postgres from 1.25.0 to 1.26.0 (#2463) (@dependabot[bot])
* 25e9fd6422ab1a2b45cd03c320b471fa978101f6: build(deps): bump github.com/go-critic/go-critic from 0.11.1 to 0.11.2 in /tools (#2466) (@dependabot[bot])
* e88e74272ac912035238439432bdb4e5f66d27bd: build(deps): bump github.com/go-playground/validator/v10 from 10.18.0 to 10.19.0 (#2478) (@dependabot[bot])
* 888679497fc642c78b3894eb5a22696bcc8fc830: build(deps): bump github.com/norwoodj/helm-docs from 1.13.0 to 1.13.1 in /tools (#2476) (@dependabot[bot])
* 3685c7bb37abfd4b89da6f9909daf959507266ab: build(deps): bump github.com/open-policy-agent/opa from 0.61.0 to 0.62.0 (#2472) (@dependabot[bot])
* 5fd0f742d4e9d5b5673f09f431ab639f427a4098: build(deps): bump github.com/openfga/openfga from 1.4.3 to 1.5.0 (#2479) (@dependabot[bot])
* a10ba305008040b6383f971e19361be94a1ede75: build(deps): bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 (#2451) (@dependabot[bo

## Changelog
* 067a3b7c0c6fb13f2d03731955bbedcc556e45c7: Add Homoglyphs detection in Minder (#2312) (@teodor-yanev)
* 2e856e38a5afdbce6b666995ed05b39d8c97c4d6: Add coveralls badge, reduce debugging spew (#2357) (@evankanderson)
* 92be6ddf7dc627a6d42306e2a026567b8e0ce67d: Add more coverage to `internal/eea` package (#2383) (@JAORMX)
* 0be4d6f040659683ba68fc7053b6f72627b40587: Add test coverage for `internal/eea` `FlushAll` (#2375) (@JAORMX)
* 15268b088194ec17d5cdf234b95e8f9680a6f399: Add test coverage for `internal/util/rest` (#2363) (@JAORMX)
* c26b0a60f2951ce7c5e23da5b5db794590175c39: Add test coverage for `internal/util/statuses` (#2364) (@JAORMX)
* 71e15bb0c807d8edddf96d9703eb16e0436b962d: Allow golangci-lint to comment on PRs (#2378) (@JAORMX)
* c8ddfe603f7f78af75e0d2b093d0bd1c11ea03b0: Auto-generated DB schema update - 2024-02-19 13:19:33 (#2374) (@github-actions[bot])
* b6f8ac53f178191189795607181facfdeeffa596: Bump helm-docs to v1.13.0 (#2427) (@rdimitrov)
* ec4f6b635cf6f141fa0d0abcd3595e6d55a687f6: Change the yarn serve port for docs to 3001 (#2387) (@jhrozek)
* 23f7803423f06bafdedcb619099bb25496194412: Clean up some JWT code (#2390) (@evankanderson)
* e473817ffcc7bcbea03f25b2bf6dfa85e7561a4b: Deduplicate configuration reading from viper instance (#2384) (@JAORMX)
* 54d28f85dae8acd46d215b377075eaf3249b0d9f: Deprecate the Trusty options from the protobuf (#2381) (@rdimitrov)
* a842319387a96b828efda8d906f1aef3dea6d938: Drop the artifact_versions table (#2372) (@jhrozek)
* 98e1d02f36e856683eaa1509b73c6d11ab325fd0: Elevate the permissions on the linting job in main.yml (#2379) (@rdimitrov)
* c3bd8f04bdf7af43aa883e4e8cc1d7577487ceec: Enable Coveralls for coverage reporting (#2342) (@evankanderson)
* 9ebffe49807cb8987828e7ea6139f06011fb0ee9: Fix CLI invocations in first_profile.md (#2328) (@puerco)
* 29bef1219dc6a8c545c35bc23b32a80c26711484: Fix OSV support for Go to properly identify go.mod packages (#2417) (@rdimitrov)
* d07de2387793a418315e2c61d7c2f8f45b8c2c52: Fix TUF root init to bump to sigstore-go to v0.2.0 (#2358) (@puerco)
* 1a8fbaae16821d72e2d54f37de1f39bb9979a6ae: Fix a few Trusty issues that enable support for Go in Minder (#2332) (@rdimitrov)
* d503a77a966cf4403c9a7c44aaa6cf3d41e98eab: Fix infinite wait for ratecache using non blocking Close() func (#2385) (@Vyom-Yadav)
* 1e3fccd8b05edd37a6e27d6109f489a0ecc74d56: Fix linting permissions for pr.yml and tags.yml workflows (#2380) (@rdimitrov)
* 4af020f053c3fa61adda9b4f95d816f79c24dd16: Fix the PR check workflow to take into account the refactoring change type (#2410) (@rdimitrov)
* 393cbe3fe03dba2361a55d249e936cbac62a1614: Fix trusty API URL (#2428) (@rdimitrov)
* cfadb879642af3eb837155b84f163a3fca735e03: Handle rate limiting errors for GitHub API (#2271) (@Vyom-Yadav)
* cc8855ec3bcaa778f3ed2f03bf304631ace5b698: Hyperlink to trusty page for lower scored packages (#2419) (@rdimitrov)
* 2bd99c304914b276fb6560db275c7ee76d8a6141: Mischief managed, return buf breaking checks to normal. (#2396) (@evankanderson)
* 897f6c877e4644933f06e7781819086d8f166bad: Re-enable coverage reporting to coveralls (#2351) (@evankanderson)
* b44fbc1990893c95597af6fff7dac2703fc8e21a: Refactor project structure: Move cursor file to utils package and migrate common config struct to common.go (#2394) (@Vyom-Yadav)
* a9e90484ab828b33f4215f62a90673d7d5a08987: Remove `internal/smoke` package (#2367) (@JAORMX)
* 34c0452be9736ad1a12f1ef3e46022eb0bec1a9a: Remove unused functions from `internal/util/rand` (#2366) (@JAORMX)
* 81079b190c943990515b6b2808ba3461d6dfb89e: Replace unpinned actions with pinned action (#2352) (@stacklokbot)
* fb48a9feb68d612387c798862f03d4c2d43580d4: Replace unpinned actions with pinned action (#2400) (@stacklokbot)
* c3afc23f1673ea7a5ddb13c3e0bc97b0b6315426: Replace unpinned actions with pinned action (#2406) (@stacklokbot)
* b315db0f27b8ce9721bacf3959deb650502689c3: Revert "Enable Coveralls for coverage reporting" (#2344) (@evankanderson)
* 41091374847510054b3c5e8d193af2793

## Changelog
* 93b3ba0af66a4067d524c53e024c728b1f504947: Add provider listing functionality (#2310) (@JAORMX)
* 00c88b179795f602137462a2396c374525b04931: Auto-generated cli documentation update - 2024-02-09 11:25:56 (#2324) (@github-actions[bot])
* 5e20d869a7b87fdf7f2719965d03a1be2af37093: Full diff ingestor (#2325) (@teodor-yanev)
* d1aa640e2d29131f7d71c81f2d2d886579792cb3: Update CLI table outputs for ruletype and profile (#2327) (@rdimitrov)

## Changelog
* 9017c04cea3436c79ef24448db96cf43e55a8c50: Add "openfga" to list of services to start (#2281) (@dmjb)
* 5b1ce49cf3dbc033a06decf1144bf5f14e5534d6: Add documentation for built-in roles (#2258) (@eleftherias)
* 44dba51b26e1dc34a58f54338bb6f74d9f4037e8: Add json/yaml output to whoami (#2313) (@jhrozek)
* ca3137aff164455a81f696a5319835ef04ca1164: Add test coverage for "nice status" middleware/interceptor (#2294) (@JAORMX)
* 2f78e9e52e6cc82258798de399d1cbf7ac81136d: Add test coverage for OpenFGA authz driver (#2291) (@JAORMX)
* b7fb73a53159a74dd6307a4dd7de4c614ec8aef1: Add wait to ensure all entity events are executed (#2274) (@Vyom-Yadav)
* 8750f9f1c2c2370eca3bb1ecfd22745da8d3e60d: Allow setting custom TUF root with the minder container verify command (#2270) (@jhrozek)
* 056162df3434ee21da6cf1a0f0ec230a83f32cfc: Auto-generated DB schema update - 2024-02-05 09:49:19 (#2276) (@github-actions[bot])
* aacbc41d4dd209b80ca3e07a999e25c9daa08e00: Auto-generated cli documentation update - 2024-02-07 12:48:38 (#2293) (@github-actions[bot])
* e869f1be161b300b03b81c8f3808d0e44842cfd4: Auto-generated cli documentation update - 2024-02-09 08:52:50 (#2322) (@github-actions[bot])
* e76234543428a188e131feba5c1be948dbf8903a: Cleanup unused GRPC paths from ingress (#2268) (@JAORMX)
* aeb2790babac79a666ba86c216a8d9281f0d0a83: Display name of profile in create or apply commands (#2301) (@dmjb)
* c062facdb6f5d0a7a4c720cffec7c983e51b4e29: Extend artifact processing to enable richer provenance checks (#2235) (@jhrozek)
* f485a3db1c77482046ade2dbc606045a2ffbb956: Fix Rule Evaluation Logic for Handling Multiple Rules of the Same Type - Part 2 (Data Backfilling) (#2206) (@Vyom-Yadav)
* a40ec729203859e053122549f67ce9f68d7da4fc: Fix documentation formatting (#2269) (@eleftherias)
* 000a62a4e4a08356878f2cad0222342be58b0761: Fix user deletion logic (first minder then keycloak) (#2311) (@JAORMX)
* ce8c51ced6020ee958c986c413dea74e54d68382: Migrate to github.com/puzpuzpuz/xsync/v3 (#2292) (@jhrozek)
* b387aebf46f2e3e4cebe3156cf1f385299c5f70b: Remove golang-based helm tests (#2297) (@JAORMX)
* dbe1f9a692dd2c28ba4e84d5921db064344ed9be: Support GH's private sigstore instance (#2295) (@jhrozek)
* e6ebdf7a3ce2f6810c901cea3d5baefb1d64939b: Update the tmpfs path for sigstore caching in docker compose (#2267) (@rdimitrov)
* 914970412ce1ea2960562296dc8f0904617d1a48: Verify all simple signing layers, do not filter events for .sig, enable OIDC identities (#2299) (@rdimitrov)
* c9d36717feebcbad1bb1b489b4abb0c7a675878a: build(deps): bump GoTestTools/gotestfmt-action from 02b936e80bd5b0e515b98eb8f7d998a60ccca462 to 7dd37bbcc925453b6d7465164cf3bcbd87bc691d (#2278) (@dependabot[bot])
* a509e3fc52230f7c536cba522a76799ec4912b1b: build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 (#2289) (@dependabot[bot])
* 3415dbd36c714dc9de442b6f1e6640e7ea105aa1: build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 (#2279) (@dependabot[bot])
* 3bde7ca4a8407bfd2bdcdf1cecbac707d4a737a9: build(deps): bump github.com/golangci/golangci-lint from 1.55.2 to 1.56.0 in /tools (#2302) (@dependabot[bot])
* ab4924e3c46785334eddcc639edaf1ea9781023c: build(deps): bump github.com/golangci/golangci-lint from 1.56.0 to 1.56.1 in /tools (#2315) (@dependabot[bot])
* 810d48e188228f1309fcb6c2f7033064b630b52a: build(deps): bump github.com/rs/zerolog from 1.31.0 to 1.32.0 (#2273) (@dependabot[bot])
* 814f52bb5ba83eb4d3863e961f87cd62d78a210a: build(deps): bump github.com/styrainc/regal from 0.15.0 to 0.16.0 (#2280) (@dependabot[bot])
* b6b458172d4f33dec195ca2e5898f552fac6d128: build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 (#2272) (@dependabot[bot])
* ddc5296f82e03e8f25c931b4e9ffd22c2ff9fca0: build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.47.0 to 0.48.0 (#2319) (@dependabot[bot])
* e6c37773f8fb8c5928111bc3790a0258660e1856: build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.47.0 to 0.48

## Changelog
* 5ad2f9d0a9dc7f611024eec92456cd4e8c14adec: Add `PermissionsService` to ingress configuration (#2265) (@JAORMX)
* 2a2eeabe13b1c967a7ba9f9f63df3a20f9249cd4: Add ability to evaluate scores based on detailed scores for trusty (#2198) (@JAORMX)
* f6815af326fc1e81a5241dee6f88095ef791cd26: Add ability to list role assignments in a project (#2234) (@JAORMX)
* 5ffa060a322a6a0e91dfa9f83d11d40bb1d47afc: Add authorization relations in proto (#2218) (@eleftherias)
* 4fbfff74f2ac9fbcad83e2117ce5fef3b7cb00f5: Add new policy writer role (#2203) (@JAORMX)
* 9d626c2307261ffbe6aea10eea05316ca5a43109: Add permissions API to FGA model (#2219) (@JAORMX)
* c9dfb7364d5998bcb64dfae1a0e690e8f2beb8b4: Add relation for fetching remote repos from GitHub (#2237) (@eleftherias)
* a0e8693da5bc33ec76b28a7d0136a5ba639855c1: Allow to configure a custom sigstore tuf root (#2204) (@rdimitrov)
* 3288f5eb6eb12517cc0553a1da4d7800ec3412fc: Auto-generated DB schema update - 2024-01-31 10:34:06 (#2239) (@github-actions[bot])
* 8873f9ba8f4936061ee376e279d15e0e3ef61837: Auto-generated DB schema update - 2024-02-01 13:22:35 (#2251) (@github-actions[bot])
* 0889f849208376a9346fc625b72873d8baf0847b: Auto-generated DB schema update - 2024-02-01 13:54:40 (#2253) (@github-actions[bot])
* 3d7c4bf2b80302a991d6f41729aa8ab6cd462d49: Auto-generated DB schema update - 2024-02-02 11:16:11 (#2264) (@github-actions[bot])
* 28e740b8b89e020f4b35f4c868303f968361ecb0: Auto-generated cli documentation update - 2024-01-31 10:34:06 (#2238) (@github-actions[bot])
* b2ebf6db30f035720efd2eef04664cf50caa016d: Auto-generated cli documentation update - 2024-01-31 13:44:42 (#2233) (@github-actions[bot])
* 3b144b6d4d8f18dd78487efe05ce9ddd7d16e4f3: Auto-generated cli documentation update - 2024-01-31 17:47:15 (#2236) (@github-actions[bot])
* 26db99570819d15f311bc5cbb6646c027de3d9d3: Bootstrap Permissions API in minder server and implement roles list (#2226) (@JAORMX)
* 51380d530849aaabaa697cdf5b73c15453eb9193: Change the database migration CI workflow to check for the expected DB version instead (#2250) (@jhrozek)
* 648f9c4b750e588c681c9a7cc6bcedd0789799d3: Correct permissions for accessing provider enroll (#2266) (@eleftherias)
* fc98fb525ef98facb5ee784dae29ef06c2ad63fd: Define Permissions API (#2217) (@JAORMX)
* e2726269b5c7e6af83c57be3d82863703b104707: Ensure roles in authz `AllRoles` are defined in FGA model (#2220) (@JAORMX)
* 156866b1b3dc529ca9e0b1e5947572ef9d1a0481: Fix CLI error output for `role grant list` (#2247) (@JAORMX)
* cb3f32824fa4aadc292a1ad1d8251b009b53999d: Fix Rule Evaluation Logic for Handling Multiple Rules of the Same Type - Part 1 (No Data Backfilling) (#2161) (@Vyom-Yadav)
* 1b2b4da8cacf5b14bd458f47d5e47d053054124d: Fix a typo in minder server in docker-compose.yaml (#2257) (@rdimitrov)
* 1a384d1fb647851532bd610b3bc3339514e224b7: Fully rely on OpenFGA to delete user permissions (#2207) (@JAORMX)
* dace86196c4f72490fa819dccde2748be480efa3: Get project information for users from OpenFGA (#2259) (@JAORMX)
* e4c3757247b0932326b2bddb695f650bc7d535b8: Implement CLI for permissions (#2229) (@JAORMX)
* 6f291c939fa82d0943275a11cfb667c037360368: Implement role assignment and removal APIs (#2227) (@JAORMX)
* fc379be4c11a1dfd59a2a2ac5b8e2e06e9f2fb74: Make authz tuple deletion idempotent (#2201) (@JAORMX)
* 251f60c0d0ed50b24215250c1ffaa60abe3ef46c: Make openfga call in authz middleware (#2246) (@eleftherias)
* 5f86d76f90e11b85d2cbc4be8872aab8f0b3a480: Move user id telemetry to token interceptor (#2240) (@eleftherias)
* 1aebcbe60382e299104b088d351fed081728051e: Print user subject on `auth` subcommands (#2221) (@JAORMX)
* 0e8388afda343931e4446d8c8777862014523a9f: Remove the signing keys DB table and API (#2252) (@jhrozek)
* e4b69e8900f6e6cd565c83b4cb838ed7b1333bbe: Remove unused code (#2202) (@jhrozek)
* 7089c30a6a47672d0ed5fdbe211f62b2634d246b: Remove unused roles database tables (#2249) (@JAORMX)
* a9c9a8be90d059c8f44eb37daf3bbc682832f265: Solidify authz Client interface (#22

## Changelog
* 3f486edda743122d89525b8490358637450b3b54: Actually run authz tests (#2165) (@JAORMX)
* 4416c7fca2114d357735e05e33af65169014025c: Add BusinessTelemetry to authenticated RPC calls (#2117) (@rdimitrov)
* 4827090ab1a84b2cfde99226c081406f2afb4900: Add a mindev command to verify containers (#2178) (@jhrozek)
* c3b618caf896a82fdccf10f7d1518784c5f17faf: Add authorization JSON model workflow (#2166) (@JAORMX)
* bcf29a5182774136956550a8306813afd1f8cd5a: Add middleware that populates project in context (#2139) (@eleftherias)
* 740b151c3417ff9e71e49d5b6252a12b773a0945: Add migration step for minder users to FGA tuples (#2194) (@JAORMX)
* 2740d9e97addb69ac2ca55cf6f3aaa630023cffa: Add new rego function called `file.walk` (#2181) (@JAORMX)
* c2f6c00befde74d6b6cba4041ee5bd412ff006f9: Add project relationships to FGA model (#2140) (@JAORMX)
* bc65bb5efe222355bd498a1e0915f874ce477d92: Add rego function to detect file types (#2180) (@JAORMX)
* daa6d2a72960757bf1bd24aeea753cc300609021: Auto-generated DB schema update - 2024-01-17 10:31:02 (#2136) (@github-actions[bot])
* 6588180ebcd8647c62fe454b3883ff9db439e9b1: Bump go.opentelemetry.io/otel/exporters/prometheus from 0.44.0 to 0.45.0 (#2150) (@eleftherias)
* e6733ebaf0051777aa1bcdf881c71b8e648e743a: Checkout back to the original branch to reset the filesystem preventing ingest cache from corrupting (#2160) (@Vyom-Yadav)
* 23d5ffb36a0afb62601495ec1f8a0507714298ee: Create initial configuration for authz and create store as part of migration (#2110) (@JAORMX)
* 1c2c8b52544daee268b05b7d04d6b8903a0cf4b4: Create new docs entry under "Using Minder" for using Minder with GHAS (#2185) (@meganbruce)
* 60cdd348e1e94372a9ed3387603997209d4e7bcf: Don't default to `minder` as default store ID is authz configuration (#2163) (@JAORMX)
* b8977a312fb8d17bd0e07a50586562e4fa4cebb6: Hook up authz tuple writing to Minder server (#2179) (@JAORMX)
* e88e4b286e4bc04c03b0332a77961f085e1aa77f: Implement Cursor-Based Pagination in ListRepositories Endpoint (#2097) (@Vyom-Yadav)
* 29a16ddfdf8aec9ebd3136513b7d15851d4bb18a: Implement Write and Delete tuple functions for OpenFGA Authz Client (#2177) (@JAORMX)
* b5c4b8a46db9da0167a7d243ad1ba4e4b2a55988: Initialize model on migration (#2168) (@JAORMX)
* 83e99b5cebcbf5f1cca76e1b618ba42701ac1296: Move OpenFGA interactions to authz package (#2164) (@JAORMX)
* 17ca636873fada2d271069870cc425e688abef1b: Move authorization logic to interceptor (#2183) (@eleftherias)
* e8aa243e46d70358ea7d070de4f30704b980e699: Remove EntityContext pointers and replace with struct references (#2142) (@evankanderson)
* e69ffd87d7f790c1d18526779a0c298876793856: Remove superadmin role (#2169) (@eleftherias)
* 6b83dce4ac3760608e2bc6c06fe1bd76edc06bce: Remove unused org owner enum (#2190) (@eleftherias)
* 40a25b75f58643c6f4b381099d9693100f1d5b5c: Revert "Update proto files for pagination (#2138)" (#2141) (@eleftherias)
* f1e31d961ce19cb3a90099e84ff14914ee6ac49b: Set up OpenFGA as authz client implementation for minder server (#2192) (@JAORMX)
* e052e1cd4179fc7440dac1824694b8b3a2b71221: Skeleton of Authz client interface to enable integration (#2175) (@JAORMX)
* 514c630b1f410b1a8660b514f90ac81908c1134f: Support GitHub attestation endpoint (#2195) (@jhrozek)
* 0c0afc61544a01e8a7202fec0ecd99bba74dfcef: Switch to offline Sigstore verification and set TimestampVerificationData to nil (#2131) (@rdimitrov)
* 2e5589885bcc82296f2f1b45bbfde913c5b521b9: Update authz configuration example (#2193) (@JAORMX)
* 0056320f7060d1fbc101dd735c24cdd0bc247b4b: Update proto files for pagination (#2138) (@eleftherias)
* 3757b4fcc36f978466e4fcd49692e8e8fcce8ab1: Update: telemetry field to be string (#2184) (@teodor-yanev)
* 9078fb127d3a5da3d5d15c0ccb3b2f15bfc4402d: build(deps): bump anchore/sbom-action from 0.15.3 to 0.15.4 (#2152) (@dependabot[bot])
* e69f4421a50f49498cc7a2daf9f0d91b90758160: build(deps): bump anchore/sbom-action from 0.15.4 to 0.15.5 (#2174) (@dependabot[bot])
* 7037180ca6e6975bc2ba68b1c53f6520226e8178:

## Changelog
* bf769140537d895d9915fb95f005d7661d82c789: Add overrides for enabling alerts and remediations when creating profiles (#2129) (@JAORMX)
* e370b08cd8472ac4b5dc9145862bab34a97a56af: Auto-generated cli documentation update - 2024-01-17 10:56:53 (#2135) (@github-actions[bot])
* 9624c202e7c95fde628438ed39d9ec5523c39487: Derive ruletype response from DB entry (#2130) (@eleftherias)
* 1554aa183a0986c524451cf6b5020bf16a305a90: build(deps): bump github.com/evanphx/json-patch/v5 from 5.8.0 to 5.8.1 (#2134) (@dependabot[bot])
* 2f04353d0fe9ddc46d30fe73a83d91ab62041777: build(deps): bump github.com/openfga/cli from 0.2.3 to 0.2.4 (#2133) (@dependabot[bot])
* b3485ccde65aec6cd05ef4186727701bdc6223d7: build(deps): bump golang from `6fbd2d3` to `5f5d61d` (#2132) (@dependabot[bot])

## Changelog
* 0c876ce20db1cb034dc79a55aca99dfcd6b47065: Allow retrieval of suggested patch version in `patchLocatorFormatter` interface (#2127) (@gregfurman)
* 783aae79cf502fd5548b92373be97dc0c4b5c5de: Bump sigstore-go version (#2106) (@rdimitrov)
* aa6a2170d7dd1f207cffb79a54893ffbf6ba9ee3: Change auth scope owner for user requests (#2126) (@eleftherias)
* ed1a065f18207650a0c0c826256122bad4ac2d62: Cleanup entity context (#2124) (@eleftherias)
* 2f7edcd2a4aaa63e65d29db876db65851e5f4056: Initial implementation of telemetry store watermill middleware (#2101) (@JAORMX)
* 665c7864129b135ccb8ff7d34468606b734f8e1b: Move EntityInfoWrapper to a separate package to avoid import loop (#2116) (@jhrozek)
* 5134a8c92d8cb7f444306a6a06bd3d7f0238bf8e: Remove double-wrapping of "provider error" (#2112) (@evankanderson)
* 1cf903af32737e0921e9f0629199f3941028472f: Remove duplicate top level context (#2107) (@eleftherias)
* 5b68464a0d3bfcf66bc04b1210c8e68085e4d005: Repository deletion should remove the associated webhook (#2109) (@Vyom-Yadav)
* c36bc8cf24a4148be4fc252cebf6f319e00a5d44: Rule evaluator business telemetry (#2104) (@jhrozek)
* e7a6e3c29d3fc8314d9f70ade6209b779877b76c: build(deps): bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.0 (#2123) (@dependabot[bot])
* 00fdcdf5ff19ca82d800b1b5883c1420fdc72507: build(deps): bump github.com/go-playground/validator/v10 from 10.16.0 to 10.17.0 (#2122) (@dependabot[bot])
* 137161191c43c0a1407c6c78f9e6809a1e33cd9c: build(deps): bump github.com/openfga/cli from 0.2.2 to 0.2.3 (#2115) (@dependabot[bot])
* 76cfc70aedb5a23695f5d9f41673112ad39afb8a: build(deps): bump golang from `ffbb0b8` to `6fbd2d3` (#2114) (@dependabot[bot])
* f034507a379d6d267d07685a289dd1809359f6e0: build(deps): bump golang.org/x/tools from 0.16.1 to 0.17.0 in /tools (#2113) (@dependabot[bot])

## Changelog
* bb3812c69585a99c11985e60ed7bcecee165a62f: Add CI job that makes sure that `go mod tidy` is run (#2032) (@JAORMX)
* 03c8091ac7af937730d6c5b94889d64b8ac8cc47: Add DLQ metrics (#2052) (@teodor-yanev)
* 6680334d43e0a33987a7b4ea092085f6c26155b3: Add MINDER_CONFIG env var for minder client, and docs on configuration (#2034) (@evankanderson)
* b6d6d40e54efca665a22015c787dd91539d159b9: Add OpenFGA deployment to docker-compose (#2093) (@JAORMX)
* 1c6ea747e75d7e86ffae42fd3d5a2483309f252f: Add TelemetryStore interface (#2059) (@evankanderson)
* 3cdf715afb19213ac386155d1ef875b435780555: Add dedicated test for to reproduce #2067 and another one to test cli (#2068) (@JAORMX)
* 9d06230a8792c06547889ffb57a3f5733ea6444f: Add docs for minder CLI configuration (#2031) (@rdimitrov)
* 71eb29573d3c19afd67ed3257b86eb28c05d30b4: Add flag for identity server base URL (#2033) (@eleftherias)
* 6799da279562b40112ccdb9313a09b9abb83a56c: Add instructions for updating webhook configuration for minder server (#2046) (@Vyom-Yadav)
* a966cd3a13b4637e6cdfa1b5d20e091e792c6ffa: Add metric for message processing latency (#1956) (@eleftherias)
* 139a5736dba42ce8c04329dd6c5b5f90705fc32e: Add the ability to enable/disable payload logging (default disabled) (#2083) (@evankanderson)
* c51784cb192d39528c5393061ac6494849bf5437: Create a config structure for the minder CLI (#2043) (@Vyom-Yadav)
* 3ea876ef723c255ddc690428a41e92d4bebc7c30: Don't execute actions when running `mindev ruletype test` (#2023) (@JAORMX)
* 163648d7c60acb8624b44046e8ecc20456852c72: Fix: Docs - Update quickstart.md (#2053) (@mdp)
* 89c901b984bd9f988f5c9d5f0ff10d54f0a74185: Handle null values in config file to prevent incorrect data retrieval from viper store (#2075) (@Vyom-Yadav)
* 216c05de83497e43fc15caf970315271581bd2ac: Implement a DLQ for Watermill messaging (#1994) (@teodor-yanev)
* c4fa636274412222936ac822f1e4ef97a1eac83e: Increase size of latency buckets, add tests for exported Eventer metrics. (#2091) (@evankanderson)
* a33393ddb016be37373d094f66f9fa1361160cdc: Make webhook tests more resilient (#2024) (@JAORMX)
* 38714cbafa291fc074394823d62a334cc0668949: No longer print usage once the minder command has started doing real work (#2072) (@evankanderson)
* 02c28294f38645ec8222fcb2e1ed1307025645a6: Pipe a CLI warning to stderr (#2079) (@jhrozek)
* 467dae6f1980cc479b2d1bd64f5407b5abbd2307: Print profiles in one table instead of several (#2030) (@JAORMX)
* dcba43ab7cad4a6670c25939337344282e55f235: Re-introduce variadic parameters to table API (#2022) (@JAORMX)
* c74aebff524eac388d00a3b50a0e04667f7351f0: Refactor DLQ eventer observability func (#2069) (@teodor-yanev)
* 80b865006a3c36aa3a650f8f83ad7db7127fac5c: Refactor eventer middleware (#2048) (@teodor-yanev)
* e599927a6ea18e57d8841dd5f33b3b27cab76195: Refactor vulncheck's Eval() to address high cyclomatic complexity (#2050) (@gregfurman)
* 85508f2bc077c54496d17ecc4caaa929599e5fd3: Remove POC related comments (#2025) (@JAORMX)
* d3dad13b3551aea95accf2bc2ddc972b9eeb1a0c: Remove context from user CRUD requests (#2082) (@eleftherias)
* 9b3f5769bf23d8f916d23249982ea8e5d774c0e3: Remove crypto provenance and key generation utils (#2028) (@rdimitrov)
* e3a2509a6ba7ccd7548afeee073d7bbafaabcc4e: Remove unused endpoint token for web (#2094) (@eleftherias)
* 708b5a0cf8224293f51f91c5bb8498aa1e766e30: Remove unused protos (#2080) (@eleftherias)
* 65fee552113796b7567ac2e9bd699acadad19c9a: Remove unused protos for web exchange (#2095) (@eleftherias)
* c338f482d63bfd7b505ea138da61535cbd781198: Show rule type details vertically in get call (#2029) (@JAORMX)
* ef345dd53942a85aa44b43139f3e9749cb706dbc: Split token validation and authorization middleware (#2063) (@eleftherias)
* 9001584dc273a042d88b105bba734a07f65e26ad: Switch to horizontal tables for profile settings (#2027) (@rdimitrov)
* 40d5c9fc6cdbb116f26487a6def0382598b55abd: Update CONTRIBUTING.md (#2055) (@dussab)
* 9ebca07a5748a8af0d021ad623caa0901cd009d0: Update README.md (#2084) (@gregfurm

## Changelog
* a8eb3a8fd255d5311e8e38467440dea70000d180: Add a flag to delete an account non-interactively (#2014) (@jhrozek)
* ace9a8e6109dbb59cc2897dc79647ec21f007f8c: Add newline to `No config file present, using default values.` (#2021) (@JAORMX)
* 57c848e0c6b2cf5a3ddf9396c403b9d1446c4ac9: Auto-generated cli documentation update - 2023-12-21 11:15:12 (#2003) (@github-actions[bot])
* c95089a2541c5103f395741e9b3d91aa3886ab39: Auto-generated cli documentation update - 2023-12-22 07:19:48 (#2016) (@github-actions[bot])
* 5d598bfdc2d6e5bbe98ca551f0326f6399b95dd0: Change the profile get/list output format (#2005) (@JAORMX)
* 7e06d3784ea4bbf1bea1365f3c6ca43892c5a1a7: Don't print informational message on stdout (#2011) (@jhrozek)
* 82a474563df5f7911b71337cf7e2f3f1c3147a11: Drop glossy table code (#2006) (@JAORMX)
* 74840ddba469f4ad763601fddbec15bf170a13ff: Print Details, not Description when a rpc error is caught (#2013) (@jhrozek)
* 08e8fbf01f0647e57b33e6b80664d412ff18dc40: Replace table layout strings with type (#2007) (@JAORMX)
* d2d8c196c9d60b75791425792599dc7f6a416f79: Revert "Use variadic parameters for the table interface (#2008)" (#2010) (@rdimitrov)
* ec8dff906ee59bd1ee5d63341bbf4c98e4a4e5db: Use variadic parameters for the table interface (#2008) (@JAORMX)
* f55b1d0120a1e1b9d353ccdacd5265fbb8ecedd5: build(deps): bump github.com/norwoodj/helm-docs from 1.11.3 to 1.12.0 in /tools (#2015) (@dependabot[bot])
* 23b7c2f0a31d0a924d165a57b1b07db10e79a866: build(deps): bump github/codeql-action from 3.22.11 to 3.22.12 (#2017) (@dependabot[bot])

## Changelog
* 40665793cca6f8fedba54567c2cf9811434922b0: Add CODEOWNERS to minder (#1941) (@JAORMX)
* 53fc587a38832974f11381fbdd4b12ad9e951659: Add `type` to diff ingester protobuf (#1993) (@JAORMX)
* 26cc49f8a2c0cf7a809d5b87d7ef0e785e755757: Add discord badge (#1958) (@lukehinds)
* 81561780250e83dd7fb85f43c2fe6f4b395b2242: Add get-by-name to artifact get (#1990) (@jhrozek)
* 1d80f3ee18af150534dc67dd60b38855fba20305: Add simplified FGA model and tests for same (#1790) (@evankanderson)
* 1ad8ae228dff0588517c6258555163831e185d67: Add table output to artifact get, make it the default (#1986) (@jhrozek)
* 5ce3201cc8d96dcf218962edc8a977f708d35d0b: Allow tools to depend on targets in the rest of the minder repo (#1959) (@evankanderson)
* 6913677d0dd777dc82ccc93dc5785e77fce41400: Artifact list: filter per repo (#1967) (@jhrozek)
* 961a3fd06dd8b79f43c01075b19367da864c606e: Auto-generated cli documentation update - 2023-12-19 15:14:07 (#1969) (@github-actions[bot])
* 724b34cd1da2a4f8b5c41d1f98d00dd34080e623: Auto-generated cli documentation update - 2023-12-19 17:19:23 (#1971) (@github-actions[bot])
* eacc684563242f0f389fb601f3ba60307862eea6: Auto-generated cli documentation update - 2023-12-20 13:56:42 (#1987) (@github-actions[bot])
* 7fd13e6975258adbccc60bce3c8d59900b6c5ebc: Default to v1 and profile if profile type or version are not set to fix old clients (#1954) (@jhrozek)
* c228baa2e708e1c19ec890edb2e3d5a39cdeefea: Deploy docs on merges to `main` (#2002) (@JAORMX)
* 888f7cf18dd13dd2493bc48745b6526871aba898: Don't attempt to reopen a PR after updating a branch if it already exists (#1944) (@jhrozek)
* 969ec046d3ee789b6514969ee3a7a320d0843f1b: Ensure output format is supported at artifact_get.go (#1988) (@rdimitrov)
* bcc498172a15dd9beda7fde6a30b247230499504: Fix "Get Hacking" page service name (#1966) (@teodor-yanev)
* e331a9cf82d6ea74bfbdefd77b122800d8556f18: Fix alert docs and update key value column width (#1973) (@rdimitrov)
* 06466786ca00b8aa400ada0086c3266d1632e0d9: Fix pull_request remediation from branch (#1976) (@jhrozek)
* 07fe14a85ff2697e3f06bc035ab080fcc7db7fd7: Fix screenshots for OAuth app creation (social and provider enrollment) (#1995) (@rdimitrov)
* 8b2d2f0c1ab7d0bb333a4a213b2238d10031c927: Fix styling for discord badge in Readme (#1975) (@rdimitrov)
* 9534e93e2633763d7cb15062fcb2516919cb10a2: Log successful event handling in watermill middleware (#1953) (@JAORMX)
* 4a4c38103d33c43475a57cd9c54dd69c5cc778a8: Minder CLI improvements - table interface, refactor use of flags, context, etc. (#1919) (@rdimitrov)
* 7b247178b697482589bf720450ca55043d685a76: Pass through error messages from AuthFromMD for debugging (#1960) (@evankanderson)
* d99bd4fd2a046484558a48828d2a6caaef4b3274: Quickstart updates - bump timeout and show all registered repos (#1977) (@rdimitrov)
* 92f0f91d50753f0e29ec80047ee4f689f4a84843: Remove config parsing from `mindev` (#1983) (@JAORMX)
* 6c04f7a50c15c8cb429d37d6aa47b7586e76afda: Remove invalid validation for projects in reconcilers (#1947) (@JAORMX)
* a5beae53001b4e78c6796cf8d20b66458a7845ed: Replace unpinned actions with pinned action (#1984) (@stacklokbot)
* a5ddea3b9ee4605d24ce537bb6d7235ae05b2090: Reset timeout for each file processed by `ruletype` `create`/`apply` (#1938) (@JAORMX)
* d268703fe8d5094fe615a5159499eb852c83302f: Security Process for Minder (#1955) (@lukehinds)
* efef02688527fd9cd417be460f93fa3fa4239ea0: Set documentation for context appropriately (#1939) (@JAORMX)
* d549a7336b5a27fca5ff4d73df256787b3943c1f: Surface git clone errors as failures if the branch doesn't exist (#2001) (@JAORMX)
* 91eb7ef8fb5fbf341b9c01e10c595db166feb801: Take into account frizbee configuration in repository (#1943) (@JAORMX)
* 3591b093235b32f5d1809e1e83f8de78da193d87: Update docs for profile status command (#1940) (@eleftherias)
* 8ddf5736af4e3296345850401aaf69ced951b93c: Upgrade frizbee to v0.1.12 (#1968) (@JAORMX)
* 61b49290dc716b7774c7254613a1714c9066d6de: Upgrade golangci-lint to v1.55.2 in CI (#

## Changelog
* de6e07b14ed2cb2d640185411bfa5316971b8016: Add CodeQL scanning to Minder (#1877) (@JAORMX)
* 3a0777d393c63e3c99616e97e15200f63f376805: Add `excludes` configuration for frizbee (#1931) (@JAORMX)
* 8d386127a859cbaf34d2712fa0527b9bb7549b55: Add back nonce period config value (#1896) (@eleftherias)
* 07efd560cb88cd5675e4956a73be6e96902dae0e: Add default branch as a repository field (#1908) (@JAORMX)
* 991ed424c8e69493c100cad80be9527dfacf87a6: Add protobuf for configuring the actions tag-to-sha replacement (#1926) (@JAORMX)
* 3f1d0c57f1f15426df4da27154f428d516077e89: Add provider to `FlushAll` call in aggregator (#1909) (@JAORMX)
* c99822f4b4ab05a78c522aea51244e67bc8880c8: Add validation for profile's type and version (#1930) (@JAORMX)
* c2043fcf8f7587a11136c22cb613799bfba2d916: Always return response from github_rest's Do() (#1890) (@jhrozek)
* d49f25438af32172666dc3b50ac4d0465e383734: Auto-generated DB schema update - 2023-12-13 11:17:23 (#1917) (@github-actions[bot])
* 4d00b56eecf50d1018a9bee34f150627ce00e266: Auto-generated cli documentation update - 2023-12-08 12:12:46 (#1871) (@github-actions[bot])
* 55218aa1839df61ecd64f8cdc1c55a7f1061f9b1: Auto-generated cli documentation update - 2023-12-08 14:46:39 (#1875) (@github-actions[bot])
* 867fdecff52d05c12c711fb740cef1548842a5b3: Auto-generated cli documentation update - 2023-12-08 14:48:06 (#1876) (@github-actions[bot])
* 99964b0024398c95899e1d9e3c6ddd439942dd84: Auto-generated helm documentation update - 2023-12-08 10:56:39 (#1867) (@github-actions[bot])
* f76d84806e7fbc36207ce33c3add7fee44fadf22: Auto-generated helm documentation update - 2023-12-08 11:18:54 (#1869) (@github-actions[bot])
* d912a4792895acd90038bc1805d5b8146c5266f7: Auto-generated helm documentation update - 2023-12-13 19:04:20 (#1921) (@github-actions[bot])
* c4e382a5357b0788362ec685923e369cb1233da8: Avoid over-large allocation in EncryptBytes (#1901) (@evankanderson)
* 4f6ca28f2d3a09b8f4a1ed167e3bcf1977743e8e: Create context between steps in quickstart (#1924) (@jhrozek)
* 160842ee54459c8be6974a77a3c3ddc81d66f975: Deprecate the "update" subcommands in favour of "apply" in minder CLI (#1870) (@rdimitrov)
* f6a56aecb2e5daf5a43716d6003250277822d8b8: Don't `ExitNicelyOnError` on the sub-commands (#1889) (@JAORMX)
* a03bc3ebea1a5f53603c486c1046cc5659c4406e: Fix GetProfileById auth perms (#1937) (@JAORMX)
* 813d08f9571471a489bf5eca3fdf6f70b572c654: Get default provider from those enrolled in project (#1859) (@eleftherias)
* 0cbbab7b891241fda4e19e6ab18efb6a2331271a: Make pull request remediations extendable, add action pinning remediation (#1808) (@jhrozek)
* 9187e53bfea8b6062a67f64dfef873c0c4262e27: Make status a sub-command of profile (#1873) (@eleftherias)
* 851ff7cf0ff8b70961d22cc46b3e9c38eedb132c: Parse GitHub Action exclusion from rule def (#1934) (@JAORMX)
* f7648bd44b804e028c955dff42016cd84eb20901: Point Trusty helm chart default to public instance (#1833) (@evankanderson)
* 7f0f1eb832b57d52b535fcb10c6d60c5324cd537: Re-enable proto compatibility checks (#1895) (@evankanderson)
* e5f2983e3965b96ccf052f9028d8d78945810c0c: Refactor-add context to grpc reqests v2 (#1911) (@teodor-yanev)
* 52b5da8807577f5d5b32193c2adc1f66a3fdd9bb: Remove GetDBURI and cached connection string (#1900) (@evankanderson)
* ed49b674621ec8f4a7d4022ded58202dd31dc1da: Remove cloud provider provided database password (#1897) (@JAORMX)
* 82474bd2f088222636cda24b8cbe89dd4fa722eb: Remove kubernetes dependency from `repo register` sub-command (#1907) (@JAORMX)
* fa0b98d7ca0bcc8893656f223a17b4095131ee69: Remove unused crypto config (#1893) (@eleftherias)
* 647fecc28dbacd10b8ffefc128d9055b80f88f2d: Replace cli utilities print functions for cobra's (#1891) (@JAORMX)
* adc7e3a9313d4039b0fa53fb8172a17b65fea0f1: Replace cosign with sigstore-go (#1806) (@rdimitrov)
* 36e7a4cdb4f1a6e2049cecef7f0c40b18ce0d1bc: Retire message Provider -- it is not used (#1898) (@evankanderson)
* eb196420298f4cc14ad0fad9bf87d3eab6f8c15d: Setup go in CodeQL 

## Changelog
* 408293b191845bb3313a1178684a5dcc698444dd: Add CLI wrapper that passes in a default context and GRPC client (#1857) (@JAORMX)
* 03ab2fe800b1cf12e9e1ea1834f4277d272db215: Add README to `mindev` command (#1819) (@JAORMX)
* 30641869f26f7153c9dbf33d18ac80f80f4f5813: Add a gauge to count the quickstart profiles (#1775) (@jhrozek)
* 26ce34db1f669a3210ba8f8c4358e337603cf5d1: Add subcommand to apply profiles (#1815) (@JAORMX)
* fbd97592c1785b431c0f3337aef7e4789db3e1af: Add username/password login, and better document setting up login in get-hacking (#1861) (@evankanderson)
* 00528a6364eb8bb22eb5128550f592ad8353c093: Adds a bit more clarity to the getting started guide (#1765) (@andresgalante)
* c5fc32aa40c687961b72e3c2b6d46a5041ada25e: Adds commit lint to the CI (#1784) (@andresgalante)
* 49094e57919c27a48c0e6a2102795f7abf3f538e: Auto-generated cli documentation update - 2023-11-29 11:14:55 (#1771) (@github-actions[bot])
* 6bf3e380ee79b3c911e589d64a58887324a431c0: Auto-generated cli documentation update - 2023-12-05 10:36:13 (#1821) (@github-actions[bot])
* 27609d9e30740b0ac2e5c113794c68add5476a87: Auto-generated cli documentation update - 2023-12-05 11:09:02 (#1818) (@github-actions[bot])
* 422a42ac20a270b4192282248957e62165405005: Auto-generated cli documentation update - 2023-12-05 12:40:25 (#1822) (@github-actions[bot])
* 1642ebcf17faf22b31c007023e550c4c85a249d8: Avoid attempting to lock deleted repos (#1834) (@evankanderson)
* 5a1ad8d741e899632a02e0bedcc06fe049006108: Avoid attempting to lock other deleted resources (#1835) (@evankanderson)
* cd432be8d128b9020c09ff7c0aba6e4d3ff8352a: Don't double-comment on PRs (#1786) (@jhrozek)
* 86171638d8e1189da30d38c96a7044400d506f86: Extend the EvalParams interface to store ingestion result (#1772) (@jhrozek)
* 70c2740cac2e9d27938ef69989e73535527d6bc1: Ignore /dist directory generated by goreleaser (#1785) (@dio)
* 094a8003a95f1e08977932e1fafe20385696b09e: Introduce `mindev ruletype lint` command (#1796) (@JAORMX)
* f6da7314bbd1e0708d41ef07f8932fac4969f33f: Make sure each call to NewRand is initialized with a unique seed (#1787) (@dio)
* a8e57a381c8031727271ee97f1fc96be431a1f0b: Make the pull-request remediator use git-go instead of plan GH API calls (#1773) (@jhrozek)
* 4aa5ec9744ad9f57eb6bc6fae9a1d98af0d26712: Modify `mindev` to have `ruletype` subcommand (#1794) (@JAORMX)
* e23af734b02abadad1d642e96e4500a584080820: Move common `PreRun` calls to cli wrapper (#1866) (@JAORMX)
* 89a40a7a52ac950a199dd130ba23ce2f2a3c9791: README: add `ko` as a dependency for minder-server (#1809) (@ethomson)
* e7a26e9e8d9fe2f8bdca94bd4b73d2f888e09481: Remove KeyService API from Minder (#1769) (@JAORMX)
* b5330433bf1b68b0efc7b4ef900508e78d90fdfc: Remove commit lint job (#1817) (@JAORMX)
* 49bfba4cd4be141d2b1f6158186950a175740f30: Remove eventer retry middleware and retrable error construct (#1842) (@JAORMX)
* 96adac789ea61b800cecab2fa6bfdf3cb78eeb62: Remove org field and make req ctx fields optional (#1831) (@teodor-yanev)
* c229ac032be2cfaa5f5894d549e3ae90069a2e12: Remove revoke token functions (#1770) (@JAORMX)
* 959011871b66519bf7b4908c4f8abd2c799b6e72: Rename Rule Type sub-commands to `ruletype` (#1816) (@JAORMX)
* b95e9932da951754626230439938108952db775f: Rename groups to projects in comments and logs (#1823) (@eleftherias)
* 30165756f33dccc6372b85b18746997b45714240: Run go mod tidy to prune the old go-github version from go.mod and go.sum (#1793) (@jhrozek)
* 44c4aa1bdcb78984dfc88a67d1ddb9b6b7363f58: Run tests in a silent mode (error only output) (#1830) (@rdimitrov)
* 06b7343db66578f206abb2c522f20dd0905dd8c9: Set ProjectID for entities created during FlushAll (#1838) (@evankanderson)
* c98205d8e9b88a96a862f8a03a9f3aad47269e59: Simplify authorization and cleanup unused methods (#1824) (@eleftherias)
* 58c561449de783870f146238db850ec7d3bc84e0: Simplify identity settings in config.yaml (#1820) (@eleftherias)
* a65d4c95ec14c6bc25890f697c47b2340e2d7e65: Switch events configuration reference to 

## Changelog
* c063e242a57755be04f4fd6c8329e976ac62d2be: Add PostgreSQL Messaging Pub/Sub Watermill (#1680) (@teodor-yanev)
* 6ddb67b57c5fe9ba1804834dd30f13aa7788da1f: Add a yes flag to skip prompts for CLI commands (#1730) (@hemakshis)
* 7d3b950e808083ae891d85d6e3791e5bdddc329d: Add an optional violation_format to rego rules (#1728) (@jhrozek)
* ea044f288d9284d6ef820a8f1111e141ffd18aed: Add option to set default selected choice for minder prompts (#1698) (@rdimitrov)
* 26ca90bd471ad90884bf969cdb5758485bfe3250: Allow regex matching of artifacts with artifact ingester (#1716) (@JAORMX)
* b5c3628f3388ecc40b93091719e66eb65d051ed6: Auto-generated cli documentation update - 2023-11-28 07:08:52 (#1731) (@github-actions[bot])
* e66243b89b5833e1ee39c83a07f05eb79a8952d7: Bump sqlc to 1.24.0 (#1720) (@jhrozek)
* 868d3bdb09f1482fa23c0297cd52cd215d57f5c3: Increase entropy of repo ID generation for tests (#1717) (@JAORMX)
* c09fad4b913544d90acb1db07eeb9cee6410f5cf: Remove leftover branch protection API (#1742) (@JAORMX)
* bb4e57d56357c887f59f6f374e74659e66c4ae10: Remove unused empty file (#1709) (@jhrozek)
* 3c679b6a273656affdb8e5733cbaa17cbe77c30f: Return only the raw evaluation error message without prefix (#1726) (@jhrozek)
* 12b3c2ad2d57b506981d42e0090ccd1f85011826: Tiny change to the quickstart guide (#1763) (@andresgalante)
* 50325ce68e42a216a944c2784973293a25b54f2b: Trigger documentation update only on release (#1724) (@eleftherias)
* 460d9dc095c7a9a5abc351f8a66b624a7644d928: Update README.md with quickstart screencast (#1697) (@rdimitrov)
* 06efc52564b85c638f9bcbc47909e6ee6cc75be0: Update the docs with the quickstart command (#1707) (@rdimitrov)
* c68c0f7c512a5d93bb3ff6edce12def2a65e1447: Update the stale action configuration (#1722) (@rdimitrov)
* b8de55071ba51d8284cc7e8dbe3c0fdae0e4e762: Use frizbee to add a new function ListGithubActions to the rego library (#1725) (@jhrozek)
* 8d02ef1ec3ccc97394643238f9e3d0e5457f6466: Use missingkey=error for text/template (#1682) (@jhrozek)
* 242bb26a3a58dda1e8e7e638675d6af37d12c6c4: build(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 (#1699) (@dependabot[bot])
* e6023c940693fb67663c1658b6c20ae3da85c2a3: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 (#1701) (@dependabot[bot])
* 24783ea089f60d7a869dfc9848e7e186dff0cf5a: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 (#1713) (@dependabot[bot])
* 61e68612df6750fb7ad0d2dab0ea8729b816f782: build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.3 to 1.3.4 (#1700) (@dependabot[bot])
* 1c57799e60c906c01656afeecd471d0bd2d010ae: build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 (#1734) (@dependabot[bot])
* 1ef32da674828a0bbbb408ea1a5b1fb30ab1582c: build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#1711) (@dependabot[bot])
* 2e179a77502ffe86318e951ef0f538fb7864e03c: build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.20.0 to 1.21.0 (#1702) (@dependabot[bot])
* f49a9de4b40d1d2fa49e393c9e31eb14b7ced8d3: build(deps): bump golang from `4521f9d` to `9baee0e` (#1714) (@dependabot[bot])
* 195a59a6a259e5b54d9c8dd525304c4e5e68c858: build(deps): bump golang from `57bf74a` to `4521f9d` (#1712) (@dependabot[bot])
* 2f1951d380ffc778ee040452a7bdfa40cea5c2a7: build(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#1733) (@dependabot[bot])
* 37da88474c7a51d1a3fa0fe6a735d63ca54d5671: build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 (#1736) (@dependabot[bot])
* d1fde5e2655f87125cff208b53bd3e69df4fbf41: build(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 in /tools (#1737) (@dependabot[bot])
* 790378164e27bd2766b9bfd73bc7d5a0865d757d: build(deps): bump mobx from 6.11.0 to 6.12.0 in /docs (#1738) (@dependabot[bot])
* 93e6027b125eba7d6b11509e172e543cb932c56a: run go mod tidy (#1723) (@jhrozek)

## Changelog
* 9a1ed0d9550dfa885f19e227ddc8de436446f620: Remove `combined.yml` from gitignore (#1690) (@JAORMX)
* 82bdf6996544b3942971c046819d953229ee8a90: Update quickstart command message layout (#1696) (@rdimitrov)
* 45c3e62c0343a78868dc7b4317fce409f0550af0: Upgrade otelgrpc to v0.46.1 (#1689) (@jhrozek)
* 2ddb89da2d01ad9f0191792ba17d1497bb6dbcaa: build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 (#1692) (@dependabot[bot])
* 37142745e818641eb98d822b224ee11e90eaf618: build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17 (#1691) (@dependabot[bot])
* 6237753f6f82cdff0267ca5d5589c5fd1f50686e: build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.10.0 to 1.11.0 (#1684) (@dependabot[bot])
* a05f9305c22958687961bc55b58843db13c7cafb: build(deps): bump github.com/zitadel/oidc/v2 from 2.11.0 to 2.12.0 (#1693) (@dependabot[bot])
* 0265abfd13874d36476c49f741205f90e2a14238: build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.46.0 to 0.46.1 (#1685) (@dependabot[bot])
* 8182651285e2f6a47d25578f0e5f5b3340090d8b: build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 (#1695) (@dependabot[bot])
* a773e0b17530a19ed57bfa0e5a0d7bcf004a42e5: build(deps): bump go.opentelemetry.io/otel/sdk from 1.20.0 to 1.21.0 (#1688) (@dependabot[bot])