Release 0.3.0

What's Changed

• chore(ci): update templates and config by @ruromero in #231
• chore(ci): update template types and labels by @ruromero in #232
• fix: problem with gradle and yarn version resolution by @ruromero in #229
• feat: support toggling of recommendations by @Strum355 in #233
• chore: use archive.apache.org instead of dlcdn.apache.org by @Strum355 in #234
• feat: support passing additional arguments to maven by @Strum355 in #238
• [Snyk] Upgrade node-fetch from 2.6.11 to 2.7.0 by @desmax74 in #237
• chore(deps): upgrade fast-xml-parser from 4.3.2 to 4.5.3 by @desmax74 in #235
• chore(ci): add multi-arch integration tests by @ruromero in #200
• fix: use & pass down opts for getCustom in imageAnalysis by @Strum355 in #244
• fix: properly handle go.mod files with no dependencies by @Strum355 in #245
• fix: allow ignored packages without version by @ruromero in #246
• fix: correctly fallback to podman if docker hostinfo returns nothing by @Strum355 in #247
• chore: include package manager in exhort API request headers by @Strum355 in #253
• feat: separate telemetry id header from auth token header by @Strum355 in #254
• feat!: set golang mvs true as default by @ruromero in #255
• chore: rename trustification references to guacsec by @Strum355 in #249
• chore: fix-up & tidy-up workflows and remove references to .npmrc registry changes by @Strum355 in #260
• chore: publish to npm only from 'trusted publisher' pipeline by @Strum355 in #261
• chore: publish public package with provenance by @ruromero in #264
• chore: trigger upon release.yml change by @ruromero in #265
• chore: use newer node & npm versions by @Strum355 in #267
• fix: pass --tag prerelease for prerelease publishing by @Strum355 in #268
• fix: use 'switch' workflow for trusted publishing to npm by @Strum355 in #269
• fix: remove explicit registry from npm publish workflows by @Strum355 in #270
• chore: verbose npm publish output for debugging by @Strum355 in #271
• chore: build and publish container image to ghcr.io by @ruromero in #263
• chore: trigger stage pipeline when publish workflows change by @Strum355 in #272
• chore: use node 24 in workflows by @Strum355 in #273
• chore: refactor workflows by @ruromero in #274
• fix: ci refs by @ruromero in #275
• fix: use short sha for ea versioning by @ruromero in #276
• chore: rename container script by @ruromero in #277
• feat: support image scan in cli by @ruromero in #278
• fix: simplify workflow triggers by @ruromero in #282
• chore: rename Exhort to Trustify DA by @ruromero in #280
• chore: remove local integration tests by @Strum355 in #285
• fix: validate for empty group ID/namespace by @Strum355 in #284
• chore: open PR on new release by @Strum355 in #295
• chore: open PR on new release (attempt 2) by @Strum355 in #297
• chore: open PR on new release (attempt 3) by @Strum355 in #298
• fix: remove erroneous extra " in release pipeline by @Strum355 in #299
• fix: include mandatory 'body' parameter to 'gh pr create' by @Strum355 in #300
• fix: proper newline commands in workflow by @Strum355 in #301
• fix: include pull-request write permission in workflow by @Strum355 in #302
• chore: update publish pipeline to be run via workflow_call from release pipeline by @Strum355 in #304
• fix: correctly trigger publish from release by @Strum355 in #306
• fix: set id-token write permissions in calling workflow by @Strum355 in #308
• fix: use workflow_run instead of workflow_call due to Trusted Publisher restrictions by @Strum355 in #310
• fix: use upload-artifact@v5 instead of v2 by @Strum355 in #311
• fix: match releasebranch artifact name with filename by @Strum355 in #313

New Contributors

• @desmax74 made their first contribution in #237

Full Changelog: v0.2.3...v0.3.0