• buildx: add a shared helper to extract error summaries by @crazy-max in #1312
• git: allow detached SHA checkouts without named refs by @crazy-max in #1313
• git: support custom working directories by @crazy-max in #1314
• git: add commit counting by @crazy-max in #1315
• util: preserve JSON values in PowerShell command parameters by @crazy-max in #1316
• docker(install): read daemon logs with elevated permissions during cleanup by @crazy-max in #1317
• docker(install): update lima images and automate updates by @crazy-max in #1318
• docker(install): run rootless as the current user without requiring sudo by @crazy-max in #1319

Full Changelog: v0.98.0...v0.99.0

• github: helper to suspend workflow commands while logging by @crazy-max in #1307
• build(deps): bump @humanfs/node from 0.16.7 to 0.16.8 in #1304

Full Changelog: v0.97.0...v0.98.0

• sigstore: use verifier SAN regex support by @crazy-max in #1292
• sigstore: retry TUF metadata fetches by @crazy-max in #1297

Full Changelog: v0.96.0...v0.97.0

• cache: avoid hosted tool cache restore races by @crazy-max in #1279
• docker: retry transient pull failures by @crazy-max in #1289
• build(deps): bump js-yaml from 5.3.0 to 5.4.1 in #1287
• build(deps): bump tar-stream from 3.2.0 to 3.2.1 in #1285

Full Changelog: v0.95.0...v0.96.0

• github: retry release metadata fetches by @crazy-max in #1276
• build(deps): bump @sigstore/verify from 4.1.0 to 4.1.2 in #1270
• build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in #1260
• build(deps): bump csv-parse from 7.0.1 to 7.0.2 in #1261
• build(deps): bump js-yaml from 5.2.1 to 5.3.0 in #1242 #1257 #1275
• build(deps): bump postcss from 8.5.14 to 8.5.23 in #1247
• build(deps): bump undici from 6.27.0 to 6.28.0 in #1266

Full Changelog: v0.94.0...v0.95.0

• sigstore: add Rekor v2 opt-in for cosign signing by @crazy-max in #1176
• build(deps): bump @actions/cache from 6.1.0 to 6.2.0 in #1226
• build(deps): bump brace-expansion from 1.1.13 to 1.1.16 in #1234

Full Changelog: v0.93.0...v0.94.0

• docker(install): update undock to 0.14.0 by @crazy-max in #1224
• build(deps): bump csv-parse from 7.0.0 to 7.0.1 in #1214
• build(deps): bump js-yaml from 5.2.0 to 5.2.1 in #1215

Full Changelog: v0.92.0...v0.93.0

• sigstore: use cosign for provenance blob signing by @crazy-max in #1208 #1209
• git: correctly extract tag name when commit has multiple decorations by @lucacome @crazy-max in #1188
• build(deps): bump @actions/cache from 6.0.1 to 6.1.0 in #1195
• build(deps): bump @sigstore/bundle from 4.0.0 to 5.0.0 in #1158
• build(deps): bump @sigstore/core from 3.2.0 to 3.2.1 in #1200
• build(deps): bump @sigstore/tuf from 4.0.2 to 5.0.0 in #1160
• build(deps): bump @sigstore/verify from 3.1.1 to 4.1.0 in #1159
• build(deps): bump csv-parse from 6.2.1 to 7.0.0 in #1186
• build(deps): bump js-yaml from 4.1.1 to 5.2.0 in #1154 #1198 #1199
• build(deps): bump minimatch from 3.1.2 to 3.1.5 in #1205
• build(deps): bump semver from 7.8.1 to 7.8.5 in #1168 #1194
• build(deps): bump tmp from 0.2.6 to 0.2.7 in #1153
• build(deps): bump undici from 6.24.1 to 6.27.0 in #1196
• build(deps): bump vite from 7.3.2 to 7.3.6 in #1201

Full Changelog: v0.91.0...v0.92.0

• publish github-builder-runtime package by @crazy-max in #1145
• build(deps): bump @actions/cache from 6.0.0 to 6.0.1 in #1138
• build(deps): bump @sigstore/verify from 3.1.0 to 3.1.1 in #1139
• build(deps): bump @tootallnate/once from 2.0.0 to 2.0.1 in #1137
• build(deps): bump semver from 7.8.0 to 7.8.1 in #1140
• build(deps): bump tmp from 0.2.5 to 0.2.6 in #1148

Full Changelog: v0.90.0...v0.91.0

• buildx(build): pin implicit git contexts and support opt-in fetch-by-commit by @crazy-max in #1085
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in #1110
• build(deps): bump ip-address from 10.0.1 to 10.2.0 in #1107
• build(deps): bump postcss from 8.5.6 to 8.5.14 in #1106
• build(deps): bump semver from 7.7.4 to 7.8.0 in #1111
• build(deps): bump tar-stream from 3.1.7 to 3.2.0 in #1104

Full Changelog: v0.89.1...v0.90.0