Release v0.7.0

What's Changed

• Find shbangs to generate depends by @smoser in #1110
• build(deps): bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @dependabot in #1135
• build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #1137
• build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 by @dependabot in #1138
• build(deps): bump github.com/docker/cli from 26.0.0+incompatible to 26.0.1+incompatible by @dependabot in #1140
• build(deps): bump github.com/docker/docker from 26.0.0+incompatible to 26.0.1+incompatible by @dependabot in #1139
• presubmit: remove gdk-pixbuf by @imjasonh in #1143
• Revert "presubmit: remove gdk-pixbuf" by @imjasonh in #1147
• verify SPDX SBOMs using spdx-tools-java by @imjasonh in #1146
• Fix sca detection case for env with multiple arguments. by @dlorenc in #1148
• Update shbang collection to ignore 'python' and support simple 'env -S'. by @smoser in #1159
• ensure shbang check only checks valid shbangs by @joshrwolf in #1160
• build(deps): bump github.com/docker/cli from 26.0.1+incompatible to 26.0.2+incompatible by @dependabot in #1157
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #1149
• build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #1151
• build(deps): bump google.golang.org/api from 0.172.0 to 0.176.1 by @dependabot in #1167
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1150
• build(deps): bump github.com/chainguard-dev/yam from 0.0.3 to 0.0.4 by @dependabot in #1154
• build(deps): bump github.com/docker/docker from 26.0.1+incompatible to 26.1.0+incompatible by @dependabot in #1170
• build(deps): bump actions/download-artifact from 4.1.5 to 4.1.6 by @dependabot in #1168
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #1169
• build(deps): bump github.com/docker/cli from 26.0.2+incompatible to 26.1.0+incompatible by @dependabot in #1171
• config: allow scriplets in subpackages with range replacements by @xnox in #1165
• Drop -release from pc versions by @jonjohnsonjr in #1173
• fix(cargo): Install all built binaries if output isn't defined by @EyeCantCU in #1174
• sbom: set supplier in addition to originator by @imjasonh in #1184
• Add melange scan by @jonjohnsonjr in #1175
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1176
• build(deps): bump actions/download-artifact from 4.1.6 to 4.1.7 by @dependabot in #1177
• build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in #1178
• build(deps): bump dagger.io/dagger from 0.11.0 to 0.11.2 by @dependabot in #1183
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.25.0 to 1.26.0 by @dependabot in #1182
• build(deps): bump github.com/chainguard-dev/yam from 0.0.4 to 0.0.5 by @dependabot in #1181
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.25.0 to 1.26.0 by @dependabot in #1179
• Bump go-apk by @jonjohnsonjr in #1185
• add global --gcplog flag to emit GCP-compatible JSON logs by @imjasonh in #1186
• pipelines/go: add back symbols tables by @xnox in #1142
• Only consider that are in a PATH dir from generateCmdProviders by @smoser in #1164
• Allow symlinks to provide cmd: by @smoser in #1188
• build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 by @dependabot in #1197
• build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #1196
• build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #1195
• build(deps): bump google.golang.org/api from 0.176.1 to 0.177.0 by @dependabot in #1194
• build(deps): bump github.com/docker/cli from 26.1.0+incompatible to 26.1.1+incompatible by @dependabot in #1191
• build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @dependabot in #1192
• build(deps): bump github.com/chainguard-dev/yam from 0.0.5 to 0.0.6 by @dependabot in #1189
• build(deps): bump github.com/docker/docker from 26.1.0+incompatible to 26.1.2+incompatible by @dependabot in #1199
• build(deps): bump golang.org/x/text from 0.14.0 to 0.15.0 by @dependabot in #1193
• Extract melange sign to a library by @tcnghia in #1198
• Revert "Allow symlinks to provide cmd:" by @joshrwolf in #1200
• Bump apko by @jonjohnsonjr in #1201
• Make unit tests faster by @jonjohnsonjr in #1202
• Add buildmode to go/build by @jonjohnsonjr in #1210

Full Changelog: v0.6.11...v0.7.0