v0.57.0

What's Changed

Enhancements

• build(deps): Bump github.com/terraform-linters/tflint-ruleset-terraform from 0.11.0 to 0.12.0 by @dependabot in #2278

Bug Fixes

• plugin: Skip keyless verification for private third-party plugins by @ricardo-kh in #2292
  • This bug was supposed to have been fixed in v0.55.1, but was not fully fixed so has been fixed again.

Chores

• build(deps): Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go-x group by @dependabot in #2277
• build(deps): Bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 by @dependabot in #2276
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #2281
• build(deps): Bump the go-x group with 3 updates by @dependabot in #2282
• build(deps): Bump golang.org/x/net from 0.38.0 to 0.39.0 in the go-x group by @dependabot in #2285
• build(deps): Bump github.com/sigstore/sigstore-go from 0.7.0 to 0.7.2 by @dependabot in #2286
• build(deps): Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot in #2288
• Potential fix for code scanning alert no. 12: Incomplete regular expression for hostnames by @wata727 in #2289
• Potential fix for code scanning alert no. 11: Incomplete regular expression for hostnames by @wata727 in #2290
• Set explicit workflow permissions by @wata727 in #2291
• build(deps): Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in #2294
• build(deps): Bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot in #2293
• build(deps): Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in #2295

New Contributors

• @ricardo-kh made their first contribution in #2292

Full Changelog: v0.56.0...v0.57.0