• github-builder: reject duplicate Bake secret IDs by @crazy-max in #1349

Full Changelog: v0.102.0...v0.103.0

• github-builder: add Azure ACR and Chainguard registry identities by @crazy-max in #1335
• github-builder: support additional ECR account ID by @crazy-max in #1336
• github-builder: restore registry identity logs by @crazy-max in #1338
• build(deps): bump @actions/cache from 6.2.0 to 6.3.0 in #1342
• build(deps): bump brace-expansion from 1.1.18 to 1.1.21 in #1348
• build(deps): bump csv-parse from 7.0.2 to 7.0.3 in #1339
• build(deps): bump undici from 6.28.0 to 6.29.0 in #1341

Full Changelog: v0.101.0...v0.102.0

• docker: support endpoints when pulling images by @crazy-max in #1326
• buildx: add index annotation conversion helper by @crazy-max in #1332
• github-builder helpers by @crazy-max in #1333
• build(deps): bump js-yaml from 5.4.1 to 5.4.2 in #1327

Full Changelog: v0.100.0...v0.101.0

• docker: skip QEMU installation when Lima explicitly uses vz by @crazy-max in #1320
• use shared error helpers for buildx, cosign, and docker commands by @crazy-max in #1321

Full Changelog: v0.99.0...v0.100.0

• buildx: add a shared helper to extract error summaries by @crazy-max in #1312
• git: allow detached SHA checkouts without named refs by @crazy-max in #1313
• git: support custom working directories by @crazy-max in #1314
• git: add commit counting by @crazy-max in #1315
• util: preserve JSON values in PowerShell command parameters by @crazy-max in #1316
• docker(install): read daemon logs with elevated permissions during cleanup by @crazy-max in #1317
• docker(install): update lima images and automate updates by @crazy-max in #1318
• docker(install): run rootless as the current user without requiring sudo by @crazy-max in #1319

Full Changelog: v0.98.0...v0.99.0

• github: helper to suspend workflow commands while logging by @crazy-max in #1307
• build(deps): bump @humanfs/node from 0.16.7 to 0.16.8 in #1304

Full Changelog: v0.97.0...v0.98.0

• sigstore: use verifier SAN regex support by @crazy-max in #1292
• sigstore: retry TUF metadata fetches by @crazy-max in #1297

Full Changelog: v0.96.0...v0.97.0

• cache: avoid hosted tool cache restore races by @crazy-max in #1279
• docker: retry transient pull failures by @crazy-max in #1289
• build(deps): bump js-yaml from 5.3.0 to 5.4.1 in #1287
• build(deps): bump tar-stream from 3.2.0 to 3.2.1 in #1285

Full Changelog: v0.95.0...v0.96.0

• github: retry release metadata fetches by @crazy-max in #1276
• build(deps): bump @sigstore/verify from 4.1.0 to 4.1.2 in #1270
• build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in #1260
• build(deps): bump csv-parse from 7.0.1 to 7.0.2 in #1261
• build(deps): bump js-yaml from 5.2.1 to 5.3.0 in #1242 #1257 #1275
• build(deps): bump postcss from 8.5.14 to 8.5.23 in #1247
• build(deps): bump undici from 6.27.0 to 6.28.0 in #1266

Full Changelog: v0.94.0...v0.95.0

• sigstore: add Rekor v2 opt-in for cosign signing by @crazy-max in #1176
• build(deps): bump @actions/cache from 6.1.0 to 6.2.0 in #1226
• build(deps): bump brace-expansion from 1.1.13 to 1.1.16 in #1234

Full Changelog: v0.93.0...v0.94.0