v0.4.0

What's Changed

• docs: replace pipx/poetry references with uv by @ianpittwood in #399
• chore: switch posit-bakery from poetry to uv by @ianpittwood in #398
• Add PreToolUse hook to enforce git -C pattern by @bschwedler in #397
• Use self-hosted runner for merge jobs by @bschwedler in #401
• Add Claude playwright-cli and Superpowers to .gitignore by @ianpittwood in #403
• Add xz-utils to relevant test suites for Quarto 1.9 support by @ianpittwood in #413
• Add target build stage configuration by @ianpittwood in #396
• feat: generic plugin protocol with dgoss as builtin plugin by @ianpittwood in #406
• Fix --no-mark-latest clearing existing latest flags by @bschwedler in #411
• Fix error capture for multi-image build failures by @ianpittwood in #414
• Add bakery CLI commands for release automation by @bschwedler in #393
• Remove xdist_group("build") serialization from slow tests by @bschwedler in #415
• fix: use separate default tag patterns for matrix images by @ianpittwood in #418
• Add shared product-release workflow by @bschwedler in #419
• Add Dependabot config for GHA updates by @bschwedler in #420
• chore(deps): bump the actions group with 10 updates by @dependabot[bot] in #421
• Fix README update skipped on new editions by @bschwedler in #424
• Add uv usage guidance to CLAUDE.md by @ianpittwood in #429
• Add a dgoss env var for image platform by @ianpittwood in #416
• feat: add ORAS as a builtin plugin by @ianpittwood in #409
• Improve build layer caching by @bschwedler in #428
• Add Slack build notification action by @bschwedler in #432
• Scope clean workflows to match build version filters by @bschwedler in #438
• Add Bakery documentation site via GitHub Pages by @ianpittwood in #402
• feat: add hadolint plugin for Containerfile linting by @ianpittwood in #423
• Add cross-repository workflow DAG page by @bschwedler in #444
• Use directory globs in dependabot config by @bschwedler in #446
• chore(deps): bump the actions group across 3 directories with 4 updates by @dependabot[bot] in #447
• Update Slack notification emoji by @bschwedler in #448
• Add checksum verification to composite actions by @bschwedler in #441
• Fix script injection and add permissions to shared workflows by @bschwedler in #440
• Add fork-safe PR build workflow by @bschwedler in #442
• Remove bakery-pr job from ci.yml by @bschwedler in #449
• Pin actions to SHAs and add zizmor CI by @bschwedler in #443
• Re-add bakery-pr CI job using full repo path by @bschwedler in #451
• Disable uv cache in setup-bakery action by @ianpittwood in #465
• Update cross-repo workflow diagrams by @bschwedler in #464
• Add --dev-stream filter option for dev version builds by @ianpittwood in #457
• Fix --template-pattern filter in bakery update files by @ianpittwood in #454
• Use POSIT_PLATFORM secrets for app token by @bschwedler in #475
• Add WizCLI Bakery plugin for container image scanning by @ianpittwood in #439
• chore(deps): bump pygments from 2.19.2 to 2.20.0 in /posit-bakery by @dependabot[bot] in #405
• chore(deps): bump cryptography from 46.0.5 to 46.0.7 in /posit-bakery by @dependabot[bot] in #434
• Propagate template file mode to rendered output by @bschwedler in #469
• feat: add install_jupyterlab_workbench macros for Posit Workbench images by @ianpittwood in #474
• Add image-version and dev-stream inputs to build workflows by @bschwedler in #480
• chore(deps): bump the actions group across 2 directories with 4 updates by @dependabot[bot] in #481
• Warn on GHCR delete failures for >5000-downloads error by @ianpittwood in #491
• Add Workbench dailies release branch override by @ianpittwood in #456
• chore(deps-dev): bump pytest from 8.4.2 to 9.0.3 in /posit-bakery by @dependabot[bot] in #455
• Enforce pre-commit in CI by @bschwedler in #470
• Warn on "Package version not found" GHCR delete errors by @ianpittwood in #493
• chore(deps): bump mako from 1.3.10 to 1.3.11 in /posit-bakery by @dependabot[bot] in #471
• chore(deps): bump gitpython from 3.1.46 to 3.1.47 in /posit-bakery by @dependabot[bot] in #492
• Mount GitHub token secret for Quarto TinyTeX install by @ianpittwood in #487
• Add buildSecrets config for passing secrets to image builds by @ianpittwood in #486
• Add Ubuntu 26.04 support to bakery by @bschwedler in #494
• Disable caching for uv in setup-bakery by @ianpittwood in #497
• Strip v prefix from image-version input by @bschwedler in #496
• Skip lint on push-to-tag builds by @bschwedler in #500
• Remove wait-for-it.j2 macro by @bschwedler in #490
• Add stream-based floating tags for dev versions by @bschwedler in #504
• Defer dev version stream resolution to load time by @bschwedler in #503
• Install Quarto from the Posit Open apt repo via quarto.install() by @bschwedler in #479
• Fix setup-goss ref to use main by @bschwedler in #509
• Strip trailing whitespace from bakery.yaml writes by @bschwedler in #507
• Add ParsedVersion for image version parsing by @ianpittwood in #502
• Add quiet parameter to install_tinytex_command by @bschwedler in #508
• chore(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #515
• chore(deps): bump gitpython from 3.1.47 to 3.1.49 in /posit-bakery by @dependabot[bot] in #516
• chore(deps): bump mako from 1.3.11 to 1.3.12 in /posit-bakery by @dependabot[bot] in #517
• Implement latest tag for image matrix builds by @ianpittwood in #501
• Use segment-aware prefix matching for --image-version by @bschwedler in #510
• Suppress Docker build output when --quiet flag is set by @ianpittwood in #521
• Push image versions in deterministic order to fix Docker Hub display by @ianpittwood in #505
• chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 in the actions group across 1 directory by @dependabot[bot] in #523
• chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /posit-bakery by @dependabot[bot] in #520
• chore(deps): bump gitpython from 3.1.49 to 3.1.50 in /posit-bakery by @dependabot[bot] in #518
• Remove preview disclaimer from README by @bschwedler in #524
• Add cache input to bakery build workflows by @ianpittwood in #525
• Funnel new-issue traffic to central Discussions by @bschwedler in #528
• Slow dependabot actions group to monthly by @bschwedler in #529
• chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 in the actions group across 1 directory by @dependabot[bot] in #530
• Publish posit-bakery to PyPI via Trusted Publisher OIDC by @ianpittwood in #532
• Refresh CI.md against current reusable workflows by @bschwedler in #526
• Migrate cross-repo workflows to GitHub Markdown by @bschwedler in #531
• Add hex logo for the bakery CLI by @bschwedler in #534
• Polish posit-bakery for PyPI publishing by @ianpittwood in #533
• Fix double linux/ prefix in dgoss --image-platform by @bschwedler in #535

Full Changelog: v0.3.0...v0.4.0