release: v0.65.0 [main]

[aqua-bot]

🤖 I have created a release beep boop

0.65.0 (2025-07-30)

Features

• add graceful shutdown with signal handling (#9242) (2c05882)
• add HTTP request/response tracing support (#9125) (aa5b32a)
• alma: add AlmaLinux 10 support (#9207) (861d51e)
• flag: add schema validation for --server flag (#9270) (ed4640e)
• image: add Docker context resolution (#9166) (99cd4e7)
• license: observe pkg types option in license scanner (#9091) (d44af8c)
• misconf: add private ip google access attribute to subnetwork (#9199) (263845c)
• misconf: added logging and versioning to the gcp storage bucket (#9226) (110f80e)
• repo: add git repository metadata to reports (#9252) (f4b2cf1)
• report: add CVSS vectors in sarif report (#9157) (60723e6)
• sbom: add SHA-512 hash support for CycloneDX SBOM (#9126) (12d6706)

Bug Fixes

• alma: parse epochs from rpmqa file (#9101) (82db2fc)
• also check filepath when removing duplicate packages (#9142) (4d10a81)
• aws: update amazon linux 2 EOL date (#9176) (0ecfed6)
• cli: Add more non-sensitive flags to telemetry (#9110) (7041a39)
• cli: ensure correct command is picked by telemetry (#9260) (b4ad00f)
• cli: panic: attempt to get os.Args[1] when len(os.Args) < 2 (#9206) (adfa879)
• license: add missed GFDL-NIV-1.1 and GFDL-NIV-1.2 into Trivy mapping (#9116) (a692f29)
• license: handle WITH operator for LaxSplitLicenses (#9232) (b4193d0)
• migrate from *.list to *.md5sums files for dpkg (#9131) (f224de3)
• misconf: correctly adapt azure storage account (#9138) (51aa022)
• misconf: correctly parse empty port ranges in google_compute_firewall (#9237) (77bab7b)
• misconf: fix log bucket in schema (#9235) (7ebc129)
• misconf: skip rewriting expr if attr is nil (#9113) (42ccd3d)
• nodejs: don't use prerelease logic for compare npm constraints (#9208) (fe96436)
• prevent graceful shutdown message on normal exit (#9244) (6095984)
• rootio: check full version to detect root.io packages (#9117) (c2ddd44)
• rootio: fix severity selection (#9181) (6fafbeb)
• sbom: merge in-graph and out-of-graph OS packages in scan results (#9194) (aa944cc)
• sbom: use correct field for licenses in CycloneDX reports (#9057) (143da88)
• secret: add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253) (54832a7)
• secret: fix line numbers for multiple-line secrets (#9104) (e579746)
• server: add HTTP transport setup to server mode (#9217) (1163b04)
• supporting .egg-info/METADATA in python.Packaging analyzer (#9151) (e306e2d)
• terraform: for_each on a map returns a resource for every key (#9156) (153318f)

---

This PR was generated with Release Please. See documentation.

[DmitriyLewen]