2 Commits

Include renames

Author	SHA1	Message	Date
Sahil BansalandGitHub	d9240eed82	fix(container): cut image vulnerabilities with x dep bumps and base image refresh (#394) ... * fix(deps): update golang.org/x modules to latest on the Go 1.25 line Clears the x/crypto, x/net, x/sys and x/text vulnerability findings reported against the pmg binary by image scanners. Deliberately kept back: the go directive stays 1.25.1 because the Go 1.26 move is blocked on goproxy URL parsing (see #390), and grpc stays pinned at v1.81.0 due to the trailers regression with v1.82.x. * fix(container): move runtime base to debian 13 and refresh builder pin The bullseye runtime base and the stale golang:1.25-bookworm digest (go1.25.5) accounted for most of the vulnerability findings in the published image. debian:13-slim is current stable and the refreshed golang digest carries go1.25.12, covering every flagged stdlib CVE.	2026-07-27 17:42:51 +05:30
Arunanshu BiswasandGitHub	1c25395d74	feat: migrate pmg to nx based release automation (#293) ... * feat: Migrate release system to Nx with platform-specific npm packages * add go.work.sum * fix: CI deprecations, stale action pins, and signal propagation * fix: update e2e workflows to pnpm 11 and latest action SHAs * fix: update pmg-e2e.yml to Node 24 with Go and pnpm caching * fix: resolve E2E failures, remove goreleaser-test, update action SHAs * fix: restore goreleaser-test (required check) * fix: escape pnpm workspace detection for yarn/pnpx tests, update action versions	2026-05-28 17:22:11 +05:30