release: v0.64.0 [main]

[aqua-bot]

🤖 I have created a release beep boop

0.64.0 (2025-06-30)

Features

• cli: add version constraints to annoucements (#9023) (19efa9f)
• java: dereference all maven settings.xml env placeholders (#9024) (5aade69)
• misconf: add OpenTofu file extension support (#8747) (57801d0)
• misconf: normalize CreatedBy for buildah and legacy docker builder (#8953) (65e155f)
• redhat: Add EOL date for RHEL 10. (#8910) (48258a7)
• reject unsupported artifact types in remote image retrieval (#9052) (1e1e1b5)
• sbom: add manufacturer field to CycloneDX tools metadata (#9019) (41d0f94)
• terraform: add partial evaluation for policy templates (#8967) (a9f7dcd)
• ubuntu: add end of life date for Ubuntu 25.04 (#9077) (367564a)
• ubuntu: add eol date for 20.04-ESM (#8981) (87118a0)
• vuln: add Root.io support for container image scanning (#9073) (3a0ec0f)

Bug Fixes

• Add missing version check flags (#8951) (ef5f8de)
• cli: add some values to the telemetry call (#9056) (fd2bc91)
• Correctly check for semver versions for trivy version check (#8948) (b813527)
• don't show corrupted trivy-db warning for first run (#8991) (4ed78e3)
• misconf: .Config.User always takes precedence over USER in .History (#9050) (371b8cc)
• misconf: correct Azure value-to-time conversion in AsTimeValue (#9015) (40d017b)
• misconf: move disabled checks filtering after analyzer scan (#9002) (a58c36d)
• misconf: reduce log noise on incompatible check (#9029) (99c5151)
• nodejs: correctly parse packages array of bun.lock file (#8998) (875ec3a)
• report: don't panic when report contains vulns, but doesn't contain packages for table format (#8549) (87fda76)
• sbom: remove unnecessary OS detection check in SBOM decoding (#9034) (198789a)

---

This PR was generated with Release Please. See documentation.

[knqyf263]

LGTM 🎉

video-1751264536484.mp4

[DmitriyLewen]