release: v0.66.0 [main]

[aqua-bot]

🤖 I have created a release beep boop

0.66.0 (2025-09-02)

Features

• add timeout handling for cache database operations (#9307) (235c24e)
• misconf: added audit config attribute (#9249) (4d4a244)
• secret: implement streaming secret scanner with byte offset tracking (#9264) (5a5e097)
• terraform: use .terraform cache for remote modules in plan scanning (#9277) (298a994)

Bug Fixes

• conda: memory leak by adding closure method for package.json file (#9349) (03d039f)
• create temp file under composite fs dir (#9387) (ce22f54)
• cyclonedx: handle multiple license types (#9378) (46ab76a)
• fs: avoid shadowing errors in file.glob (#9286) (b51c789)
• image: use standardized HTTP client for ECR authentication (#9322) (84fbf86)
• misconf: ensure ignore rules respect subdirectory chart paths (#9324) (d3cd101)
• misconf: ensure module source is known (#9404) (81d9425)
• misconf: preserve original paths of remote submodules from .terraform (#9294) (1319d8d)
• misconf: use correct field log_bucket instead of target_bucket in gcp bucket (#9296) (04ad0c4)
• persistent flag option typo (#9374) (6e99dd3)
• plugin: don't remove plugins when updating index.yaml file (#9358) (5f067ac)
• python: impove package name normalization (#9290) (1473e88)
• repo: preserve RepoMetadata on FS cache hit (#9389) (4f2a44e)
• repo: sanitize git repo URL before inserting into report metadata (#9391) (1ac9b1f)
• sbom: add support for file component type of CycloneDX (#9372) (aa7cf43)
• suppress debug log for context cancellation errors (#9298) (2458d5e)

---

This PR was generated with Release Please. See documentation.

[knqyf263]

I'll approve this PR after #9391 and #9407 are merged.

[DmitriyLewen]

I want include #9378 into v0.66.0.
Can you take a look?

[simar7]

⛩️