kosli-cli 2.42.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

# New features
- `kosli snapshot s3`: added `--download-concurrency` and `--download-budget` flags to control parallel downloads and peak temporary disk usage when fingerprinting S3 buckets.
- `kosli attest sonar`: `--sonar-revision` can now be used together with `--pull-request`; when provided, the command fails if the pull request's latest analysis is not of the specified revision.
Improvements

kosli snapshot s3: S3 object keys are no longer used as local file names; each object is downloaded to a temporary file, hashed, and removed, so any valid S3 key can be fingerprinted on any OS.
kosli get flow and kosli list flows: the Visibility field is no longer shown in table output (it is a legacy field with no effect on access).
kosli list flows: fixed a panic when a flow has no tags.


What's Changed

ci(kosli): attest SBOMs with the sbom type by @AlexKantor87 in ci(kosli): attest SBOMs with the sbom type kosli-dev/cli#1186
feat(snapshot s3): fingerprint S3 buckets from a virtual tree by @mbevc1 in feat(snapshot s3): fingerprint S3 buckets from a virtual tree kosli-dev/cli#1180
fix(ci): wait for staging to settle before picking a server image by @AlexKantor87 in fix(ci): wait for staging to settle before picking a server image kosli-dev/cli#1190
feat(snapshot s3): download objects in parallel within a count and byte budget by @mbevc1 in feat(snapshot s3): download objects in parallel within a count and byte budget kosli-dev/cli#1191
feat: allow --sonar-revision with --pull-request to validate analysis commit by @mbevc1 in feat: allow --sonar-revision with --pull-request to validate analysis commit kosli-dev/cli#1193
chore(list-flows): drop the VISIBILITY column from the table output by @dangrondahl in chore(list-flows): drop the VISIBILITY column from the table output kosli-dev/cli#1187
chore(get-flow): drop the Visibility row from the table output by @dangrondahl in chore(get-flow): drop the Visibility row from the table output kosli-dev/cli#1188
fix(snapshot k8s): do not abort the snapshot when a Running pod has an empty imageID by @dangrondahl in fix(snapshot k8s): do not abort the snapshot when a Running pod has an empty imageID kosli-dev/cli#1195
test(fingerprint): cover OCI capture cleanliness against a fake registry by @mbevc1 in test(fingerprint): cover OCI capture cleanliness against a fake registry kosli-dev/cli#1197

Full Changelog: kosli-dev/cli@v2.41.0...v2.42.0

View the full release notes at https://github.com/kosli-dev/cli/releases/tag/v2.42.0.

---

[github-actions]

@botantony has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.