⚙️ Changes

• Promote RustSbom to IExperimentalDetector by @nathanhammond (#1440)
• add uv.lock support by @cataggar (#1425)
• Updates to the VCPKG detector to use manifest-info.json for resolving vcpkg.json location. by @jdotson166 (#1436)

⚙️ Changes

• User/aamaini/go sort requests by @AMaini503 (#1432)
• Improve docs on default, fallback strategy by @AMaini503 (#1430)

⚙️ Changes

• Fix Go detector Unit Tests by @AMaini503 (#1429)
• Replace existing Go detector with Go117 detector by @AMaini503 (#1426)

⚙️ Changes

• Remove test trace by @AMaini503 (#1422)

⚙️ Changes

• Ignore local package references when parsing go.mod at Go117 by @AMaini503 (#1421)

🧰 Maintenance

• Bump actions/upload-artifact from 4.4.3 to 4.6.2 by @dependabot (#1395)
• Bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot (#1415)
• Bump codecov/codecov-action from 4.6.0 to 5.4.3 by @dependabot (#1406)
• Bump github/codeql-action from 3.28.8 to 3.28.18 by @dependabot (#1407)

⚙️ Changes

• Go117 experimental detector changes by @AMaini503 (#1409)

⚙️ Changes

• Initial implementation of cargo-sbom detector by @arlosi (#1387)

⚙️ Changes

• Improve detection graph traversal for large result sets by @pauld-msft (#1401)
• Remove sync issues workflow by @JamieMagee (#1399)
• don't throw if engines property is a string array by @brettfo (#1400)

⚙️ Changes

• Some optimizations for component detection by @narasamdya (#1384)
• Allow for null resolved version in package-lock.json by @JamieMagee (#1397)

⚙️ Changes

• Fix integration tests with DotNet component type by @grvillic (#1396)