chore: release main

[infra-releases]

🤖 I have created a release beep boop

fossa: 1.0.13

1.0.13 (2026-07-18)

What's Changed

• fix: fall back to default branch when base-ref has no snapshots (stacked PR support) by @szpraat in fix: fall back to default branch when base-ref has no snapshots (stacked PR support) #739
• fix(assert-camunda-git-emails): allow noreply@anthropic.com in email allowlist by @claude[bot] in fix(assert-camunda-git-emails): allow noreply@anthropic.com in email allowlist #742
• fix: key pre-existing dep filter on base-sha, not latest snapshot by @szpraat in fix: key pre-existing dep filter on base-sha, not latest snapshot #741
• chore(deps): update quay.io/argoproj/argocd docker tag to v3.4.5 by @renovate[bot] in chore(deps): update quay.io/argoproj/argocd docker tag to v3.4.5 #745
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.257.7 by @renovate[bot] in chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.257.7 #746
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.258.0 by @renovate[bot] in chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.258.0 #747
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.259.0 by @renovate[bot] in chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.259.0 #748
• chore: release main by @infra-releases[bot] in chore: release main #743
• feat: fail closed on unverified head snapshot in dependency-vuln-check by @szpraat in feat: fail closed on unverified head snapshot in dependency-vuln-check #749
• fix: detect runner aborts from raw job logs instead of annotations by @cmur2 in fix: detect runner aborts from raw job logs instead of annotations #744
• chore: release main by @infra-releases[bot] in chore: release main #750
• feat: self-mint app tokens and classify failures in ensure-pr-passes-merge-queue by @bkenez in feat: self-mint app tokens and classify failures in ensure-pr-passes-merge-queue #754
• chore(deps): update dependency fossas/fossa-cli to v3.17.13 by @renovate[bot] in chore(deps): update dependency fossas/fossa-cli to v3.17.13 #755
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.269.1 by @renovate[bot] in chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.269.1 #756
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.270.0 by @renovate[bot] in chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43.270.0 #760

New Contributors

• @claude[bot] made their first contribution in fix(assert-camunda-git-emails): allow noreply@anthropic.com in email allowlist #742

Full Changelog: fossa-1.0.12...fossa-1.0.13

---

This PR was generated with Release Please. See documentation.