v0.14.6

Bomly release v0.14.6

Included artifacts:

• Full builtin bomly archives for Linux, macOS, and Windows.
• Alternate bomly-lite archives for users who prefer external Syft and Grype binaries.
• Linux packages for Debian, RPM, Alpine, and Arch-compatible package managers.
• Homebrew, Scoop, and WinGet package-manager manifests or publishing pull requests.
• SHA256SUMS for release artifact verification.

Each archive includes LICENSE, NOTICE, and a licenses/ directory with third-party license texts. GitHub-native artifact attestations are planned for a future release.

What's Changed

• Publish releases automatically with native notes by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/175
• test(smoke): normalize volatile EPSS fields in golden comparison by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/176
• Revise the release lifecycle yanking workflow by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/178
• Add support section to README by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/179
• fix(python): deterministic pip/poetry scans + move smoke fixtures to bomly-dev by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/177

Full Changelog: https://github.com/bomly-dev/bomly-cli/compare/v0.14.5...v0.14.6