prep next release [ci skip]

Author: jclausen

.github/workflows/release.yml

@@ -135,7 +135,7 @@ jobs:
           DOCKER_IMAGE: ortussolutions/commandbox
           BUILD_IMAGE_TAG: ${{ matrix.BUILD_IMAGE_TAG }}
           COMMANDBOX_VERSION: 6.2.0
-          IMAGE_VERSION: 3.13.0
+          IMAGE_VERSION: 3.13.1
         run: |
           # Tag Builds
           if [[ $GITHUB_REF == refs/tags/* ]]; then

.github/workflows/scans.yml

@@ -3,6 +3,7 @@ name: Anchore-Grype Security Scans
 on:
   push:
     branches: ["main"]
+  workflow_dispatch:
   schedule:
     # Run this against the default branch every Monday at 5:30AM
     - cron: "30 5 * * 2"
@@ -51,16 +52,16 @@ jobs:
           load: true
           tags: ${{ env.DOCKER_IMAGE }}:${{ matrix.BUILD_IMAGE_TAG }}
 
-      - name: Scan image
-        uses: anchore/scan-action@v3
-        id: imagescan
+      - name: Scan generated packages
+        uses: anchore/scan-action@v6
+        id: securityscan
         with:
           image: ${{ env.DOCKER_IMAGE }}:${{ matrix.BUILD_IMAGE_TAG }}
-          acs-report-enable: "true"
-          fail-build: false
+          severity-cutoff: "high"
+          by-cve: "true"
 
       - name: Upload Anchore Report
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v4
         with:
-          sarif_file: ${{ steps.imagescan.outputs.sarif }}
-          category: ${{ matrix.BUILD_IMAGE_TAG }}
+          sarif_file: ${{ steps.securityscan.outputs.sarif }}
+          category: "BoxLang-Runtime-${{ github.env.BRANCH }}"

changelog.md

@@ -6,6 +6,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ----
+## [Unreleased]
+
+
 ## [6.2.0/3.13.0] - 2025-04-10
 
 ### Changed