Release 0.11.0 · containerbuildsystem/cachi2

Improvements

Switch the container base image to UBI-9 (https://catalog.redhat.com/software/base-images)
Introduce a new merge-sboms CLI command
- this allows merging multiple SBOMs which we generated ourselves
Remove the utils/merge_syft_sbom.py script
- the utility script was moved to a different project where it makes sense to host it
- konflux-ci/build-tasks-dockerfiles#154
Replace the pyreflink dependency with a vendored implementation of fast in-kernel copying
- taken from the official stdlib proposal: https://github.com/python/cpython/pull/93152/files
Bump the max Go supported version 1.22 -> 1.23
- note we're still lacking support for vendored workspaces (introduced in Go 1.22)
Deprecate global --gomod-vendor and --gomod-vendor-check CLI flags
- users no longer need to explicitly instruct cachi2 to consider the vendoring use case with regards to dependency fetching
- note that if a repository has vendored content cachi2 will check its integrity, but will no longer perform the vendoring as part of the dependency prefetch as was the case with the --gomod-vendor-check flag
- note the flags will be dropped in a future release