Merge pull request #138 from concourse/wolfi
Update image to support multi-arch image

Merge pull request #136 from concourse/dependabot/go_modules/golang.o…
…rg/x/net-0.36.0
Bump golang.org/x/net from 0.35.0 to 0.36.0

Merge pull request #132 from concourse/update_dependency
Bumping dependencies to address CVEs

fix redirect test
The http.Client got smarter. The http client only removes the
Authorization header if the base domain is different. When we start
these two local http test servers, they both have the same "base
domain", which is `127.0.0.1`, so the http client never strips the
Authorization header. To work around this I changed the external server
URL to be `localhost`.
So setup looked like this:
https://127.0.0.1:4455 -> redirect to https://127.0.0.1:5566
Now the redirect looks like this:
https://127.0.0.1:4455 -> redirect to https://localhost:5566
Signed-off-by: Taylor Silva <dev@taydev.net>

dep bumping for CVE
golang -> 1.17
golang.org/x/crypto -> 0.9.0
Co-authored-by: Mark Stokan <stokanm@vmware.com>
Signed-off-by: Rui Yang <ruiya@vmware.com>

Merge pull request #119 from coro/generate-release-notes
Allow release notes for a GitHub release to be autogenerated

Merge pull request #116 from areller/skip-not-uploaded-assets
skip not uploaded assets

bump golang crypto lib
Signed-off-by: Rui Yang <ruiya@vmware.com>

Merge pull request #115 from concourse/in-timestamp
Create `timestamp` file on `in` operations

backporting github graphql updates
we need the changes in #107 for 6.7 branch as well
Signed-off-by: Rui Yang <ruiya@vmware.com>