chore(main): release 0.21.1

[ccf-release-bot]

🤖 I have created a release beep boop

0.21.1 (2026-10-14)

Bug Fixes

• deps: update module github.com/moby/go-archive to v0.3.0 [security] (#492) (e71ddf2)
• deps: update module golang.org/x/crypto to v0.56.0 [security] (#494) (9b8abe7)
• deps: update module golang.org/x/mod to v0.40.0 [security] (#495) (f968a6b)
• deps: update module golang.org/x/net to v0.60.0 [security] (#501) (bdd97c6)
• worker: lock the risk while resolving its evidence links (#490) (b9958ae)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: e9bb9882-ee11-4a0b-978a-aa1cf5b5d392

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ccf-release-bot]

🤖 Created releases:

• v0.21.1

🌻