SCS: Merge pull request #10549 from harness/SSCA-3897

SCS: Update Release Notes - May

Author: lavakush07

release-notes/software-supply-chain-assurance.md

@@ -19,6 +19,22 @@ These release notes describe recent changes to Harness Supply Chain Security.
 
 
 
+## June 2025
+
+### Version: 1.33.0 , Plugin Version: 0.39.0
+
+#### New features and enhancements
+
+- Registry domain URLs for artifacts stored in Docker registries, including GCR, ECR, ACR, JFrog Self-Hosted (On-Prem), and Kubernetes registries (Self-Hosted), no longer need to be specified, as the domain is already included in the connector URL. In all SCS steps, only the image name is required.
+
+- Removed delegate selectors as a mandatory field from the API configuration for setting up the VM infra in [RSPM pipeline infra](https://apidocs.harness.io/tag/PipelineInfraConfig) configuration.([ZD-81509](https://harnesssupport.zendesk.com/agent/tickets/81509))
+
+
+#### Fixed Issues
+
+- Fixed an issue where dependency searches across projects were incomplete, making it hard to assess zero-day attacks.([ZD-84422](https://harnesssupport.zendesk.com/agent/tickets/84422))
+
+
 ## May 2025
 
 ### Version: 1.31.0
@@ -49,7 +65,7 @@ These release notes describe recent changes to Harness Supply Chain Security.
 
 - Artifact signing and verification steps now support non-container artifacts (such as Helm charts, JARs, WARs, and manifest files) enhancing artifact integrity and security before deployment.
 - Added [API support](https://apidocs.harness.io/tag/Integration-Step-Config) to configure step resources and settings (e.g., syft, cdxgen, CycloneDX, SPDX) at the account, org, or project level, with options to run steps in parallel or sequentially. 
-- Registry domain URLs for artifacts stored in JFrog and Kubernetes registries no longer need to be specified, as the domain is already included in the connector URL. In all SCS steps only the image name is required.
+- Registry domain URLs for artifacts stored in JFrog - Artifactory Cloud (Saas) and Kubernetes registries (cloud-hosted) no longer need to be specified, as the domain is already included in the connector URL. In all SCS steps only the image name is required.
 
 Example: