Go Containerregistry Versions Save

What's Changed

• Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain by @dependabot in https://github.com/google/go-containerregistry/pull/1815
• Bump golang.org/x/ packages by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1892

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.0...v0.19.1

What's Changed

• Work around docker v25 tarballs by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1872

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.18.0...v0.19.0

What's Changed

• fix: goreleaser config by @caarlos0 in https://github.com/google/go-containerregistry/pull/1764
• Always print pushed digest in crane push by @aw185176 in https://github.com/google/go-containerregistry/pull/1860

New Contributors

• @caarlos0 made their first contribution in https://github.com/google/go-containerregistry/pull/1764

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.17.0...v0.18.0

What's Changed

• :eagle: Validate index architectures match children :eagle: by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1776
• Set Content-Length for blob uploads by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1781
• Don't wrap DefaultKeychain with refreshes by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1791
• Build releases with Go 1.21 by @imjasonh in https://github.com/google/go-containerregistry/pull/1840
• fix: mimic oci-layout in diskblobhandler by @thesayyn in https://github.com/google/go-containerregistry/pull/1810
• tag: add command explanation to the long help by @abitrolly in https://github.com/google/go-containerregistry/pull/1843
• feat: implement gc command by @thesayyn in https://github.com/google/go-containerregistry/pull/1811
• feat: allow port and disk path to be overriden by @thesayyn in https://github.com/google/go-containerregistry/pull/1848

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0

Release is broken due to goreleaser error, 0.16.1 has the fix

What's Changed

• bump deps using ./hack/bump-deps.sh by @imjasonh in https://github.com/google/go-containerregistry/pull/1702
• Allow crane to export schema 1 images by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1704
• fixed a goroutine leak by @ktarplee in https://github.com/google/go-containerregistry/pull/1705
• retry HTTP 522 errors by default by @imjasonh in https://github.com/google/go-containerregistry/pull/1707
• Limit size of manifest by @AdamKorcz in https://github.com/google/go-containerregistry/pull/1711
• Add crane auth token by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1709
• Bump codecov/codecov-action from 3.1.3 to 3.1.4 by @dependabot in https://github.com/google/go-containerregistry/pull/1710
• Pass scopes through crane auth token by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1713
• fix: add bounds checking to addendum layer mutations to prevent panic by @aaron-prindle in https://github.com/google/go-containerregistry/pull/1715
• Surface better error messages in crane index by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1722
• crane: add missing name option in crane index commands by @HubertZhang in https://github.com/google/go-containerregistry/pull/1723
• crane: Respect cmd.OutOrStdout by @kyleconroy in https://github.com/google/go-containerregistry/pull/1728
• Make ErrSchema1 checkable via errors.Is() by @Laitr0n in https://github.com/google/go-containerregistry/pull/1721
• Don't load into daemon if the image already exists by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1724
• add --blobs-to-disk to 'crane registry serve' by @imjasonh in https://github.com/google/go-containerregistry/pull/1731
• Correct crane registry help text by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1732
• Allow concurrent blob Sets, use RWMutex by @mattmoor in https://github.com/google/go-containerregistry/pull/1733
• Use RWLock, limit scope of locking, write digest first by @mattmoor in https://github.com/google/go-containerregistry/pull/1734
• Let the filesystem handle atomicity by @mattmoor in https://github.com/google/go-containerregistry/pull/1735
• Don't try cross-origin mounting against dockerhub by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1743
• Drop localhost to support crane registry serve in a container by @mattmoor in https://github.com/google/go-containerregistry/pull/1746
• Return OCI Index content-type for referrers response by @jdolitsky in https://github.com/google/go-containerregistry/pull/1762

New Contributors

• @AdamKorcz made their first contribution in https://github.com/google/go-containerregistry/pull/1711
• @HubertZhang made their first contribution in https://github.com/google/go-containerregistry/pull/1723
• @kyleconroy made their first contribution in https://github.com/google/go-containerregistry/pull/1728
• @Laitr0n made their first contribution in https://github.com/google/go-containerregistry/pull/1721

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.15.2...v0.16.1

Container Images

https://gcr.io/go-containerregistry/crane:v0.16.1 https://gcr.io/go-containerregistry/gcrane:v0.16.1

For example:

docker pull gcr.io/go-containerregistry/crane:v0.16.1
docker pull gcr.io/go-containerregistry/gcrane:v0.16.1

Release is broken due to goreleaser error, 0.16.1 has the fix

What's Changed

• Make 403 non-fatal for manifest existence checks by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1691
• Do not reuse pushers for pullers by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1701

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.15.1...v0.15.2

Changelog

• e2620e56 Actually retry retryable status codes (#1618)
• afd15f14 Add --all-tags flag to crane cp (#1682)
• 69d1a197 Add mutate --ports option to set the exposed ports (#1677)
• 65e78dc8 Add partial.Manifests for lazy index access (#1631)
• 3228a601 Add ppc64le to .goreleaser.yml (#1680)
• 0b12f56b Add ppc64le to all binaries (#1688)
• d9584448 Add remote.Descriptor.Schema1() (#1626)
• 07c767c7 Add remote.Puller (#1644)
• 005bb719 Add remote.Reuse for Pusher/Puller (#1672)
• 21ac1b24 Adding mutate --workdir option to set the working directory (#1615)
• 0962e296 Allow remote config layers to be lazy fetched (#1634)
• 53189d33 Bump actions/setup-go from 3 to 4 (#1602)
• 54e3f49e Bump actions/stale from 7 to 8 (#1616)
• 07eb440c Bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1650)
• 58bd35bc Bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1668)
• e055961a Bump peter-evans/create-pull-request from 4 to 5 (#1642)
• b8d1c0a1 Bump slsa-framework/slsa-verifier from 2.0.1 to 2.1.0 (#1621)
• 375fb61c Bump slsa-framework/slsa-verifier from 2.1.0 to 2.2.0 (#1649)
• 9aa45a1a Change return type of remote.Referrers (#1652)
• 2ccd41c4 Cleanup: Switch the debug image to cgr.dev/chainguard/busybox (#1638)
• 93be9c42 Don't export whiteouts for single layers (#1629)
• b7c6e9dc Fall back to puller if reusing pusher fails (#1676)
• 370e8a5f Fix a few lint issues (#1684)
• bc990d6b Fix fetching referrers error handling (#1648)
• aee00b15 Fix race in mutate (#1627)
• 4a79e94b Fix race in stream (#1632)
• 6743ec96 Implement remote.Pusher (#1633)
• 3120ba58 Keep order of env in crane mutate (#1683)
• 6ac92e8a Refactor fetcher, writer, and progress (#1625)
• 249d7e1f Refresh authn.DefaultKeychain creds every 5 min (#1624)
• ad695c04 Replace deprecated command with environment file (#1667)
• ed5c185d Retry net.ErrClosed (#1637)
• 43710a91 Retry without mount if auth fails (#1681)
• 24353209 Revert "Cleanup: Switch the debug image to cgr.dev/chainguard/busybox (#1638)" (#1641)
• 27a6ad62 Revert "authn: Add NewConfigKeychain to load a config from explicit path (#1603)" (#1664)
• a34235c8 Support Warning header aggregation and reporting in crane (#1604)
• 01bbd539 Update release.yml (#1601)
• df518f95 add crane auth logout (#1589)
• 54389485 add registry.Repo("foo") (#1671)
• 3706061a allow pkg/v1/random to accept a RNG source (#1675)
• 1cb7e133 authn: Add NewConfigKeychain to load a config from explicit path (#1603)
• 348cd866 bump deps using ./hack/bump-deps.sh (#1659)
• 691004b4 bump deps using ./hack/bump-deps.sh (#1685)
• df72a9a9 crane push: print pushed ref@digest to stdout (#1663)
• 0577676c crane: ignore buildx attestations in flatten (#1630)
• 217318c3 deprecate estargz (#1660)
• 9f68710b feat(daemon): generate config file from Docker Engine API (#1130)
• 52d59d1b feat(remote): make retryStatusCodes configurable (#1635)
• 6f96bba2 gcrane: Use page size of 10,000 for googley things (#1645)
• 0f2db492 release: use ko 0.13.0 to build images (#1607)
• d64f9e0e remove time from random.Image history (#1678)
• 46488f7d retry HTTP 499 errors by default (#1612)
• ace7be76 update GCR quotas (#1619)
• d1c4e9ff verify provenance (#1611)

Container Images

https://gcr.io/go-containerregistry/crane:v0.15.1 https://gcr.io/go-containerregistry/gcrane:v0.15.1

For example:

docker pull gcr.io/go-containerregistry/crane:v0.15.1
docker pull gcr.io/go-containerregistry/gcrane:v0.15.1

Changelog

• 9306ebad Allow crane edit to generate non-image artifacts (#1545)
• de35f0f7 Allow setting Content-Type in crane edit manifest (#1551)
• 4b081f80 Avoid v1.Manifest in crane edit config (#1583)
• 1cfe1fc2 Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (#1593)
• da1008fb Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1548)
• 86be45fb Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (#1547)
• 62f183e5 Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (#1556)
• 1b8dc2ba Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (#1580)
• 11843ba2 Enforce proper sha256 usage (#1544)
• 2ceebaaf Implement crane index subcommand (#1561)
• 9f42e028 Set mediaType for empty.ImageIndex in RawManifest (#1562)
• 759b19f7 Support artifactType, for images whose config.mediaType is not a config (#1541)
• b3c23b4c Support for OCI 1.1+ referrers via API (#1546)
• 061ee6bf Support for OCI 1.1+ referrers via fallback tag (#1543)
• 67703048 Update descriptor "data" field (when valid) during "crane edit config" (#1584)
• 76bac933 Update release.yml (#1540)
• eb7d746c authn: also read mount secrets (#1560)
• e94d4089 bump deps using ./hack/bump-deps.sh (#1592)
• 4e95ae2b crane: add --flatten for index append (#1566)
• ff810c18 crane: add serve subcommand (#1586)
• 8ea5e0e8 crane: support --omit-digest-tags in crane ls (#1528)
• 824efc77 fix(mutate): also set timestamps only present in some formats (#1550)
• e04520bc fix: Fix the crane release url and add more steps (#1532)
• d8722327 hash: use generic instantiation (#1538)
• 57f010d2 replace manual slsa-verifier installation with action (#1585)
• 9cd098e3 skip tls verification if default transport is used with insecure option (#1559)
• 36249683 tarball: pass imageToTags (#1563)

Container Images

https://gcr.io/go-containerregistry/crane:v0.14.0 https://gcr.io/go-containerregistry/gcrane:v0.14.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.14.0
docker pull gcr.io/go-containerregistry/gcrane:v0.14.0