go-containerregistry

What's Changed

• Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain by @dependabot in https://github.com/google/go-containerregistry/pull/1815
• Bump golang.org/x/ packages by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1892

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.0...v0.19.1

What's Changed

• Work around docker v25 tarballs by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1872

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.18.0...v0.19.0

What's Changed

• fix: goreleaser config by @caarlos0 in https://github.com/google/go-containerregistry/pull/1764
• Always print pushed digest in crane push by @aw185176 in https://github.com/google/go-containerregistry/pull/1860

New Contributors

• @caarlos0 made their first contribution in https://github.com/google/go-containerregistry/pull/1764

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.17.0...v0.18.0

What's Changed

• 🦅 Validate index architectures match children 🦅 by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1776
• Set Content-Length for blob uploads by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1781
• Don't wrap DefaultKeychain with refreshes by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1791
• Build releases with Go 1.21 by @imjasonh in https://github.com/google/go-containerregistry/pull/1840
• fix: mimic oci-layout in diskblobhandler by @thesayyn in https://github.com/google/go-containerregistry/pull/1810
• tag: add command explanation to the long help by @abitrolly in https://github.com/google/go-containerregistry/pull/1843
• feat: implement gc command by @thesayyn in https://github.com/google/go-containerregistry/pull/1811
• feat: allow port and disk path to be overriden by @thesayyn in https://github.com/google/go-containerregistry/pull/1848

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0

Changelog

• a54d6420 fix: pin to goreleaser v1.18 to unblock release (#1763)

Container Images

https://gcr.io/go-containerregistry/crane:v0.16.1
https://gcr.io/go-containerregistry/gcrane:v0.16.1

For example:

docker pull gcr.io/go-containerregistry/crane:v0.16.1
docker pull gcr.io/go-containerregistry/gcrane:v0.16.1

Release is broken due to goreleaser error, will cut 0.16.1 when that's fixed

What's Changed

• Make 403 non-fatal for manifest existence checks by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1691
• Do not reuse pushers for pullers by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1701

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.15.1...v0.15.2

Changelog

• e2620e56 Actually retry retryable status codes (#1618)
• afd15f14 Add --all-tags flag to crane cp (#1682)
• 69d1a197 Add mutate --ports option to set the exposed ports (#1677)
• 65e78dc8 Add partial.Manifests for lazy index access (#1631)
• 3228a601 Add ppc64le to .goreleaser.yml (#1680)
• 0b12f56b Add ppc64le to all binaries (#1688)
• d9584448 Add remote.Descriptor.Schema1() (#1626)
• 07c767c7 Add remote.Puller (#1644)
• 005bb719 Add remote.Reuse for Pusher/Puller (#1672)
• 21ac1b24 Adding mutate --workdir option to set the working directory (#1615)
• 0962e296 Allow remote config layers to be lazy fetched (#1634)
• 53189d33 Bump actions/setup-go from 3 to 4 (#1602)
• 54e3f49e Bump actions/stale from 7 to 8 (#1616)
• 07eb440c Bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1650)
• 58bd35bc Bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1668)
• e055961a Bump peter-evans/create-pull-request from 4 to 5 (#1642)
• b8d1c0a1 Bump slsa-framework/slsa-verifier from 2.0.1 to 2.1.0 (#1621)
• 375fb61c Bump slsa-framework/slsa-verifier from 2.1.0 to 2.2.0 (#1649)
• 9aa45a1a Change return type of remote.Referrers (#1652)
• 2ccd41c4 Cleanup: Switch the debug image to cgr.dev/chainguard/busybox (#1638)
• 93be9c42 Don't export whiteouts for single layers (#1629)
• b7c6e9dc Fall back to puller if reusing pusher fails (#1676)
• 370e8a5f Fix a few lint issues (#1684)
• bc990d6b Fix fetching referrers error handling (#1648)
• aee00b15 Fix race in mutate (#1627)
• 4a79e94b Fix race in stream (#1632)
• 6743ec96 Implement remote.Pusher (#1633)
• 3120ba58 Keep order of env in crane mutate (#1683)
• 6ac92e8a Refactor fetcher, writer, and progress (#1625)
• 249d7e1f Refresh authn.DefaultKeychain creds every 5 min (#1624)
• ad695c04 Replace deprecated command with environment file (#1667)
• ed5c185d Retry net.ErrClosed (#1637)
• 43710a91 Retry without mount if auth fails (#1681)
• 24353209 Revert "Cleanup: Switch the debug image to cgr.dev/chainguard/busybox (#1638)" (#1641)
• 27a6ad62 Revert "authn: Add NewConfigKeychain to load a config from explicit path (#1603)" (#1664)
• a34235c8 Support Warning header aggregation and reporting in crane (#1604)
• 01bbd539 Update release.yml (#1601)
• df518f95 add crane auth logout (#1589)
• 54389485 add registry.Repo("foo") (#1671)
• 3706061a allow pkg/v1/random to accept a RNG source (#1675)
• 1cb7e133 authn: Add NewConfigKeychain to load a config from explicit path (#1603)
• 348cd866 bump deps using ./hack/bump-deps.sh (#1659)
• 691004b4 bump deps using ./hack/bump-deps.sh (#1685)
• df72a9a9 crane push: print pushed ref@digest to stdout (#1663)
• 0577676c crane: ignore buildx attestations in flatten (#1630)
• 217318c3 deprecate estargz (#1660)
• 9f68710b feat(daemon): generate config file from Docker Engine API (#1130)
• 52d59d1b feat(remote): make retryStatusCodes configurable (#1635)
• 6f96bba2 gcrane: Use page size of 10,000 for googley things (#1645)
• 0f2db492 release: use ko 0.13.0 to build images (#1607)
• d64f9e0e remove time from random.Image history (#1678)
• 46488f7d retry HTTP 499 errors by default (#1612)
• ace7be76 update GCR quotas (#1619)
• d1c4e9ff verify provenance (#1611)

Container Images

https://gcr.io/go-containerregistry/crane:v0.15.1
https://gcr.io/go-containerregistry/gcrane:v0.15.1

For example:

docker pull gcr.io/go-containerregistry/crane:v0.15.1
docker pull gcr.io/go-containerregistry/gcrane:v0.15.1

Changelog

• 9306ebad Allow crane edit to generate non-image artifacts (#1545)
• de35f0f7 Allow setting Content-Type in crane edit manifest (#1551)
• 4b081f80 Avoid v1.Manifest in crane edit config (#1583)
• 1cfe1fc2 Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (#1593)
• da1008fb Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1548)
• 86be45fb Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (#1547)
• 62f183e5 Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (#1556)
• 1b8dc2ba Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (#1580)
• 11843ba2 Enforce proper sha256 usage (#1544)
• 2ceebaaf Implement crane index subcommand (#1561)
• 9f42e028 Set mediaType for empty.ImageIndex in RawManifest (#1562)
• 759b19f7 Support artifactType, for images whose config.mediaType is not a config (#1541)
• b3c23b4c Support for OCI 1.1+ referrers via API (#1546)
• 061ee6bf Support for OCI 1.1+ referrers via fallback tag (#1543)
• 67703048 Update descriptor "data" field (when valid) during "crane edit config" (#1584)
• 76bac933 Update release.yml (#1540)
• eb7d746c authn: also read mount secrets (#1560)
• e94d4089 bump deps using ./hack/bump-deps.sh (#1592)
• 4e95ae2b crane: add --flatten for index append (#1566)
• ff810c18 crane: add serve subcommand (#1586)
• 8ea5e0e8 crane: support --omit-digest-tags in crane ls (#1528)
• 824efc77 fix(mutate): also set timestamps only present in some formats (#1550)
• e04520bc fix: Fix the crane release url and add more steps (#1532)
• d8722327 hash: use generic instantiation (#1538)
• 57f010d2 replace manual slsa-verifier installation with action (#1585)
• 9cd098e3 skip tls verification if default transport is used with insecure option (#1559)
• 36249683 tarball: pass imageToTags (#1563)

Container Images

https://gcr.io/go-containerregistry/crane:v0.14.0
https://gcr.io/go-containerregistry/gcrane:v0.14.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.14.0
docker pull gcr.io/go-containerregistry/gcrane:v0.14.0

What's Changed

• Bump slsa-framework/slsa-github-generator to 1.2.2 by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1489
• Features: Allow eliding serviceaccount lookups. by @mattmoor in https://github.com/google/go-containerregistry/pull/1490
• Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 by @dependabot in https://github.com/google/go-containerregistry/pull/1491
• add source archive checksum into the checksums.txt by @developer-guy in https://github.com/google/go-containerregistry/pull/1492
• Fix calculating tarball size when duplicated layers exist by @tydra-wang in https://github.com/google/go-containerregistry/pull/1495
• Add support for zstd compression by @LFrobeen in https://github.com/google/go-containerregistry/pull/1487
• docs: pull latest instead of debug by @AndrewCharlesHay in https://github.com/google/go-containerregistry/pull/1497
• Make credential warning slightly more accurate by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1499
• Make unit tests substantially faster by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1498
• Use the default retry predicate in transport by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1502
• Revert "docs: pull latest instead of debug (#1497)" by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1504
• Update Arch Linux install instructions by @kpcyrd in https://github.com/google/go-containerregistry/pull/1508
• Fix various lints by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1507
• Fix missing doc comment by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1509
• Treat empty registry config as anonymous by @lcarva in https://github.com/google/go-containerregistry/pull/1512
• Bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0 by @dependabot in https://github.com/google/go-containerregistry/pull/1511
• Bump actions/stale from 6 to 7 by @dependabot in https://github.com/google/go-containerregistry/pull/1519
• Race http fallback ping by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1521
• FIX mutate.Time not respecting history by @miguelvalerio in https://github.com/google/go-containerregistry/pull/1520
• test: use T.TempDir to create temporary test directory by @Juneezee in https://github.com/google/go-containerregistry/pull/1522
• crane: add digest --full by @imjasonh in https://github.com/google/go-containerregistry/pull/1524
• Hack around DockerHub plugin scope handling by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1527
• crane: support --full-ref for crane ls by @imjasonh in https://github.com/google/go-containerregistry/pull/1525
• Revert plugin scope hack by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1531
• clarify crane download readme by @dtanner in https://github.com/google/go-containerregistry/pull/1533

New Contributors

• @LFrobeen made their first contribution in https://github.com/google/go-containerregistry/pull/1487
• @AndrewCharlesHay made their first contribution in https://github.com/google/go-containerregistry/pull/1497
• @kpcyrd made their first contribution in https://github.com/google/go-containerregistry/pull/1508
• @miguelvalerio made their first contribution in https://github.com/google/go-containerregistry/pull/1520
• @Juneezee made their first contribution in https://github.com/google/go-containerregistry/pull/1522
• @dtanner made their first contribution in https://github.com/google/go-containerregistry/pull/1533

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0

Changelog

• 426de7d4 Bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1475)
• 6442b027 Bump goreleaser/goreleaser-action from 3.1.0 to 3.2.0 (#1476)
• 76ae8192 Fix context.DeadlineExceeded comparison (#1488)
• 1711cefd Fix missing body.Close() in bearer auth (#1482)
• 02f47e13 bump version of slsa generator (#1468)
• 353a1176 crane: add catalog argument use annotation (#1473)
• a0cca8a0 k8schain: Log and proceed if secret or SA are not found (#1472)

Container Images

https://gcr.io/go-containerregistry/crane:v0.12.1
https://gcr.io/go-containerregistry/gcrane:v0.12.1

For example:

docker pull gcr.io/go-containerregistry/crane:v0.12.1
docker pull gcr.io/go-containerregistry/gcrane:v0.12.1

Changelog

• 9b4fdd50 Bump actions/setup-go from 2 to 3 (#1463)
• 7268da01 Bump actions/stale from 5 to 6 (#1452)
• 7196cf3d Bump aws-actions/configure-aws-credentials from 1.6.1 to 1.7.0 (#1424)
• 8eae069f Bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1453)
• 969699e7 Bump deps using ./hack/bump-deps.sh (#1467)
• c1f9836a Bump opencontainers/image-spec (#1423)
• 49cdb8b4 Correct usage of authn.NewKeychainFromHelper in docs (#1419)
• 3ba4c511 Fix tar PAX format handling (#1414)
• 24a1c335 Ignore docker config if it's a directory (#1420)
• a0f66878 Make ErrBadName checkable via errors.Is() (#1462)
• 19e3eff7 Retry ECONNRESET errors (#1415)
• 5749ee68 Support the platform specific authentication of krane in "auth get" command (#1413)
• e3b94c7e allow remote.DefaultTransport to be overridden by an http.RoundTripper (#1449)
• f981b4c0 deps: update goreleaser-action for bug (#1444)
• 771a9b44 e2e: pull and export stdin and stdout (#1436)
• 87b3a796 feat: Add krane to release archive (#1443)
• 2859a0d0 feat: generate slsa provenance on github release artifacts (#1438)
• 9a5c14ad fix crane's root.go after DefaultTransport change (#1450)
• 2b54510b fix: consider base image media type when appending layers (#1437)
• d3ed4089 registry: implement blob deletion (#1432)
• 3413eb6c registry: implement pagination (#1430)
• e2d575cf update crane installation instructions and release verification (#1440)

Container Images

https://gcr.io/go-containerregistry/crane:v0.12.0
https://gcr.io/go-containerregistry/gcrane:v0.12.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.12.0
docker pull gcr.io/go-containerregistry/gcrane:v0.12.0

Changelog

• b7b4eada Add unit test covering .dockerconfigjson secrets (#1335)
• 31786c6c Bump deps using ./hack/bump-deps.sh (#1410)
• f79ec219 Deprecate transport.New (#1337)
• 2b1087ab Do not check /v2 endpoint on registry when RoundTripper is provided (#1396)
• 59b5c06e Don't annotate refs by default, switch to OCI key (#1401)
• ddd39fb9 Fall back to no mount if registry misbehaves (#1406)
• d187a716 Implement crane edit (#1403)
• 4d7b65b0 Include builds for Go 1.18 in CI matrixes (#1319)
• 03194c5a Preserve descriptors when writing to layout (#1400)
• 53e6bea5 Redact sensitive information in redirected URLs (#1408)
• ae256b58 Use go-digest to validate digests (#1395)
• 86f0c4a3 Wrap progress updates in a mutex (#1402)
• e7a9f2b9 bump deps using ./hack/bump-deps.sh (#1389)

Container Images

https://gcr.io/go-containerregistry/crane:v0.11.0
https://gcr.io/go-containerregistry/gcrane:v0.11.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.11.0
docker pull gcr.io/go-containerregistry/gcrane:v0.11.0

Changelog

• 9006ebf2 Add debug logs to google.Keychain (#1390)
• 03a77f4f Allow config files to be mounted (#1387)
• b17c48b0 Bump goreleaser/goreleaser-action from 2 to 3 (#1370)
• 623023e6 Implement cross-registry blob mounting experiment (#1388)
• 2a21d4fa Set GetBody on blob uploads (#1391)
• f74686f9 bump deps using ./hack/bump-deps.sh (#1371)
• 7fc806ee feat(cache): cacheable v1.ImageIndex (#1380)
• 0c40ec8a feat(crane): add option to allow pushing non-distributable layers (#1348)
• 12aecccd fix(crane): just need cobra.MinimumNArgs(1) instead of cobra.MaximumNArgs(1). (#1384)
• 84eb5263 k8schain: prioritize imagePullSecrets over implicit auth (#1368)

Container Images

https://gcr.io/go-containerregistry/crane:v0.10.0
https://gcr.io/go-containerregistry/gcrane:v0.10.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.10.0
docker pull gcr.io/go-containerregistry/gcrane:v0.10.0

What's Changed

• pkg/v1/mutate: fill in mediaType for OCI by @maisem in https://github.com/google/go-containerregistry/pull/1236
• Start testing ECR authentication. by @mattmoor in https://github.com/google/go-containerregistry/pull/1237
• Pin the version of AWS actions we use by @mattmoor in https://github.com/google/go-containerregistry/pull/1238
• Add pkg/authn/kubernetes by @imjasonh in https://github.com/google/go-containerregistry/pull/1234
• Use Temp File For layout.{Write,Append,Replace} Image/Index Methods by @ben-krieger in https://github.com/google/go-containerregistry/pull/1226
• Update README.md by @bobychaudhary in https://github.com/google/go-containerregistry/pull/1239
• fix k8schain go.mod by @dprotaso in https://github.com/google/go-containerregistry/pull/1242
• fix cmd/krane/go.mod and include it in hack/presubmit.sh by @imjasonh in https://github.com/google/go-containerregistry/pull/1240
• return transport errors that support errors.Is by @dprotaso in https://github.com/google/go-containerregistry/pull/1244
• Bump ecr-login to v0.6.0 by @imjasonh in https://github.com/google/go-containerregistry/pull/1243
• pkg/authn: return Anonymous on podman auth.json errors by @vdemeester in https://github.com/google/go-containerregistry/pull/1248
• Bump acr cred helper dep by @imjasonh in https://github.com/google/go-containerregistry/pull/1247
• krane: drop k8schain, use cred helper directly w/o k8s by @imjasonh in https://github.com/google/go-containerregistry/pull/1250
• Ensure that layer is closed before renaming file in layout by @ben-krieger in https://github.com/google/go-containerregistry/pull/1254
• Bump aws-actions/configure-aws-credentials from 1.6.0 to 1.6.1 by @dependabot in https://github.com/google/go-containerregistry/pull/1259
• Fix krane:debug image to include shell by @imjasonh in https://github.com/google/go-containerregistry/pull/1264
• Fix NewKeychainFromHelper by @imjasonh in https://github.com/google/go-containerregistry/pull/1265
• Fix issue templates by @imjasonh in https://github.com/google/go-containerregistry/pull/1266
• Update k8schain README -- don't recommend modifting authn.DefaultKeyc… by @imjasonh in https://github.com/google/go-containerregistry/pull/1267
• Add EOF to remote default retry predicate by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1268
• Bump containerd by @imjasonh in https://github.com/google/go-containerregistry/pull/1271
• Implement Platform.String and v1.ParsePlatform by @imjasonh in https://github.com/google/go-containerregistry/pull/1270
• Eagerly fetch image ID in daemon.Image by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1272
• Add pkg/authn/github.Keychain to authenticate with ghcr.io by @imjasonh in https://github.com/google/go-containerregistry/pull/1252
• Fallback to anonymous if env or gcloud are not configured by @imjasonh in https://github.com/google/go-containerregistry/pull/1279
• Add one-time workflow to push an image to ghcr.io by @imjasonh in https://github.com/google/go-containerregistry/pull/1281
• remove push-image workflow by @imjasonh in https://github.com/google/go-containerregistry/pull/1282
• Pass gcloud stderr to logs.Warn by @imjasonh in https://github.com/google/go-containerregistry/pull/1284
• Add tarball.WithMediaType to specify layer media type by @imjasonh in https://github.com/google/go-containerregistry/pull/1286
• LayerFromReader: buffer contents to a temp file instead of in memory by @imjasonh in https://github.com/google/go-containerregistry/pull/1285
• Check docker config auths for repo and registry by @imjasonh in https://github.com/google/go-containerregistry/pull/1280
• Bump deps, add script to make it easier by @imjasonh in https://github.com/google/go-containerregistry/pull/1260
• Fix Windows e2e test by @imjasonh in https://github.com/google/go-containerregistry/pull/1292
• Update ecr-login dep to fix logspam issue by @imjasonh in https://github.com/google/go-containerregistry/pull/1294
• authn/kubernetes - fix auth config lookup by @dprotaso in https://github.com/google/go-containerregistry/pull/1299
• authn/kubernetes - fix index.docker.io case by @dprotaso in https://github.com/google/go-containerregistry/pull/1300
• Take advantage of Chainguard maintained versions of various actions. by @mattmoor in https://github.com/google/go-containerregistry/pull/1301
• Cover a couple special paths in keychain unit tests. by @mattmoor in https://github.com/google/go-containerregistry/pull/1302
• Add output option to mutate to save to a tar file and not push to a registry (same as append) by @ehmm in https://github.com/google/go-containerregistry/pull/1257
• Add GitHub Action to automatically bump deps by @imjasonh in https://github.com/google/go-containerregistry/pull/1291
• Include blob existence checks in retries by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1307
• Bump golangci/golangci-lint-action from 2 to 3.1.0 by @dependabot in https://github.com/google/go-containerregistry/pull/1308
• Add rebase_test.sh to hack/presubmit.sh by @imjasonh in https://github.com/google/go-containerregistry/pull/1304
• crane export: Support reading tarball from a stream by @abitrolly in https://github.com/google/go-containerregistry/pull/1274
• Don't parse challenge's scopes, put them first by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1312
• Bump actions/checkout from 2 to 3 by @dependabot in https://github.com/google/go-containerregistry/pull/1315
• Fix isolation of presubmit tools by @abitrolly in https://github.com/google/go-containerregistry/pull/1306
• Bump deps, fix ecr-login API change by @imjasonh in https://github.com/google/go-containerregistry/pull/1310
• Add --user flag to crane mutate by @matthewrobertson in https://github.com/google/go-containerregistry/pull/1316
• Bump peter-evans/create-pull-request from 3 to 4 by @dependabot in https://github.com/google/go-containerregistry/pull/1327
• Bump actions/setup-go from 2 to 3 by @dependabot in https://github.com/google/go-containerregistry/pull/1340
• Bump actions/stale from 4 to 5 by @dependabot in https://github.com/google/go-containerregistry/pull/1342
• Bump codecov/codecov-action from 2.1.0 to 3.0.0 by @dependabot in https://github.com/google/go-containerregistry/pull/1341
• use k8s keychain first by @dprotaso in https://github.com/google/go-containerregistry/pull/1346
• fix(v1/random): set MediaType in randomIndex.manifest by @estroz in https://github.com/google/go-containerregistry/pull/1343
• fix(v1/remote): return an error if both auth and keychain are set by @estroz in https://github.com/google/go-containerregistry/pull/1334
• AuthConfig now supports json (un)marshalling by @dprotaso in https://github.com/google/go-containerregistry/pull/1350
• authn.kubernetes.Resolve now behaves exactly like Kubernetes by @dprotaso in https://github.com/google/go-containerregistry/pull/1349
• bump require blocks to point to latest main (892d7a8) by @dprotaso in https://github.com/google/go-containerregistry/pull/1351
• update go action to always get the latest available and other updates by @cpanato in https://github.com/google/go-containerregistry/pull/1352
• Bump codecov/codecov-action from 3.0.0 to 3.1.0 by @dependabot in https://github.com/google/go-containerregistry/pull/1353
• Bump github/codeql-action from 1 to 2 by @dependabot in https://github.com/google/go-containerregistry/pull/1357
• transport: Don't pass default service if unset by @imjasonh in https://github.com/google/go-containerregistry/pull/1360
• fix(ConfigFile): Add Variant by @lippertmarkus in https://github.com/google/go-containerregistry/pull/1362
• Bump deps, fix issues by @imjasonh in https://github.com/google/go-containerregistry/pull/1317
• feat(crane): allow setting the repository to push by digest by @lippertmarkus in https://github.com/google/go-containerregistry/pull/1323
• Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 by @dependabot in https://github.com/google/go-containerregistry/pull/1365
• Bump deps using ./hack/bump-deps.sh by @imjasonh in https://github.com/google/go-containerregistry/pull/1366

New Contributors

• @ben-krieger made their first contribution in https://github.com/google/go-containerregistry/pull/1226
• @bobychaudhary made their first contribution in https://github.com/google/go-containerregistry/pull/1239
• @abitrolly made their first contribution in https://github.com/google/go-containerregistry/pull/1274
• @matthewrobertson made their first contribution in https://github.com/google/go-containerregistry/pull/1316
• @estroz made their first contribution in https://github.com/google/go-containerregistry/pull/1343
• @lippertmarkus made their first contribution in https://github.com/google/go-containerregistry/pull/1362

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.8.0...v0.9.0

What's Changed

• spelling: entrypoing->entrypoint by @vsoch in https://github.com/google/go-containerregistry/pull/1176
• update crane mutate annotation/label args to allow commas in label values by @vsoch in https://github.com/google/go-containerregistry/pull/1178
• Check for Podman's auth.json in DefaultKeychain by @imjasonh in https://github.com/google/go-containerregistry/pull/1181
• Enable gosec, exempt tests, ignore others by @imjasonh in https://github.com/google/go-containerregistry/pull/1169
• Revert "Check for Podman's auth.json in DefaultKeychain (#1181)" by @imjasonh in https://github.com/google/go-containerregistry/pull/1184
• Attempt 2: Check for Podman's auth in DefaultKeychain by @imjasonh in https://github.com/google/go-containerregistry/pull/1185
• Update deps by @dekkagaijin in https://github.com/google/go-containerregistry/pull/1188
• Include 1.17 in build and test matrix by @imjasonh in https://github.com/google/go-containerregistry/pull/1190
• Add issue templates by @imjasonh in https://github.com/google/go-containerregistry/pull/1192
• Add depcheck test that pkg/registry has light dependencies by @imjasonh in https://github.com/google/go-containerregistry/pull/1187
• Windowsify layers when crane appending by @imjasonh in https://github.com/google/go-containerregistry/pull/1179
• Accept multiple entrypoint values in crane mutate by @imjasonh in https://github.com/google/go-containerregistry/pull/1194
• Added env vars and optional layers to mutate cmd by @ehmm in https://github.com/google/go-containerregistry/pull/1199
• Make crane export more ergonomic by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1203
• Don't use the term 'runes' in error messages by @imjasonh in https://github.com/google/go-containerregistry/pull/1204
• Always use basic for anonymous pings by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1207
• Support specifying osversion in the --platform flag by @imjasonh in https://github.com/google/go-containerregistry/pull/1206
• Bump golang.org/x/tools by @imjasonh in https://github.com/google/go-containerregistry/pull/1201
• crane push: Support OCI layout by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1208
• Bump deps by @imjasonh in https://github.com/google/go-containerregistry/pull/1214
• Pluggable blob storage for pkg/registry by @imjasonh in https://github.com/google/go-containerregistry/pull/1209
• Add --image-refs to crane push. by @mattmoor in https://github.com/google/go-containerregistry/pull/1217
• Add a krane tool. by @mattmoor in https://github.com/google/go-containerregistry/pull/1218
• Fix krane build by @mattmoor in https://github.com/google/go-containerregistry/pull/1223
• Add UnavailableErrorCode by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1230
• Add docker cred helper adapter in pkg/authn by @imjasonh in https://github.com/google/go-containerregistry/pull/1227
• crane pull: support pulling index to OCI Layout by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/1215

New Contributors

• @vsoch made their first contribution in https://github.com/google/go-containerregistry/pull/1176
• @ehmm made their first contribution in https://github.com/google/go-containerregistry/pull/1199

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.7.0...v0.8.0

Changelog

18309518 Add --set-base-image-annotations flag to crane append (#1098)
bea59b93 Add crane flatten (#1104)
5c9c442d Add pkg/registry/README.md documenting expectations (#1167)
dd86162b Add s390x arch to goreleaser (#1149)
8388fde8 Add temp codes when determining if an error is 'Temporary' (#1115)
6cb23fb1 Adding OS version to Crane for better Windows support. (#1173)
9ae11fe2 Allow image layers to use any custom media type (#1136)
d6bc6d58 Bump actions/stale from 3 to 4 (#1096)
a65a0a61 Bump codecov/codecov-action from 1 to 2.0.2 (#1095)
7e0ed51a Bump codecov/codecov-action from 2.0.2 to 2.0.3 (#1112)
40ba044c Bump codecov/codecov-action from 2.0.3 to 2.1.0 (#1125)
542cd568 Bump dependencies (#1175)
45809215 Bump docker/docker dependency to v20.10.10 (#1171)
c5dea0c2 Bump github.com/containerd/stargz-snapshotter/estargz (#1118)
230ff8eb Bump github.com/containerd/stargz-snapshotter/estargz (#1138)
54c3445d Bump github.com/docker/cli (#1101)
d43a5ce7 Bump github.com/docker/cli (#1141)
be17d0ad Bump github.com/docker/docker (#1100)
35e35410 Bump github.com/docker/docker (#1140)
f9a1886f Clean filepaths in mutate.Extract (#1106)
7a6ee455 Define a new remote.DefaultTransport. (#1165)
3cd0cb5c Do not forget CreatedBy in mutate.Canonical (#978)
5f2509ca Document setup-crane in cmd/crane/README.md (#1152)
c71ca9bc Don't reuse errgroups, propagate contexts better (#1128)
dd49079b Enable golangci-lint (#1162)
a0c4bd25 Enable some more golangci-lint checks, fix findings (#1164)
0dfbb568 Fix presubmit (#1161)
b0e827a2 Fix small typo in partial README for UncompressedImageCore (#1156)
080751a7 Give the ping context a timeout. (#1163)
de8aff85 Implement annotation-based rebase hints (#960)
0e8b5819 Make mutate constructs immutable. (#1124)
e92a648a Make crane flatten work with indexes (#1105)
34b7f00d Make retrying transport and http errors configurable (#1122)
f337ecf4 Pass Options when recursively calling writeIndex (#1172)
b5cf9c4b Propagate crane options through gcrane cp -r (#1127)
2459de30 Re-enable codeql analysis (#1135)
e7cd6afc Refactor the control flow for manifests and blobs. (#1157)
1781b9f1 Update dependabot.yml (#1084)
72ae53c6 Update go mod deps to latest releases, run go mod tidy and go mod vendor (#1139)
486e71fb feat(daemon): avoid multiple initialization (#1126)
f0983da3 feat(daemon): lazy image saving (#1121)
bcbf8d3f feat: ability to set page size for tags list and catalog calls (#1102)
308547aa pkg/authn/k8schain: run go mod tidy (#1131)
0de2b1e4 recipe: Document diffing filesystem contents (#1155)

Container Images

https://gcr.io/go-containerregistry/crane:v0.7.0
https://gcr.io/go-containerregistry/gcrane:v0.7.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.7.0
docker pull gcr.io/go-containerregistry/gcrane:v0.7.0

Changelog

9b2cec94 Add SECURITY.md (#1031)
a27f4a44 Add WithTransport to gcrane (#1022)
8b535fa9 Add auth options to gcrane (#1021)
b448abac Add crane recipe for listing files, add note about symlinks (#1072)
b69114f9 Add google.com host suffix to gcrane keychain (#1039)
4759a5dd Add recipe to calculate image size (#1088)
6118d45d Add retry when commiting a manifest (#1041)
092caf0f Add static.NewLayer (#1093)
2f6fbf77 Allow mutate.Annotations to annotate an Image or ImageIndex (#1082)
68edb3a4 Avoid race in progress_test.go (#1081)
9e56ddd8 Avoid trying https for insecure registries (#1002)
a0b94688 Bump github.com/containerd/stargz-snapshotter/estargz (#1083)
2b9ddcde Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#1070)
ce35c99b Create a k8schain directly from pull secrets (#1049)
628a2ff5 Document released images in release notes (#1069)
03f1bf46 Don't overwrite WithTransport option (#1077)
acad0ede Drop error return for mutate.Annotations (#1058)
e2daef5c Enable dependabot (#1052)
8395cdf4 Fix install instructions for crane (#1020)
0233fcda Fix typo in state GitHub Action (#1023)
596751a1 Handle multiple www-authenticate headers (#1075)
5f53e4ef Implement crane.Head (#1057)
0ffa4a5c Include a commit with K8s 1.20 libs (#1027)
13e1a6b0 Only verify size if we can (#1080)
426caf78 Plumb context through crane and gcrane (#995)
eca1cd86 Reduce default catalog page size (#1092)
d9ecc496 Remove report card (#1035)
11f87690 Revert "Avoid trying https for insecure registries (#1002)" (#1048)
5455b5b6 Revert "export manifest for tar file (#1033)" (#1043)
5ea35697 Set Content-Type to application/octet-stream (#1079)
a3a06bb6 Straighten out remote.List{WithContext} (#1090)
162d96e1 Update dependencies (#1036)
45aaa6c0 Use Data field when fetching in remote (#1076)
de6223d0 Verify size in verify.ReadCloser (#1044)
fbb5e787 bump ggcr in gccr/k8schain what! (#1030)
529b4378 ci: test/build with go 1.14/1.15/1.16 (#1051)
3bfd0b5c crane: ignore TLS certificate validation when using --insecure flag (#1054)
f0ce2270 export manifest for tar file (#1033)
764823af export manifest from tar file (#1046)
92e9e85a feat(mutate): added support for overriding manifest annotations (#1056)
3bfab55f update to add that crane retains the digest (#1037)
c086c7f1 use K8s 1.20 libs
14e26bf4 use K8s 1.21 libs
100e16ab use go1.16's module aware install vs tools.go (#1028)

Container Images

https://gcr.io/go-containerregistry/crane:v0.6.0
https://gcr.io/go-containerregistry/gcrane:v0.6.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.6.0
docker pull gcr.io/go-containerregistry/gcrane:v0.6.0

Changelog

4c244d6 Add --fast flag to crane validate (#1013)
4cdd086 Break free from Knative actions (#1016)
13fba64 Fix RunE error handling (#1014)
c03201f Fix various lint issues (#1010)
21a2dc2 Re-exec gcloud token source when we refresh (#1017)
c061b3f Retry more errors in remote.Write (#1019)
9cf3ed4 Update actions (#1009)
6a2e261 Update actions (#1012)
4ffaf0b Update goreleaser config to include arm version (#1008)
f009e5f Update k8schain's k8s dependency to 0.21.0 (#1001)