What's Changed
- Make apko dot show errors by @jonjohnsonjr in #1024
- build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #978
- build(deps): bump github.com/sigstore/cosign/v2 from 2.2.1 to 2.2.3 by @dependabot in #1026
- build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.4.0 by @dependabot in #1025
- build(deps): bump github/codeql-action from 2.22.6 to 3.23.2 by @dependabot in #1018
- build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.19.0 by @dependabot in #1021
- build(deps): bump github.com/chainguard-dev/clog from 1.2.3-0.20240116182827-04bee692f7a8 to 1.3.0 by @dependabot in #1019
- use charm logger by @imjasonh in #1028
- Plumb ctx through daemon package by @jonjohnsonjr in #1029
- Cancel context on interrupt signal by @jonjohnsonjr in #1030
- move some logs to debug, avoid duplicate work/logs by @imjasonh in #1034
- Preserve APK hardlinks by @jonjohnsonjr in #1038
- Make sure we clean up after ourselves by @jonjohnsonjr in #1040
- Allow apko dot to be cancelled by @jonjohnsonjr in #1031
- Drop creating group log by @jonjohnsonjr in #1045
- Store checksum of apko-config in the lock-file to detect changes in origin. by @sfc-gh-ptabor in #1012
- build(deps): bump github.com/chainguard-dev/clog from 1.3.0 to 1.3.1 by @dependabot in #1033
- build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in #1035
- build(deps): bump github/codeql-action from 3.23.2 to 3.24.5 by @dependabot in #1048
- build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in #1041
- build(deps): bump go.opentelemetry.io/otel from 1.22.0 to 1.24.0 by @dependabot in #1049
- Bump go-apk by @jonjohnsonjr in #1050
- build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1055
- build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in #1053
- Bump go-apk by @jonjohnsonjr in #1059
- build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in #1058
- build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #1061
- build(deps): bump k8s.io/apimachinery from 0.28.3 to 0.29.2 by @dependabot in #1043
- build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #1064
- Add more spans around potentially slow ops by @jonjohnsonjr in #1065
- build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #1066
- build(deps): bump github/codeql-action from 3.24.7 to 3.24.8 by @dependabot in #1067
- Add Harden Runner audit configs by @jedsalazar in #1062
- build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #1072
- ignore Files when generating SBOMs by @imjasonh in #1073
- build(deps): bump github.com/charmbracelet/log from 0.3.2-0.20240205220859-7a3834f9b367 to 0.4.0 by @dependabot in #1074
- build(deps): bump github/codeql-action from 3.24.8 to 3.24.9 by @dependabot in #1075
- build(deps): bump sigs.k8s.io/release-utils from 0.7.7 to 0.8.0 by @dependabot in #1078
- build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in #1077
- build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #1085
- build(deps): bump go.opentelemetry.io/otel from 1.24.0 to 1.25.0 by @dependabot in #1084
- build(deps): bump sigs.k8s.io/release-utils from 0.8.0 to 0.8.1 by @dependabot in #1083
- build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #1081
- build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 by @dependabot in #1080
- Prepare testdata for "apko on top of base image" by @sfc-gh-mhazy in #1076
- build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #1087
- build(deps): bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @dependabot in #1088
- build(deps): bump github/codeql-action from 3.24.10 to 3.25.0 by @dependabot in #1089
- build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 in the go_modules group by @dependabot in #1094
- build(deps): bump github/codeql-action from 3.25.0 to 3.25.1 by @dependabot in #1092
- feat(user): Allow overriding the default shell by @EyeCantCU in #1097
- Base image support in
buildandlockby @sfc-gh-mhazy in #1086 - build(deps): bump github/codeql-action from 3.25.1 to 3.25.2 by @dependabot in #1099
- build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1098
- build(deps): bump github/codeql-action from 3.25.2 to 3.25.3 by @dependabot in #1103
- build(deps): bump go.opentelemetry.io/otel from 1.25.0 to 1.26.0 by @dependabot in #1102
- build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in #1101
- build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1100
- spdx: remove more mentions of files by @imjasonh in #1095
- build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @dependabot in #1104
- build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #1105
- build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #1106
- fix: remove default supplier for index SBOMs by @imjasonh in #1110
New Contributors
- @jedsalazar made their first contribution in #1062
- @sfc-gh-mhazy made their first contribution in #1076
- @EyeCantCU made their first contribution in #1097
Full Changelog: v0.14.0...v0.14.1