chainguard-dev/apko v0.17.0

Release v0.17.0

on GitHub

What's Changed

• Simplify the resolution logic to use expandapk.Split by @mattmoor in #1186
• remove remote include feature by @imjasonh in #1191
• build(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by @dependabot in #1187
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #1183
• build(deps): bump go.opentelemetry.io/otel/trace from 1.27.0 to 1.28.0 by @dependabot in #1188
• openssl on alpine(Riscv64) returns a different version causing ci failures by @ajayk in #1194
• index throws nil pointer when no auth set by @ajayk in #1193
• build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 by @dependabot in #1196
• remove os-release from apko config by @imjasonh in #1190
• build(deps): bump sigs.k8s.io/release-utils from 0.8.2 to 0.8.3 by @dependabot in #1197
• build(deps): bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in #1199
• Add build.MultiArch.BuildPackageLists by @jonjohnsonjr in #1201
• Faster NewPkgResolver and GetRepositoryIndexes by @jonjohnsonjr in #1202
• Simplify s6 stuff further by @mattmoor in #1204
• Have the Authenticator support returning errors by @mattmoor in #1205
• Add MergeInto for combining ImageConfigurations by @mattmoor in #1206
• Remove labels from names and URLs in lockfile by @egibs in #1163
• build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #1200
• build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #1208
• build(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 by @dependabot in #1210
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #1203
• build(deps): bump k8s.io/apimachinery from 0.30.2 to 0.30.3 by @dependabot in #1209
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #1212
• build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @dependabot in #1211
• build(deps): bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 by @dependabot in #1213
• copy annotations to config labels by @imjasonh in #1215
• Implement client-side APK discovery in apko by @mattmoor in #1216
• remove the concept of Assertions by @imjasonh in #1214
• begin a new APK client by @luhring in #1218

New Contributors

• @ajayk made their first contribution in #1194
• @egibs made their first contribution in #1163

Full Changelog: v0.16.0...v0.17.0