github google/go-containerregistry v0.21.7

9 hours ago

What's Changed

  • tarball: return error instead of panicking on missing rootfs.diff_ids by @iahsanGill in #2304
  • gcrane: honor --platform flag in copy by @iahsanGill in #2307
  • mutate: verify layer digests in Extract and Time by @momenashrafff in #2303
  • tarball: close layer readers during Write by @nandbhat in #2308
  • build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2311
  • build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @dependabot[bot] in #2312
  • BUGFIX: Fail with error when read exceeds maximum by @inteon in #2328
  • build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2327
  • fix(name): anchor loopback registry detection by @rohan-patnaik in #2314
  • Reject symlinks in OCI layout blobs by @mosskappa in #2306
  • fix(crane): avoid creating export tar on pull failure by @Haihan-Jiang in #2318
  • feat(kubernetes): allow ignoring pull secrets by @rohan-patnaik in #2315
  • fix(name): preserve localhost registry references by @rohan-patnaik in #2316
  • pkg/registry: export ErrNotFound by @malt3 in #2176
  • pkg/registry: export RedirectError by @malt3 in #2177
  • build(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #2343
  • build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2344
  • fix: prevent SSRF in google.List() pagination by @tufstraka in #2332
  • internal/gzip: fix goroutine leak in ReadCloserLevel by @amarkdotdev in #2347
  • fix(transport): apply refreshed bearer token after cross-host redirect by @64johnlee in #2337
  • build(deps): bump the go-deps group across 3 directories with 4 updates by @dependabot[bot] in #2348
  • fix(tarball): normalize paths when matching files by @bstoll in #2334
  • transport: do not re-attach bearer token after cross-host redirect by @evilgensec in #2349
  • Bump CI go version to 1.26.4 by @Subserial in #2350

New Contributors

Full Changelog: v0.21.6...v0.21.7

Don't miss a new go-containerregistry release

NewReleases is sending notifications on new releases.