github google/go-containerregistry v0.21.8

3 hours ago

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

  • build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2353
  • build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in #2367
  • build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in #2368
  • build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in #2363
  • build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in #2377
  • build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #2375
  • Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in #2330
  • feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in #2358
  • Document tag and digest reference semantics by @Haihan-Jiang in #2325
  • remote: release pull limiter slot when body is read to EOF by @knQzx in #2373
  • tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in #2370
  • authn: read Podman auth from XDG config by @vigneshakaviki in #2379
  • transport: per-host bearer token exchange on cross-host redirect by @amitzig in #2360
  • mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in #2371
  • fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in #2356
  • feat(remote): add WithReferrersTagFallback option by @kevinmdavis in #2366
  • mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in #2372
  • tarball: use correct file extension for zstd/uncompressed by @milas in #2382
  • build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in #2380
  • actions: update actions to be pinned by hash by @Subserial in #2384
  • Bump go version to 1.26.5 by @Subserial in #2388

New Contributors

Full Changelog: v0.21.7...v0.21.8

Don't miss a new go-containerregistry release

NewReleases is sending notifications on new releases.