oras-project/oras v0.16.0

on GitHub

🚀 ORAS CLI v0.16.0 is available! You can install it by following this guide.

New Features

• BREAKING CHANGE: Migrate to OCI Artifact from ORAS Artifact
  • Upgrade to image-spec v1.0.0-rc.2
  • Upgrade to oras-go v2.0.0-rc.4
  • Auto fallback oras push and oras attach to OCI Image manifest if OCI Artifact manifest is not supported by the remote registry
  • Add --exclude-digest-tags to oras repo tags to exclude tags generated by the Referrers Tag Schema
• Support --platform in oras discover

Bug Fixes

• Cherry pick all bug fixes from https://github.com/oras-project/oras/releases/tag/v0.15.1

Other Changes

• Update dependencies to latest versions
• Improve UX
  • Shorten command names (#667)
    • oras repository --> oras repo. oras repository is demoted to an alias
    • oras repo list --> oras repo ls. oras repo list is demoted to an alias
    • oras repo show-tags --> oras repo tags. oras repo show-tags is demoted to an alias
    • oras copy --> oras cp. oras copy is demoted to an alias
  • Add aliases to existing commands
    • oras manifest get-config is an alias of oras manifest fetch-config
    • oras manifest rm is an alias of oras manifest delete
    • oras blob rm is an alias of oras blob delete
  • BREAKING CHANGE: Update the flag name -y, --yes to -f, --force for oras manifest delete and oras blob delete
  • oras attach prints digest of the subject instead of the input reference

Detailed Commits

• fix: logout specified credential config file if provided by @qweeah in #626
• fix: fix the error handling in manifest push by @yuehaoliang-microsoft in #629
• fix: annotates manifest for attach command by @qweeah in #632
• test(e2e): add E2E test infra by @qweeah in #561
• docs: add issue templates by @FeynmanZhou in #633
• fix: change to use repo instead of repo.manifest because it needs to fetch a blob by @yuehaoliang-microsoft in #637
• build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @dependabot in #642
• ci: run all check CIs against patch PR by @qweeah in #641
• build(deps): bump github.com/docker/cli from 20.10.18+incompatible to 20.10.19+incompatible by @dependabot in #644
• feat!: support oci artifacts by @qweeah in #653
• bump: upgrade golang to 1.19.2 by @qweeah in #657
• build(deps): bump github.com/docker/cli from 20.10.19+incompatible to 20.10.20+incompatible by @dependabot in #648
• fix: use optional plural form by @qweeah in #659
• build(deps): bump github.com/docker/cli from 20.10.20+incompatible to 20.10.21+incompatible by @dependabot in #663
• build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in #661
• feat: support discovering with platform selection by @qweeah in #669
• feat!: support OCI image fallback for oras push and oras attach by @qweeah in #665
• feat: support excluding digest tags by @qweeah in #668
• chore: use short names for repository commands by @qweeah in #670
• fix: only fallback to OCI image when current media type is OCI artifact by @qweeah in #673
• chore: add subject reference into attach output by @qweeah in #671
• feat: add alias for fetch-config by @qweeah in #676
• feat!: alias remove to delete and rename confirmation flag to force by @qweeah in #677
• bump: release 0.16 by @qweeah in #678

Full Changelog: v0.15.0...v0.16.0

Notes

This release was signed with 95BB 6CD4 6CA3 0D2B 9CAE E56C 9F2C D437 A97D CB8F (@shizhMSFT's GPG key) which can be found here.