IMPORTANT: Please read
This release contains an important security patch. Users are recommended to upgrade immediately.
Please see the security advisory for more information: GHSA-g5v4-5x39-vwhx
This release was signed with E97F 9DA5 AE2E 39CF 48A1 42B7 852A 7470 A39F B81D (@jdolitsky's GPG key) which can be found here.
Changelog
96cd904 Merge pull request from GHSA-g5v4-5x39-vwhx
200d032 maint: bump internal version to 0.9.0
ccd6d00 maint: fix makefile signatures
4891e69 maint: prep for v0.9.0 release
a71cd72 use armored signatures (#210)
ee4d00f prep for v0.9.0 release (#209)
07b7182 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#206)
d3683ca Fix pkg/auth/docker test (#204)
9a978bb oras pull with cache (#203)
50141da Bump github.com/containerd/containerd from 1.4.1 to 1.4.3 (#202)
9555bb8 add multireader (#199)
0bffdbc add optional decompressstore (#198)
f7447b4 maint: update CI branch to main
a64b0ac Bump github.com/containerd/containerd from 1.3.2 to 1.4.1 (#190)
b489434 Bump github.com/spf13/cobra from 0.0.5 to 0.0.7 (#189)
63f4762 Bump github.com/stretchr/testify from 1.4.0 to 1.6.1 (#188)
da7584b Bump github.com/sirupsen/logrus from 1.4.2 to 1.7.0 (#187)
ff65769 Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0 (#186)
f1caa17 prevent anyone from accidentally setting the blocksize to zero (#197)
d2037e9 Fix broken OCI blog link in readme (#195)
2ca9464 options to content writers, including pre-providing the input and output hashes (#192)
4cae1db gunzip and untar passthrough writers (#191)
79a6cf6 chore(deps): add dependabot.yml (#185)
d1f055b create pass-through writer and iowriter (#182)
6414398 add gar doc (#184)
78a9b6b move reporting of status to lib (#179)
ad8a2d6 Add GitHub Actions CI (#183)
73b72c5 bump up version of docker depdendency (#180)
eeb3b5f docs: add ECR docs (#174)
d19ad98 Remove dependency on k8s.io/kubernetes (#175)
e68c514 Refactor docker/NewClient to use early return (#169)
3a7c320 update doc for go mod (#168)
c4facb5 Readme content updates, prepping for OCI adoption (#164)
2f7ca83 Proposal to add Vincent Batts as a maintainer of ORAS (#163)
16f59e3 reducing maintainers (#162)
e227ad1 fix typo in BUILDING.md (#158)
19a0d44 Allow empty artifact (#154)
fb588f7 Enable ARM64 linux builds. (#152)