What's Changed
Security
- golang.org/x/crypto 0.44.0: CVE-2025-47914 CVE-2025-58181
Usability
- fix harbor authentication: #369
Maintenance
- chore(deps): bump github.com/moby/moby/api from 1.52.0-beta.4 to 1.52.0: #367 #377
- chore(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0: #374
- chore(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0: #373
- chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.10.1 to 0.11.0: #376
- chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.31.17 to 1.31.20: #375 #383 #386
- chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.20.4 to 1.20.7: #375 #383 #386
- chore(deps): bump google.golang.org/api from 0.255.0 to 0.256.0: #384
- chore(deps): bump golang.org/x/net from 0.46.0 to 0.47.0: #385
- chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.90.0 to 1.90.2: #383 #386
- chore(deps): bump github.com/moby/buildkit from 0.25.2 to 0.26.1: #387 #395
- chore(deps): bump cloud.google.com/go/storage from 1.57.1 to 1.57.2: #395
- chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the actions group: #396
- chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0: #397
- chore(deps): bump actions/setup-go from 6.0.0 to 6.1.0 in the actions group: #398
- chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.39.6 to 1.40.0: #401
Fork Related
- update security overview: #366
- ci: rework, use GHCR as primary, separate dev builds from release: by @babs in #368 #371
- readd maximize disk space: #392
Refactorings
- replace github.com/pkg/errors with stdlib errors: by @BobDu in #370
- staticcheck: global aws endpoint resolver is deprecated: #378
- staticcheck: archive.Compression is deprecated: #380
- staticcheck: xattrs is deprecated: #379
- unittests should call makeKanikoStages directly: #356
- staticcheck: code quality: #372