Skip to content

Releases: oras-project/oras-go

v1.2.6

24 Jul 08:07
33602cb
Compare
Choose a tag to compare

Important

v1.2.6 now requires Go 1.22.4 due to updated dependencies.

What's Changed

  • build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in #707
  • build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #705
  • build(deps): bump github.com/docker/cli from 25.0.1+incompatible to 25.0.3+incompatible by @dependabot in #706
  • build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0 by @dependabot in #719
  • build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #718
  • build: update to Go 1.19 by @wangxiaoxuan273 in #723
  • build(deps): bump github.com/docker/docker from 25.0.1+incompatible to 25.0.4+incompatible by @dependabot in #722
  • build(deps): bump github.com/docker/cli from 25.0.3+incompatible to 25.0.4+incompatible by @dependabot in #721
  • build: update to Go 1.20 by @wangxiaoxuan273 in #724
  • build(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20221208165359-362910506bc2 to 3.0.0-alpha.1 by @dependabot in #702
  • build(deps): bump github.com/docker/cli from 25.0.4+incompatible to 26.0.0+incompatible by @dependabot in #733
  • build(deps): bump github.com/docker/docker from 25.0.4+incompatible to 26.0.0+incompatible by @dependabot in #732
  • build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #736
  • build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in #737
  • build(deps): bump github.com/docker/cli from 26.0.0+incompatible to 26.0.1+incompatible by @dependabot in #743
  • build(deps): bump github.com/docker/docker from 26.0.0+incompatible to 26.0.1+incompatible by @dependabot in #742
  • build(deps): bump github.com/docker/docker from 26.0.1+incompatible to 26.1.0+incompatible by @dependabot in #746
  • build(deps): bump github.com/docker/cli from 26.0.1+incompatible to 26.1.0+incompatible by @dependabot in #747
  • chore: fix logo in v1 README by @Wwwsylvia in #754
  • build: upgrade go version to v1.21 by @Wwwsylvia in #755
  • build(deps): bump github.com/docker/docker from 26.1.0+incompatible to 26.1.1+incompatible by @dependabot in #758
  • build(deps): bump github.com/docker/cli from 26.1.0+incompatible to 26.1.1+incompatible by @dependabot in #760
  • build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #761
  • build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.16 by @dependabot in #759
  • build(deps): bump github.com/docker/docker from 26.1.1+incompatible to 26.1.2+incompatible by @dependabot in #762
  • build(deps): bump github.com/docker/cli from 26.1.1+incompatible to 26.1.2+incompatible by @dependabot in #763
  • build(deps): bump github.com/docker/docker from 26.1.2+incompatible to 26.1.3+incompatible by @dependabot in #765
  • build(deps): bump github.com/docker/cli from 26.1.2+incompatible to 26.1.3+incompatible by @dependabot in #766
  • build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 by @dependabot in #767
  • build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 by @dependabot in #773
  • build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 by @dependabot in #770
  • build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #776
  • build(deps): bump github.com/docker/cli from 26.1.3+incompatible to 27.0.2+incompatible by @dependabot in #782
  • build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 27.0.2+incompatible by @dependabot in #783
  • build(deps): bump github.com/docker/docker from 27.0.2+incompatible to 27.0.3+incompatible by @dependabot in #784
  • build(deps): bump github.com/docker/cli from 27.0.2+incompatible to 27.0.3+incompatible by @dependabot in #785
  • build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #787
  • build(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.19 by @dependabot in #786
  • build(go): upgrade go version to v1.22 by @Wwwsylvia in #790
  • build(deps): bump github.com/distribution/distribution/v3 from 3.0.0-alpha.1 to 3.0.0-beta.1 by @Wwwsylvia in #791
  • build(deps): bump github.com/containerd/containerd from 1.7.19 to 1.7.20 by @dependabot in #792
  • build(deps): bump github.com/docker/docker from 27.0.3+incompatible to 27.1.0+incompatible by @dependabot in #794
  • build(deps): bump github.com/docker/cli from 27.0.3+incompatible to 27.1.0+incompatible by @dependabot in #795

Full Changelog: v1.2.5...v1.2.6

v2.5.0

22 Mar 08:09
9b6f321
Compare
Choose a tag to compare

Tip

Upgrade to v2.5.0 for optimal performance when compiled with Go 1.22 or later.

Warning

v2.5.0 does not compile with Go 1.20.x or earlier.

New Features

Deprecation

  • oras.PackManifestVersion1_1_RC4 is deprecated and not recommended for future use. Use oras.PackManifestVersion1_1 instead.

Bug Fixes

Other Changes

  • Update the Go support window to [1.21, 1.22]
  • Update unit tests and examples
  • Improve performance

Detailed Commits

New Contributors

Full Changelog: v2.4.0...v2.5.0

v2.4.0

30 Jan 05:43
850a247
Compare
Choose a tag to compare

Breaking Changes

Warning

There are no API changes in oras-go.
However, when pushing and deleting manifests with a subject field, as well as querying the Referrers API, registries that implement older versions of distribution-spec may be considered as not supporting the Referrers API. In such cases, the Referrers tag schema will be used instead.

Known compatible registries:

New Features

Performance Improvements

  • Improve authorization token caching
    • Support per-host scope hints, fixing #581
    • Introduce auth.NewSingleContextCache that creates a host-based cache for optimizing the auth flow for non-compliant registries
  • Optimize Copy efficiency

Bug Fixes

  • Fix #692: index or manifest list without the OPTIONAL field platform cause panic (#695)

Other Changes

  • Improve error messages and examples
  • Include changes in v2.3.1

Detailed Commits

New Contributors

Full Changelog: v2.3.0...v2.4.0

v1.2.5

29 Jan 08:46
9d9e2cb
Compare
Choose a tag to compare

Important

types.AuthConfig is moved to registry.AuthConfig in docker/docker v25.0.0. Although there is no public API change on oras-go side, it may still break users if they are using oras-go v1 along with old versions of docker/docker (see #678).

What's Changed

  • build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 by @dependabot in #613
  • build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 by @dependabot in #612
  • build(deps): bump github.com/docker/distribution from 2.8.2+incompatible to 2.8.3+incompatible by @dependabot in #610
  • build(deps): bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in #630
  • build(deps): bump github.com/docker/cli from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in #629
  • build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #638
  • build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 by @dependabot in #639
  • build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @dependabot in #642
  • build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0 by @dependabot in #649
  • build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #660
  • build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 by @dependabot in #668
  • build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0 by @dependabot in #673
  • build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0 by @dependabot in #672
  • fix: get rid of deprecated types.AuthConfig by @ilya-lesikov in #678
  • build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc6 by @Wwwsylvia in #686
  • build(deps): bump github.com/docker/cli from 24.0.7+incompatible to 25.0.0+incompatible by @dependabot in #688
  • build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 25.0.0+incompatible by @dependabot in #689
  • build(deps): bump github.com/docker/docker from 25.0.0+incompatible to 25.0.1+incompatible by @dependabot in #693
  • build(deps): bump github.com/docker/cli from 25.0.0+incompatible to 25.0.1+incompatible by @dependabot in #694

New Contributors

Full Changelog: v1.2.4...v1.2.5

v2.3.1

23 Oct 07:14
f296072
Compare
Choose a tag to compare

Bug Fixes

  • Fix #592: Referrers tag index is not updated when all referrers are removed and GC is skipped
  • Fix #600: sibling() is copying a sync.Mutex
  • Fix #552: OnCopySkipped is called unexpectedly on root node when using oras.Copy

Other Changes

  • Update the Go support window to [1.20, 1.21] (#587)
  • Upgrade image-spec to v1.1.0-rc5 (#615)
  • Backport #618: Optimize the authentication workflow for Repository.Manifests().Delete() (#623)

Detailed Commits

New Contributors

Full Changelog: v2.3.0...v2.3.1

v1.2.4

18 Sep 07:42
01856bf
Compare
Choose a tag to compare

Warning

registry.Service has been changed from an interface to a struct in docker/docker v24.0.2. While this change does not affect the public API of oras-go v1, it may cause issues for users who are using oras-go v1 along with older versions of docker/docker (see #527).

What's Changed

  • build(deps): bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible by @dependabot in #474
  • build(deps): bump github.com/docker/docker from 23.0.1+incompatible to 23.0.2+incompatible by @dependabot in #473
  • build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #480
  • build(deps): bump github.com/docker/docker from 23.0.2+incompatible to 23.0.3+incompatible by @dependabot in #478
  • build(deps): bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible by @dependabot in #477
  • build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #475
  • build(deps): bump github.com/docker/cli from 23.0.3+incompatible to 23.0.5+incompatible by @dependabot in #488
  • build(deps): bump github.com/docker/docker from 23.0.3+incompatible to 23.0.5+incompatible by @dependabot in #489
  • build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0 by @dependabot in #499
  • build(deps): bump github.com/docker/docker from 23.0.5+incompatible to 23.0.6+incompatible by @dependabot in #501
  • build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in #503
  • build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1 by @dependabot in #505
  • build(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible by @dependabot in #506
  • build(deps): bump github.com/docker/cli from 23.0.5+incompatible to 23.0.6+incompatible by @dependabot in #502
  • build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in #509
  • build(deps): bump github.com/docker/cli from 23.0.6+incompatible to 24.0.2+incompatible by @dependabot in #516
  • build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #511
  • build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in #518
  • build(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 by @dependabot in #523
  • build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in #521
  • build(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 by @dependabot in #525
  • build(deps): bump github.com/containerd/containerd from 1.7.1 to 1.7.2 by @dependabot in #522
  • deps: update docker/docker to v24.0.2 (v1) by @dtrudg in #527
  • build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc2.0.20221005185240-3a7f492d3f1b to 1.1.0-rc4 by @dependabot in #529
  • build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 by @dependabot in #544
  • build(deps): bump github.com/docker/docker from 24.0.2+incompatible to 24.0.3+incompatible by @dependabot in #546
  • build(deps): bump github.com/docker/cli from 24.0.2+incompatible to 24.0.4+incompatible by @dependabot in #547
  • build(deps): bump github.com/docker/docker from 24.0.3+incompatible to 24.0.4+incompatible by @dependabot in #549
  • build(deps): bump github.com/docker/docker from 24.0.4+incompatible to 24.0.5+incompatible by @dependabot in #555
  • build(deps): bump github.com/docker/cli from 24.0.4+incompatible to 24.0.5+incompatible by @dependabot in #556
  • build(deps): bump github.com/containerd/containerd from 1.7.2 to 1.7.3 by @dependabot in #559
  • build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 by @dependabot in #567
  • build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.4 by @dependabot in #575
  • build(deps): bump github.com/containerd/containerd from 1.7.4 to 1.7.5 by @dependabot in #578
  • build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 by @dependabot in #588
  • build(deps): bump github.com/docker/cli from 24.0.5+incompatible to 24.0.6+incompatible by @dependabot in #590
  • build(deps): bump github.com/docker/docker from 24.0.5+incompatible to 24.0.6+incompatible by @dependabot in #591
  • build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6 by @dependabot in #595
  • build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc4 to 1.1.0-rc5 by @dependabot in #596

New Contributors

Full Changelog: v1.2.3...v1.2.4

v2.3.0

30 Aug 03:35
47d028a
Compare
Choose a tag to compare

New Features

  • Conform to image-spec v1.1.0-rc4 and distribution-spec v1.1.0-rc3, while remaining compatible with image-spec v1.1.0-rc2 and distribution-spec v1.1.0-rc1 (see #494 for more details)
    • Support handling Image Index with a subject
    • Add oras.PackManifest that supports packing Image Manifest version 1.0 and version 1.1.0-rc4, as well as media type validation
    • Add Repository.HandleWarning that can be used to handle warnings returned by the remote registry
    • Update the implementation of Referrers API to support the "OCI-Filters-Applied" response header
    • Update the implementation of pushing manifests with subject to support the "OCI-Subject" response header
  • Add Repository.SkipReferrersGC that allows skipping deleting dangling referrers index when referrers tag schema is utilized

Deprecation

  • oras.Pack is deprecated and not recommended for future use. Use oras.PackManifest instead.

Other Changes

  • Improve documentation and examples

Detailed Commits

  • feat: add option to skip referrers GC by @qweeah in #515
  • feat: support Image Index with a subject by @Wwwsylvia in #548
  • feat: add a PackOption to support packing image manifests that conform to image-spec v1.1.0-rc4 by @Wwwsylvia in #550
  • feat: update Referrers API for distribution-spec v1.1.0-rc3 by @Wwwsylvia in #553
  • feat: update the implementation of pushing manifest for distribution-spec v1.1.0-rc3 by @Wwwsylvia in #557
  • feat: update the implementation of deleting manifest for distribution-spec v1.1.0-rc3 by @Wwwsylvia in #558
  • docs: update links by @Wwwsylvia in #563
  • feat: report warnings by @Wwwsylvia in #560
  • docs: add e2e examples for oras-go by @wangxiaoxuan273 in #561
  • docs: display larger example by @wangxiaoxuan273 in #564
  • fix: pack should not set artifactType when config is specified by @Wwwsylvia in #565
  • build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.5.0 by @dependabot in #569
  • refactor: add PackManifest and deprecate Pack by @Wwwsylvia in #570
  • refactor: refactor unexported pack methods by @Wwwsylvia in #573
  • feat: validate input media type for oras.PackManifest by @Wwwsylvia in #574

Full Changelog: v2.2.1...v2.3.0

v2.2.1

05 Jul 08:10
Compare
Choose a tag to compare

Bug Fixes

  • Fix the bug where the "blobs" directory was not being ensured during the initialization of oci.Store (#520)

Other Changes

  • Improve error messages
  • Upgrade image-spec to v1.1.0-rc4 to mitigate the missing annotation keys issue

Note: oras-go remains on distribution-spec v1.1.0-rc1 and has not implemented v1.1.0-rc2 yet.

Detailed Commits

  • build(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 by @dependabot in #524
  • fix(oci): create blobs dir and define blobs dir name constant by @sparr in #520
  • fix: improve errors for ReadAll and loadIndexfile by @sparr in #526
  • refactor: upgrade go mod to image-spec v1.1.0-rc4 and fix the missing types by @Wwwsylvia in #536
  • chore: enable workflows for release branches by @Wwwsylvia in #537

New Contributors

Full Changelog: v2.2.0...v2.2.1

v2.2.0

25 May 03:26
0e20275
Compare
Choose a tag to compare

New Features

  • Support mounting a blob from one repository to another in the same remote registry

Bug Fixes

Detailed Commits

  • build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0 by @dependabot in #498
  • feat(registry/remote): implement Mount by @rogpeppe in #500
  • fix: add special handling for "docker.io" in StaticCredential() by @Wwwsylvia in #504

New Contributors

Full Changelog: v2.1.0...v2.2.0

v2.1.0

05 May 03:45
8aed964
Compare
Choose a tag to compare

New Features

  • Introduce remote.ReferrersError in case there is an error in updating the referrers index when the referrers tag schema is applied
    • Here is an example to ignore referrer index deletion error during push a referrer manifest.

Other Changes

Note oras-go remains on distribution-spec v1.1.0-rc1 and has not implemented v1.1.0-rc.2 yet.

Detailed Commits

Full Changelog: v2.0.2...v2.1.0