chore: sync with upstream google/go-containerregistry - #21

Open

ec-automation[bot] wants to merge 65 commits into

mainfrom

sync/upstream-2026-09-14-69

Commits on Jun 17, 2026

internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)
amarkdotdev
authored
e963497
fix(transport): apply refreshed bearer token after cross-host redirect (#2337)
64johnlee
authored
97a8a17
build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)
dependabot[bot]
authored
5baa399
fix(tarball): normalize paths when matching files (#2334)
bstoll
authored
09fe1e5
transport: do not re-attach bearer token after cross-host redirect (#2349)
evilgensec
authored
da61d86
Bump go version to 1.26.4 (#2350)
Jared
authored
c68d899

Commits on Jun 24, 2026

build(deps): bump the go-deps group across 1 directory with 3 updates (#2353)
dependabot[bot]
authored
e8b2b9e

Commits on Jul 23, 2026

Commits on Jul 24, 2026

Commits on Jul 25, 2026

Commits on Jul 28, 2026

authn: read Podman auth from XDG config (#2379)
vigneshakaviki
authored
06774c0

Commits on Jul 29, 2026

Commits on Jul 30, 2026

mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract (#2372)
sadmanf
authored
4d13d53
tarball: use correct file extension for zstd/uncompressed (#2382)
milas
authored
d04bf7d
build(deps): bump github.com/moby/moby/client (#2380)
dependabot[bot]
authored
8a97709
actions: update actions to be pinned by hash (#2384)
Jared
authored
eed9a20
actions: fix unformatted action (#2385)
Jared
authored
ab819b6

Commits on Jul 31, 2026

actions: reformat ALL actions (#2386)
Jared
authored
ec2e586
Bump go version to 1.26.5 (#2388)
Jared
authored
2ea098f

Commits on Aug 5, 2026

actions: pin slsa generator version following linter exception (#2395)
Jared
authored
7775aab
fix: prevent data race on scope refreshes within remote.writer (#2396)

Jared
and
mzihlmann
authored
43cc3e8
fix: remove '.' from unsafe path prefixes (#2400)
Jared
authored
2a4447d
build(deps): bump the actions group with 3 updates (#2398)
dependabot[bot]
authored
7b32099

Commits on Aug 11, 2026

mutate: let Time and Canonical take tarball.LayerOption (#2403)
mzihlmann
authored
d3bca10

Commits on Aug 18, 2026

build: add multi-architecture Cloud Build configurations for crane, gcrane, and krane (#2412)
tprussak
authored
97815aa
remote: resolve push-check credentials against the repository (#2411)
mzihlmann
authored
82cc428
Allow single-character repository paths (#2407)
Sergey Sannikov
authored
4cb3583
fix: add missing substitutions and workspace cleanup to new build files (#2413)
tprussak
authored
3f47f91
remote: retry failed Puller and Pusher initialization (#2406)
iahsanGill
authored
66dd454

Commits on Aug 19, 2026

Commits on Aug 20, 2026

fix(build): correct Cloud Build schema options and source provenance hash (#2417)
tprussak
authored
c6b5acd

Commits on Aug 21, 2026

fix(build): unify new build flow into cloudbuild_v2.yaml (#2419)
tprussak
authored
3f4ff3c

Commits on Aug 28, 2026

Reject non-canonical IP literals in all SSRF guards (#2426)
shaggyinsomniac
authored
2570979

Commits on Aug 31, 2026

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Commits on Sep 4, 2026

remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
codysoyland
authored
8a72a42

Commits on Sep 9, 2026

Commits on Sep 11, 2026

fix(build): escape PATH variable in cloudbuild_v2.yaml (#2445)
tprussak
authored
0c8bedb

Commits on Sep 14, 2026

Merge remote-tracking branch 'upstream/main' into sync/upstream-2026-09-14-69
ec-automation[bot]
committed
b4dd3ba