Skip to content

v0.10.2

Compare
Choose a tag to compare
@saschagrunert saschagrunert released this 19 Jun 07:40
· 317 commits to main since this release
383b924

Changes by Kind

Feature

  • Add osc package for running OpenBuildService CLI (#208, @xmudrii) [SIG Release]
  • Added Recursive option to sign package to be able to sign multi-arch images containing their discrete images. (#193, @saschagrunert) [SIG Release]
  • Added support for SignContainerIdentity option (#220, @saschagrunert) [SIG Release]
  • Default CertIdentityRegexp to ([email protected])|((krel-trust|krel-staging)@k8s-releng-prod.iam.gserviceaccount.com) in default signer options
    • Default CertOidcIssuer to https://accounts.google.com/ in default signer options (#207, @xmudrii) [SIG Release]
  • Move to cosign v2 (#195, @cpanato) [SIG Release]

Other (Cleanup or Flake)

  • Change functions in osc package to take the working directory (#209, @xmudrii) [SIG Release]
  • Require go 1.20 for this package. (#221, @saschagrunert) [SIG Release]

Dependencies

Added

  • chainguard.dev/go-grpc-kit: v0.16.0
  • cloud.google.com/go/profiler: v0.3.1
  • github.com/AdamKorcz/go-fuzz-headers-1: 12e09ab
  • github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.6.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.3.0
  • github.com/Azure/azure-sdk-for-go/sdk/internal: v1.3.0
  • github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys: v0.10.0
  • github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal: v0.7.1
  • github.com/AzureAD/microsoft-authentication-library-for-go: v1.0.0
  • github.com/DataDog/appsec-internal-go: v1.0.0
  • github.com/DataDog/datadog-agent/pkg/obfuscate: v0.45.0-rc.1
  • github.com/DataDog/datadog-agent/pkg/remoteconfig/state: v0.45.0-rc.1
  • github.com/DataDog/datadog-go/v5: v5.3.0
  • github.com/DataDog/go-libddwaf: v1.2.0
  • github.com/DataDog/go-tuf: fork
  • github.com/DataDog/sketches-go: v1.2.1
  • github.com/Masterminds/sprig/v3: v3.2.3
  • github.com/beevik/ntp: v1.0.0
  • github.com/blendle/zapdriver: v1.3.1
  • github.com/brunoscheufler/aws-ecs-metadata-go: b6b31c6
  • github.com/buildkite/agent/v3: v3.48.0
  • github.com/buildkite/bintest/v3: v3.1.1
  • github.com/buildkite/interpolate: 07f35b4
  • github.com/buildkite/roko: v1.1.0
  • github.com/buildkite/shellwords: c3f497d
  • github.com/bytecodealliance/wasmtime-go/v3: v3.0.2
  • github.com/cockroachdb/cockroach-go/v2: v2.3.3
  • github.com/cyphar/filepath-securejoin: v0.2.3
  • github.com/denisbrodbeck/machineid: v1.0.1
  • github.com/digitorus/pkcs7: 001c36b
  • github.com/digitorus/timestamp: ef3b63b
  • github.com/gabriel-vasile/mimetype: v1.4.2
  • github.com/go-chi/chi/v5: v5.0.8
  • github.com/go-jose/go-jose/v3: v3.0.0
  • github.com/go-redis/redismock/v9: v9.0.3
  • github.com/gofrs/flock: v0.8.1
  • github.com/google/go-tpm-tools: v0.3.12
  • github.com/google/go-tpm: v0.3.3
  • github.com/google/go-tspi: v0.3.0
  • github.com/google/s2a-go: v0.1.4
  • github.com/jackc/chunkreader/v2: v2.0.1
  • github.com/jackc/pgconn: v1.12.1
  • github.com/jackc/pgio: v1.0.0
  • github.com/jackc/pgpassfile: v1.0.0
  • github.com/jackc/pgproto3/v2: v2.3.0
  • github.com/jackc/pgservicefile: 2b9c447
  • github.com/jackc/pgtype: v1.11.0
  • github.com/jackc/pgx/v4: v4.16.1
  • github.com/mitchellh/go-wordwrap: v1.0.1
  • github.com/oleiade/reflections: v1.0.1
  • github.com/outcaste-io/ristretto: v0.2.1
  • github.com/peterbourgon/diskv/v3: v3.0.1
  • github.com/petermattis/goid: b0b1615
  • github.com/philhofer/fwd: v1.1.1
  • github.com/puzpuzpuz/xsync/v2: v2.4.1
  • github.com/qri-io/jsonpointer: v0.1.1
  • github.com/qri-io/jsonschema: v0.2.1
  • github.com/redis/go-redis/v9: v9.0.4
  • github.com/sasha-s/go-deadlock: 237a954
  • github.com/schollz/jsonstore: v1.1.0
  • github.com/shopspring/decimal: v1.2.0
  • github.com/sigstore/cosign/v2: 4a2f67e
  • github.com/sigstore/protobuf-specs: v0.1.0
  • github.com/sigstore/sigstore/pkg/signature/kms/aws: v1.6.5
  • github.com/sigstore/sigstore/pkg/signature/kms/azure: v1.6.5
  • github.com/sigstore/sigstore/pkg/signature/kms/gcp: v1.6.5
  • github.com/sigstore/sigstore/pkg/signature/kms/hashivault: v1.6.5
  • github.com/sigstore/timestamp-authority: v1.1.1
  • github.com/smallstep/assert: 82e2b9b
  • github.com/smallstep/go-attestation: e172914
  • github.com/tinylib/msgp: v1.1.6
  • github.com/urfave/negroni: v1.0.0
  • github.com/ysmood/fetchup: v0.2.3
  • github.com/ysmood/got: v0.34.1
  • go.opentelemetry.io/contrib/propagators/aws: v1.17.0
  • go.opentelemetry.io/contrib/propagators/b3: v1.17.0
  • go.opentelemetry.io/contrib/propagators/jaeger: v1.17.0
  • go.opentelemetry.io/contrib/propagators/ot: v1.17.0
  • go4.org/intern: ae77deb
  • go4.org/unsafe/assume-no-moving-gc: 928513b
  • google.golang.org/genproto/googleapis/api: e85fd2c
  • google.golang.org/genproto/googleapis/bytestream: e85fd2c
  • google.golang.org/genproto/googleapis/rpc: e85fd2c
  • gopkg.in/DataDog/dd-trace-go.v1: v1.51.0
  • gopkg.in/retry.v1: v1.0.3
  • inet.af/netaddr: 502d2d6
  • knative.dev/pkg: ee73c93
  • oras.land/oras-go/v2: v2.0.2

Changed

Removed

  • bazil.org/fuse: 65cc252
  • cloud.google.com/go/apikeys: v0.6.0
  • cloud.google.com/go/servicecontrol: v1.11.1
  • cloud.google.com/go/servicemanagement: v1.8.0
  • cloud.google.com/go/serviceusage: v1.6.0
  • code.gitea.io/sdk/gitea: v0.11.3
  • contrib.go.opencensus.io/exporter/aws: 2befc13
  • contrib.go.opencensus.io/exporter/ocagent: v0.5.0
  • contrib.go.opencensus.io/integrations/ocsql: v0.1.4
  • contrib.go.opencensus.io/resource: v0.1.1
  • github.com/Azure/azure-amqp-common-go/v2: v2.1.0
  • github.com/Azure/azure-pipeline-go: v0.2.1
  • github.com/Azure/azure-service-bus-go: v0.9.1
  • github.com/Azure/azure-storage-blob-go: v0.8.0
  • github.com/GoogleCloudPlatform/cloudsql-proxy: e802c2c
  • github.com/Knetic/govaluate: 9aa4983
  • github.com/Shopify/sarama: v1.19.0
  • github.com/Shopify/toxiproxy: v2.1.4+incompatible
  • github.com/VividCortex/gohistogram: v1.0.0
  • github.com/afex/hystrix-go: fa1af6a
  • github.com/alcortesm/tgz: 9c5fe88
  • github.com/alecthomas/kingpin: v2.2.6+incompatible
  • github.com/aokoli/goutils: v1.0.1
  • github.com/apache/beam: v2.28.0+incompatible
  • github.com/apache/thrift: v0.13.0
  • github.com/apex/log: v1.1.4
  • github.com/apex/logs: v0.0.4
  • github.com/aphistic/golf: 02c07f1
  • github.com/aphistic/sweet: v0.2.0
  • github.com/aryann/difflib: e206f87
  • github.com/aws/aws-lambda-go: v1.13.3
  • github.com/aybabtme/rgbterm: cc83f3b
  • github.com/beevik/etree: v1.1.0
  • github.com/blakesmith/ar: 809d437
  • github.com/bradfitz/gomemcache: a41fca8
  • github.com/bytecodealliance/wasmtime-go: v1.0.0
  • github.com/caarlos0/ctrlc: v1.0.0
  • github.com/campoy/unique: 88950e5
  • github.com/casbin/casbin/v2: v2.1.2
  • github.com/cenkalti/backoff: v2.2.1+incompatible
  • github.com/certifi/gocertifi: 2c3bb06
  • github.com/clbanning/x2j: 8252494
  • github.com/cockroachdb/apd: v1.1.0
  • github.com/cockroachdb/datadriven: bf6692d
  • github.com/cockroachdb/errors: v1.2.4
  • github.com/cockroachdb/logtags: eb05cc2
  • github.com/codahale/hdrhistogram: 3a0bb77
  • github.com/coreos/go-etcd: v2.0.0+incompatible
  • github.com/cpuguy83/go-md2man: v1.0.10
  • github.com/devigned/tab: v0.1.1
  • github.com/docker/go-metrics: v0.0.1
  • github.com/eapache/go-resiliency: v1.1.0
  • github.com/eapache/go-xerial-snappy: 776d571
  • github.com/eapache/queue: v1.1.0
  • github.com/edsrzf/mmap-go: v1.0.0
  • github.com/emicklei/go-restful: v2.9.5+incompatible
  • github.com/etcd-io/gofail: ad7f989
  • github.com/flynn/go-shlex: 3f9db97
  • github.com/form3tech-oss/jwt-go: v3.2.5+incompatible
  • github.com/franela/goblin: c9ffbef
  • github.com/franela/goreq: bcd34c9
  • github.com/getkin/kin-openapi: v0.76.0
  • github.com/getsentry/raven-go: v0.2.0
  • github.com/go-kit/log: v0.2.0
  • github.com/godbus/dbus: v4.1.0+incompatible
  • github.com/gogo/googleapis: v1.1.0
  • github.com/golang-jwt/jwt: v3.2.2+incompatible
  • github.com/google/go-github/v28: v28.1.1
  • github.com/google/go-github/v45: v45.2.0
  • github.com/google/go-replayers/grpcreplay: v0.1.0
  • github.com/google/go-replayers/httpreplay: v0.1.0
  • github.com/google/subcommands: v1.0.1
  • github.com/googleapis/gax-go: v2.0.2+incompatible
  • github.com/googleapis/gnostic: v0.5.5
  • github.com/googleapis/go-type-adapters: v1.0.0
  • github.com/gordonklaus/ineffassign: 7953dde
  • github.com/goreleaser/goreleaser: v0.134.0
  • github.com/goreleaser/nfpm: v1.2.1
  • github.com/gorilla/context: v1.1.1
  • github.com/hashicorp/go-plugin: v1.4.5
  • github.com/hashicorp/go-secure-stdlib/mlock: v0.1.2
  • github.com/hashicorp/go-version: v1.6.0
  • github.com/hashicorp/vault/sdk: v0.6.0
  • github.com/hashicorp/yamux: v0.1.1
  • github.com/hudl/fargo: v1.3.0
  • github.com/iancoleman/strcase: v0.2.0
  • github.com/influxdata/influxdb1-client: 8bf82d3
  • github.com/jarcoal/httpmock: v1.0.5
  • github.com/jellydator/ttlcache/v2: v2.11.1
  • github.com/jhump/gopoet: v0.1.0
  • github.com/jhump/goprotoc: v0.5.0
  • github.com/jpillora/backoff: v1.0.0
  • github.com/juju/ratelimit: v1.0.1
  • github.com/lightstep/lightstep-tracer-common/golang/gogo: bc2310a
  • github.com/lightstep/lightstep-tracer-go: v0.18.1
  • github.com/linkedin/goavro: v2.1.0+incompatible
  • github.com/lyft/protoc-gen-star: v0.6.1
  • github.com/lyft/protoc-gen-validate: v0.0.13
  • github.com/mattn/go-ieproxy: 91bb50d
  • github.com/mattn/go-shellwords: v1.0.10
  • github.com/mediocregopher/radix/v4: v4.1.1
  • github.com/mgutz/ansi: 9520e82
  • github.com/mohae/deepcopy: c48cc78
  • github.com/nats-io/jwt: v0.3.2
  • github.com/nats-io/nats-server/v2: v2.1.2
  • github.com/nats-io/nats.go: v1.9.1
  • github.com/nats-io/nkeys: v0.1.3
  • github.com/nats-io/nuid: v1.0.1
  • github.com/nightlyone/lockfile: v1.0.0
  • github.com/nishanths/predeclared: 86fad75
  • github.com/oklog/oklog: v0.3.2
  • github.com/oklog/run: v1.1.0
  • github.com/op/go-logging: 970db52
  • github.com/opentracing-contrib/go-observer: a52f234
  • github.com/opentracing/basictracer-go: v1.0.0
  • github.com/openzipkin-contrib/zipkin-go-opentracing: v0.4.5
  • github.com/openzipkin/zipkin-go: v0.2.2
  • github.com/otiai10/curr: v1.0.0
  • github.com/otiai10/mint: v1.3.1
  • github.com/pact-foundation/pact-go: v1.0.4
  • github.com/pelletier/go-buffruneio: v0.2.0
  • github.com/performancecopilot/speed: v3.0.0+incompatible
  • github.com/pierrec/lz4: v2.6.1+incompatible
  • github.com/pkg/profile: v1.2.1
  • github.com/qur/ar: 282534b
  • github.com/samuel/go-zookeeper: 2cc03de
  • github.com/sassoftware/go-rpmutils: v0.1.1
  • github.com/satori/go.uuid: v1.2.0
  • github.com/sigstore/cosign: v1.13.1
  • github.com/smartystreets/go-aws-auth: 0c1422d
  • github.com/smartystreets/gunit: v1.0.0
  • github.com/sony/gobreaker: v0.4.1
  • github.com/streadway/amqp: v1.0.0
  • github.com/streadway/handy: d5acb31
  • github.com/tent/canonical-json-go: 96e4ba3
  • github.com/tilinna/clock: v1.1.0
  • github.com/tj/assert: 0180943
  • github.com/tj/go-elastic: 36157cb
  • github.com/tj/go-kinesis: 08b17f5
  • github.com/tj/go-spin: v1.1.0
  • github.com/ugorji/go/codec: d75b2dc
  • go.etcd.io/etcd: 3cf2f69
  • go.opentelemetry.io/contrib: v1.6.0
  • go.opentelemetry.io/otel/exporters/otlp: v0.20.0
  • go.opentelemetry.io/otel/oteltest: v0.20.0
  • go.opentelemetry.io/otel/sdk/export/metric: v0.20.0
  • go.opentelemetry.io/otel/sdk/metric: v0.20.0
  • go.uber.org/tools: 2cfd321
  • golang.org/x/arch: v0.1.0
  • gopkg.in/gcfg.v1: v1.2.3
  • gopkg.in/linkedin/goavro.v1: v1.0.5
  • gopkg.in/src-d/go-git-fixtures.v3: v3.5.0
  • oras.land/oras-go: v1.2.0
  • pack.ag/amqp: v0.11.2
  • rsc.io/pdf: v0.1.1
  • sourcegraph.com/sourcegraph/appdash: ebfcffb