v0.3.1

Bug Fixes

• bind hardlinks to the file they name when indexing a layer [PR #670 @wagoodman]

Dependencies

21 dependency changes (17 updated, 1 added, 3 removed). 2 vulnerabilities remediated.

🟢 Remediated (2)

• GHSA-hrxh-6v49-42gf (High) — google.golang.org/grpc
• GO-2026-5841 (Unknown) — github.com/klauspost/compress

Updated (17 packages)

• github.com/containerd/containerd/v2 v2.3.3 → v2.3.4
• github.com/containerd/platforms v1.0.0-rc.4 → v1.0.0-rc.5
• github.com/docker/cli v29.6.1+incompatible → v29.7.2+incompatible
• github.com/docker/go-connections v0.7.0 → v0.8.1
• github.com/gabriel-vasile/mimetype v1.4.13 → v1.4.15
• github.com/google/go-containerregistry v0.21.7 → v0.21.9
• github.com/klauspost/compress v1.18.6 → v1.19.1 (🟢 remediated GO-2026-5841)
• github.com/moby/moby/client v0.5.0 → v0.5.1
• github.com/stretchr/objx v0.5.2 → v0.5.3
• github.com/stretchr/testify v1.11.1 → v1.12.1
• golang.org/x/crypto v0.54.0 → v0.55.0
• golang.org/x/mod v0.38.0 → v0.39.0
• golang.org/x/net v0.57.0 → v0.58.0
• golang.org/x/text v0.40.0 → v0.41.0
• golang.org/x/tools v0.48.0 → v0.49.0
• google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b → v0.0.0-afd174a
• google.golang.org/grpc v1.80.0 → v1.82.1 (🟢 remediated GHSA-hrxh-6v49-42gf)

Added (1 package)

• go.yaml.in/yaml/v3 v3.0.5

Removed (3 packages)

• github.com/davecgh/go-spew v1.1.2-0.d8f796a
• gopkg.in/check.v1 v1.0.0-10cb982
• gopkg.in/yaml.v3 v3.0.1

(Full Changelog)