v0.3.18

Using Bzlmod

Add the following to your MODULE.bazel file:

bazel_dep(name = "rules_img", version = "0.3.18")

For further instructions, see the README.

Using WORKSPACE

Add the following to your WORKSPACE.bazel file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_img",
    sha256 = "b15f44ef2793ca9242801cc3c1f2e6f9c6450719a38a10f90252f82ef21711d5",
    urls = ["https://github.com/bazel-contrib/rules_img/releases/download/v0.3.18/rules_img-v0.3.18.tar.gz"],
)

# Load dependencies
load("@rules_img//img:dependencies.bzl", "rules_img_dependencies")
rules_img_dependencies()

# Initialize Bazel Features
load("@bazel_features//:deps.bzl", "bazel_features_deps")

# Register prebuilt toolchains
load("@rules_img//img:repositories.bzl", "img_register_prebuilt_toolchains")
img_register_prebuilt_toolchains()
register_toolchains("@img_toolchain//:all")

# Register hermetic launcher toolchains
register_toolchains("@hermetic_launcher//launcher/private/prebuilt:all")

# Example: Pull a base image
load("@rules_img//img:pull.bzl", "pull")
pull(
    name = "alpine",
    digest = "sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1",
    registry = "index.docker.io",
    repository = "library/alpine",
    tag = "3.22",
)

For more examples, see the README.

What's Changed

• fix(push): suppress progress bar in persistent-worker mode by @malt3 in #634
• feat: scope credential helpers to registry or remote cache by @malt3 in #635
• img_tool: consolidate image-layout writers into pkg/ocilayout by @malt3 in #636
• feat(load): align image_load API with image_push (registry/repository… by @malt3 in #637
• feat(deploy): add deploy_operations filter to multi_deploy by @malt3 in #638
• feat(deploy): add --sink override to redirect push/load into local artifacts by @malt3 in #639
• feat(deploy): accept compact streams and bare paths in --layer by @malt3 in #640
• chore(renovate): enable dashboard, disable automatic PRs by @malt3 in #641
• feat: sign images in img deploy via external signer plugins by @malt3 in #642
• feat(settings): add additional_image_labels_file label_flag by @malt3 in #644
• chore: various small improvements by @malt3 in #646
• chore(go deps) by @malt3 in #645
• e2e: push to an ephemeral registry and verify cosign/notation signatures by @malt3 in #647
• release(signer): produce and publish signer plugins with Bazel by @malt3 in #648
• feat: push at build time by @malt3 in #649
• harden(bcr): reject archive entries that escape the destination dir by @malt3 in #650
• feat: push all image blobs at build time, split blob/manifest staging repos by @malt3 in #651
• feat(gateway): policy-file authorization for oci-distribution-gateway by @malt3 in #652
• feat(ztoc): add pure-Go SOCI ztoc generation library by @malt3 in #653
• fix(deploy): annotate untagged images with / by @malt3 in #654
• feat(img): centralize registry retry, backoff, and concurrency defaults by @malt3 in #655
• feat(auth): support inline docker config via IMG_DOCKER_CONFIG_INLINE by @malt3 in #656
• auth: add host-scoped environment credentials by @sluongng in #657
• feat(layer): adopt the new memory-efficient runfiles group layout by @malt3 in #658
• feat(soci): add SOCI Index Manifest v2 support by @malt3 in #659

New Contributors

• @sluongng made their first contribution in #657

Full Changelog: v0.3.17...v0.3.18