build(deps): bump chainguard.dev/apko from 1.2.33 to 1.2.42

[dependabot]

Bumps chainguard.dev/apko from 1.2.33 to 1.2.42.

Release notes

Sourced from chainguard.dev/apko's releases.

Release v1.2.42

Changelog

• 7cb86096834d264cd5a8d006275201c6e5f45eb3 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.32 to 1.6.33 (#2438)
• 713d278889607519d2b66e1e5fe712ec598fccf3 build(deps): bump chainguard.dev/sdk from 0.1.212 to 0.1.213 (#2437)
• ac58b468d8b98b171d825fb4a0b6789390d8dd8d build(deps): bump github.com/google/go-containerregistry from 0.21.9 to 0.22.0 (#2436)
• 055231b513c5df6f425703d7549df49e8fe6e88b sbom: make internal SPDX relationships reproducible (#2439)

Release v1.2.41

Changelog

• 326edceed8d0f8987cde35623be734eadf0cdcc3 apk: expose cache metrics (#2435)
• d7ffba39ce3a96739af261ced2300c4a9d861d55 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.31 to 1.6.32 (#2421)
• aeedd74f2113205a720e9c414df18ca1a21fb2c1 build(deps): bump chainguard.dev/sdk from 0.1.197 to 0.1.204 (#2425)
• c0b1316becd4928e7b7a4cb9122e3c9725fe0df3 build(deps): bump chainguard.dev/sdk from 0.1.204 to 0.1.210 (#2428)
• c89724f244e9d41f5e14cc7a5f3d0bd08a82128e build(deps): bump chainguard.dev/sdk from 0.1.210 to 0.1.212 (#2434)
• a2e35acdf791159eac2e1ef9e0b749af605e2535 build(deps): bump github.com/package-url/packageurl-go from 0.1.6 to 0.1.7 (#2430)
• e202915336e55f7d4b6f464f77bc334726d4c66b build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#2419)
• 5eab44e4b31ca569b6c08feda482ca3825934aae build(deps): bump go.step.sm/crypto from 0.88.0 to 0.89.0 (#2424)
• de11e492797f8f0094be458cf435aa4d4bd111fb build(deps): bump k8s.io/apimachinery from 0.36.3 to 0.36.4 (#2429)
• 1520c603b2f2df983f5ee06af19d0b87b41b41de build(deps): bump step-security/action-actionlint from 1.72.0 to 1.73.1 (#2420)
• 51d37b413dd5ab8d43f7ea888f701fc87088f517 build(deps): bump the codeql group with 2 updates (#2431)
• 883c5ad1e3036eebfb75efb5e554976db101493d fix(apk): stop racing on the shared indexOpts authenticator (#2432)
• 6a223c20c6c14015fdc9554e8ff385e22c5ac4fb go1.27 (#2427)

Release v1.2.40

Changelog

• d1b5d5ec7633ad7288e5841b38fc8103a9773436 erofs: add 'apko erofs mount' and 'apko erofs umount' (#2415)

Release v1.2.39

Changelog

• 351252d5bbe9f14fa4c749b9a724eb6a126e37f4 build: make WithAnnotations and WithFormat order-independent (#2413)
• 302ff3cffc2857291822925deee87d389b4ba6ad erofs: add a privileged CI job that mounts a layer (#2414)
• 25f7e6817db2349ac709edae80f5c6be3056b07e fix(oci): tolerate an unreadable config when building the index (#2416)

apko 1.2.38

What's Changed

• build(deps): bump chainguard.dev/sdk from 0.1.184 to 0.1.191 by @​dependabot[bot] in chainguard-dev/apko#2398
• build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @​dependabot[bot] in chainguard-dev/apko#2401
• build(deps): bump google.golang.org/api from 0.292.0 to 0.293.0 by @​dependabot[bot] in chainguard-dev/apko#2402
• build(deps): bump the codeql group with 2 updates by @​dependabot[bot] in chainguard-dev/apko#2404
• build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 by @​dependabot[bot] in chainguard-dev/apko#2405
• build(deps): bump chainguard.dev/sdk from 0.1.191 to 0.1.197 by @​dependabot[bot] in chainguard-dev/apko#2403
• Add erofs support to apko. by @​smoser in chainguard-dev/apko#2249
• build(deps): bump go.step.sm/crypto from 0.87.0 to 0.88.0 by @​dependabot[bot] in chainguard-dev/apko#2409
• Bump go-erofs import to current main. by @​smoser in chainguard-dev/apko#2412
• Makefile: fix make lint, reading its version from CI by @​smoser in chainguard-dev/apko#2411
• erofs: first batch of #2408 follow-ups by @​smoser in chainguard-dev/apko#2410

[edit] ⚠️ Contains Regression (#2417 library only): GenerateIndex/GenerateDockerIndex fail with failed to get config file when passed a v1.Image that can't serve its config (introduced by #2249). The apko CLI is unaffected. Pin v1.2.37 or see chainguard-dev/apko#2416

... (truncated)

Commits

• 713d278 build(deps): bump chainguard.dev/sdk from 0.1.212 to 0.1.213 (#2437)
• 7cb8609 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.32 to 1.6.33...
• ac58b46 build(deps): bump github.com/google/go-containerregistry from 0.21.9 to 0.22....
• 055231b sbom: make internal SPDX relationships reproducible (#2439)
• c89724f build(deps): bump chainguard.dev/sdk from 0.1.210 to 0.1.212 (#2434)
• 326edce apk: expose cache metrics (#2435)
• 51d37b4 build(deps): bump the codeql group with 2 updates (#2431)
• a2e35ac build(deps): bump github.com/package-url/packageurl-go from 0.1.6 to 0.1.7 (#...
• de11e49 build(deps): bump k8s.io/apimachinery from 0.36.3 to 0.36.4 (#2429)
• c0b1316 build(deps): bump chainguard.dev/sdk from 0.1.204 to 0.1.210 (#2428)
• Additional commits viewable in compare view