v0.6.0

v0.6.0

Major changes

• Added support for oci: transport prefix on --output, allowing chunkah to write an OCI directory layout directly to disk instead of creating an OCI archive. This avoids the redundant tar/untar round-trip when used in Containerfiles (via FROM oci: instead of FROM oci-archive:), giving a noticeable speed improvement of the overall image build. Users building with Containerfiles are encouraged to switch to this format. (#134)

Minor changes

• Bumped the chunkah Fedora base image to 44. (#135)
• Bumped minimum supported Rust version to 1.92.0. (#131)
• Added documentation on the minimum bootc versions required to use chunkah-chunked images. (#129)

Internal changes

• Added a Zizmor CI workflow for static analysis of GitHub Actions and applied its security recommendations. (#122)
• Improved the chunk-image-series and analyze-layer-reuse tooling scripts. (#126)
• Converted the polish-notes OpenCode command to an agent skill for cross-agent-harness compatibility. (#138)

Packaging changes

• Bumped ocidir from 0.7.1 to 0.7.2 and openssl from 0.10.78 to 0.10.79. (#124)
• Bumped openssl from 0.10.79 to 0.10.80 and tar from 0.4.45 to 0.4.46 (includes a PAX header desync security fix). (#133)
• Bumped serde_json from 1.0.149 to 1.0.150. (#139)
• Bumped sigstore/cosign-installer from 4.1.1 to 4.1.2 and zizmorcore/zizmor-action from 0.5.3 to 0.5.6. (#130, #132)

New Contributors

• @dustymabe made their first contribution in #126
• @HastD made their first contribution in #122

Full Changelog: v0.5.0...v0.6.0