What's Changed
- Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in #2426
- daemon: fix stale docker/docker reference in WithClient docs by @BobDu in #2428
- build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #2422
- authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in #2420
- build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2423
- Support pulling images by sha512 digest by @BobDu in #2427
- Allow empty label and annotation values in crane mutate by @theadsingh in #2418
- fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in #2434
- validate: support index attestation manifests and empty configs by @Subserial in #2414
- name: improve error when parsing a reference with a URL scheme by @locker95 in #2431
- fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in #2436
- fix(release): honor declared Go toolchain by @rksharma-owg in #2435
- remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in #2432
- flatten: preserve config and layer media types when flattening by @Subserial in #2438
- fix(mutate): make Time layer updates lazy by @amarkdotdev in #2429
- build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #2439
- remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in #2441
New Contributors
- @shaggyinsomniac made their first contribution in #2426
- @BobDu made their first contribution in #2428
- @nileshpatil6 made their first contribution in #2420
- @theadsingh made their first contribution in #2418
- @locker95 made their first contribution in #2431
- @rksharma-owg made their first contribution in #2435
- @codysoyland made their first contribution in #2441
Full Changelog: v0.22.0...v0.22.1
Contributors
codysoyland, tprussak, and 9 other contributors