v1.10.0

chart-releaser v1.10.0

This release adds opt-in GitHub-signed index commits, replacement of mutable chart assets, and authenticated API asset URLs. It also fixes oversized release notes and index deduplication for chart build metadata.

Features

• Add cr index --push --sign-commits to create index commits through GitHub's API, signed by GitHub where supported. Requires a token and rejects --pr; package commits from cr upload --packages-with-index are outside this feature's scope (#677).
• Add --replace-existing to upload and index commands to replace chart assets in mutable releases and refresh their index entries. Use the flag with both commands. Immutable releases are rejected before assets are changed (#674).
• Add cr index --use-api-asset-url for authenticated private repository downloads. Clients must send Accept: application/octet-stream; browser download URLs remain the default (#428).

Fixes

• Limit complete release bodies to GitHub's 125,000-character maximum, including generated notes, without splitting Unicode characters. Report truncation and return note-generation failures before creating a release (#676; fixes #675).
• Correct index deduplication for chart versions containing build metadata (#673).

Release tooling

• Migrate container builds to GoReleaser dockers_v2, retaining registries, architecture aliases, and image signing (#672).

Known issue (fixed in v1.10.1)

Upgrade to v1.10.1 for the signing fix.

The opt-in --sign-commits feature fails against GitHub's live API because its branch input uses the wrong field name. Fix PR #678 corrects the request and refreshes the branch snapshot before signing. Publishing without --sign-commits is unaffected, as verified by the official-release e2e run.

Full changes: v1.9.0...v1.10.0