v0.10.0

Changelog

• 729419a: Add 'ko build' as a preferred alias for 'ko publish' (#456) (@imjasonh)
• 96bedf1: Add .ko.yaml to base ko container image on golang:1.17 (#533) (@imjasonh)
• 2fbc908: Add Trimpath build option (@halvards)
• 1425e4b: Add a mutex to map writing when using KOCACHE (#580) (@imjasonh)
• a8c0773: Add a workflow to push a :latest ko image to ghcr.io (#528) (@imjasonh)
• 22c9a52: Add coverage of --platform=a,b (#547) (@mattmoor)
• 9821190: Add e2e test for using ldflags to set a build-time variable (#480) (@imjasonh)
• da244de: Add how to use Azure Container Apps (#561) (@koudaiii)
• 00d0a34: Add integration test config to repo (@halvards)
• f5762be: Add support for --image-refs (#555) (@mattmoor)
• 6d06913: Add support for writing SBOMs when the build.Result is oci.Signed*. (#506) (@mattmoor)
• 84e8ab6: Allow to customize publish.Namer (#477) (@cardil)
• 73a4629: Always clean Dir for packages.Load (@jonjohnsonjr)
• 465eca2: Always produce OCI images and indexes (#449) (@imjasonh)
• 2502eb9: Build each platform concurrently (#527) (@jonjohnsonjr)
• 7477a29: Bump github.com/containerd/stargz-snapshotter/estargz (#464) (@dependabot[bot])
• 933e908: Bump github.com/containerd/stargz-snapshotter/estargz (#508) (@dependabot[bot])
• 32490da: Bump github.com/containerd/stargz-snapshotter/estargz (#577) (@dependabot[bot])
• 6230daa: Bump github.com/docker/docker (#466) (@dependabot[bot])
• b1c35d2: Bump github.com/docker/docker (#490) (@dependabot[bot])
• b20faa5: Bump github.com/docker/docker (#510) (@dependabot[bot])
• ddf9257: Bump github.com/docker/docker (#559) (@dependabot[bot])
• 70b671c: Bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (#567) (@dependabot[bot])
• f44a16c: Bump github.com/google/go-containerregistry from 0.6.0 to 0.7.0 (#503) (@dependabot[bot])
• 64df1a7: Bump github.com/google/go-containerregistry from 0.7.0 to 0.8.0 (#565) (@dependabot[bot])
• fd81c29: Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#557) (@dependabot[bot])
• 815a59a: Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#558) (@dependabot[bot])
• a1c8717: Bump github.com/spf13/viper from 1.9.0 to 1.10.0 (#529) (@dependabot[bot])
• b7c9449: Bump golang.org/x/tools from 0.1.6 to 0.1.7 (#465) (@dependabot[bot])
• 5565544: Bump golang.org/x/tools from 0.1.8 to 0.1.9 (#575) (@dependabot[bot])
• 08dfc02: Bump k8s.io/apimachinery from 0.22.2 to 0.22.3 (#489) (@dependabot[bot])
• 23c6850: Bump k8s.io/apimachinery from 0.22.3 to 0.22.4 (#509) (@dependabot[bot])
• 2ba70fc: Bump k8s.io/apimachinery from 0.22.4 to 0.23.0 (#531) (@dependabot[bot])
• 1a12a62: Bump k8s.io/apimachinery from 0.23.0 to 0.23.1 (#556) (@dependabot[bot])
• 64fa5ed: Bump k8s.io/apimachinery from 0.23.1 to 0.23.3 (#576) (@dependabot[bot])
• ad0607f: Cache base image metadata in-memory (#525) (@jonjohnsonjr)
• 5ac3ef9: Clean filepath from zip before creating tempdir (#459) (@imjasonh)
• 3edb68b: Connect SBOMs with SPDX support. (#511) (@mattmoor)
• 5617d1e: Document /ko-app/ and entrypoint in README.md (#499) (@imjasonh)
• 1e3c8ae: Document ko publish in README (#469) (@imjasonh)
• 52d42d8: Document setup-ko in README.md (#484) (@imjasonh)
• b9cd759: Don't log the value of --password if given (#458) (@imjasonh)
• 0015a81: Enforce more lint checks, fix findings (#492) (@imjasonh)
• a56047a: Filter out nil addendum before constructing index. (#546) (@mattmoor)
• 6cc2d7f: Fix #530 Hanging behavior with ASDF installed Go on Darwin (#548) (@StevenACoffman)
• a41529e: Fix Windows e2e test (#599) (@imjasonh)
• 66a77a9: Fix handling of 'has' selectors (#473) (@antoineco)
• de2ce53: Fix issue where kubectl apply is run in place of kubectl create (#494) (@sbwsg)
• 5a13603: Fix tarball publisher ctx handling (#545) (@jonjohnsonjr)
• 98ff104: Generate CycloneDX SBOMs using our own JSON generation (#587) (@imjasonh)
• af2ff52: Generate ko deps in SPDX format (#507) (@imjasonh)
• b9f9268: Improve build config issue error scenario #483 (#487) (@HeavyWombat)
• 89ede91: Include cred helpers in keychain (#581) (@imjasonh)
• 70f0273: Introduce --verbose flag that enables logs.Warn logs (#600) (@imjasonh)
• 54cddcc: Introduce KOCACHE (#269) (@jonjohnsonjr)
• f8d0aca: Log base image@digest when building (#592) (@imjasonh)
• 08fccaa: Mention other tools that integrate with ko (#504) (@imjasonh)
• 5787600: Normalize the package hash to hex. (#512) (@mattmoor)
• c67fb03: Pre-parse platform string with StringSliceVar (#551) (@wilsonehusin)
• b813b95: Prepare for Go 1.18 by replacing all our forked code (#549) (@imjasonh)
• dde6c6d: Re-enable codeql analysis (#457) (@imjasonh)
• 42723d7: Revert "Always produce OCI images and indexes (#449)" (#462) (@imjasonh)
• 5640c33: Run golangci-lint before tool setup to fix tar errors (#518) (@markusthoemmes)
• e961890: Set GOAMD64 if variant is set (#578) (@imjasonh)
• 8135bf2: Set config creation time without mutating (#524) (@imjasonh)
• 0187841: Sign image using cosign (#595) (@imjasonh)
• 33fa766: Support osversion when selecting base images (#536) (@imjasonh)
• 5f733f9: Support partial platform matching for osversion only (#572) (@imjasonh)
• 3fc720f: Update ecr-login dependency to allow us to avoid logspam (#586) (@imjasonh)
• d91d7a4: Update golangci-lint and fix issues (#519) (@markusthoemmes)
• 103ff5b: Use build config Dir for all go tool commands (@halvards)
• 6ff3469: Use default completion command provided by cobra. (#522) (@darklore)
• 1e46fde: Use signal.NotifyContext and cmd.Context (#482) (@imjasonh)
• 5d7673e: Use tools/go/packages in place of go/build (#486) (@benmoss)
• 3e5ee5b: Validate KO_CONFIG_PATH (#471) (@tcnghia)
• 6014fcd: bump containerd dependency (#463) (@imjasonh)
• 6447264: use github api to generate the changelog (#474) (@caarlos0)