v0.6.0

Release v0.6.0

Breaking:

• regctl artifact put no longer includes the filename annotation by default. Use --file-title to include. (PR 659)
• Dropping Go 1.19 support (PR 656)
• The platform string for windows images no longer includes the non-standard OS Version value. (PR 685)

Fixes:

• Allow pushing artifacts without an artifactType value. (PR 658)
• Image mod where created image is in a different repository (PR 662)
• Improve returned errors from regclient.ImageCopy. (PR 663)
• Cancel blob uploads on failures. (PR 666)
• Allow ctrl-c on regctl registry login (PR 671)
• Promoting annotations should ignore child manifests that have been removed from the tree. (PR 675)
• Pin base image digest in build scripts to match Dockerfile pins. (PR 678)
• Error wrapping fixed in several locations. (PR 682)
• Platform selection now finds the best match rather than the first compatible match. (PR 685)
• Update registry versions in CI tests. (PR 687)
• Missing lines from diff context. (PR 688)
• Replace syft packages with syft scan. (PR 695)
• Image mod can manage the data file on the config descriptor of artifacts. (PR 697)

Features:

• Adding Go 1.22 support (PR 656)
• Add BlobDelete support for ocidir references. (PR 669)
• Add regctl blob delete command. (PR 669)
• Support formatting output on regctl registry config. (PR 673)
• Add image mod ability to promote common annotations in the child images to the index. (PR 674)
• Specifying windows OS Version now uses a comma separated syntax in the platform string. (PR 685)
• Detect AMD64 variant when looking up local platform. (PR 692)
• Add ability to set the config platform setting with regctl image mod. (PR 693)
• Image mod support for setting the entrypoint and cmd. (PR 694)

Deprecations:

• Errors in types are moved to the errs package. (PR 686)
• MediaTypes in types are moved to the mediatype package. (PR 686)
• Descriptor and associated variables in types are moved to the descriptor package. (PR 686)
• github.com/regclient/regclient/regclient (3 levels of regclient) deprecations are now identified by the standard comment to trigger linters. (PR 686)

Other changes:

• Update OSV scanner to monitor for unapproved licenses. (PR 655)
• Include an API example in the Go docs. (PR 657)
• Add examples to regctl help messages. (PR 660)
• Include the Go Report Card badge. (PR 664)
• Document the availability of the GitHub Actions installer for regctl. (PR 665)
• Add examples to regctl help messages. (PR 672)
• Redesign how annotations are added to the regclient images. (PR 676)
• Remove uuid dependency from test code, replace with a random string generator. (PR 677)
• Manage base image annotation with version-bump. (PR 679)
• Use t.Fatal where appropriate. (PR 680)
• Remove wraperr package. (PR 681)
• Add links to the GHA workflow badges. (PR 683)
• Include a download count badge. (PR 684)
• Refactoring types package to avoid circular dependency issues. (PR 686)
• Cleanup unused parameters on private functions. (PR 698)
• Resume push of SBOMs to Docker Hub. (PR 701)

Contributors:

• @sudo-bmitch

v0.5.7

Release v0.5.7

Changes:

• Add a --skip-check option to regctl registry set and regctl registry login. (PR 646)

Fixes:

• Improve error handling on blob put retries when source is not an io.Seeker. (PR 622)
• Preserve descriptor contents on chunked blob push. (PR 637)
• Validate descriptor contents on chunked blob push. (PR 637)

Chores:

• Improve testing to detect race conditions in registry operations. (PR 634)
• Update ImageCopy test to not depend on ImageCopy for setup. (PR 635)
• leverage t.Setenv in tests of environment variables. (PR 636)
• reduce logging of context canceled messages in an image copy failure. (PR 639)
• Add tests for TagList and TagDelete. (PR 640)
• Upgrade olareg testing harness to latest version. (PR 648)
• Update OSV scanner to use new syntax. (PR 652)

Contributors:

• @edigaryev
• @sudo-bmitch

v0.5.6

Release v0.5.6

Changes:

• Chore: go.mod version is now set to oldest supported release. (PR 623)
• Chore: Make vendoring optional. (PR 632)

Contributors:

• @sudo-bmitch

v0.5.5

Release v0.5.5

New Features:

• Add OpenSSF Best Practices Badge. (PR 607)
• Adding OpenSSF Scorecard badge and GHA workflow. (PR 609)

Fixes:

• Validate references in regclient methods. (PR 595)
• Data race in the reghttp fallback timeout handling. (PR 599)
• HTTP proxy using environment variables. (PR 615)

Chores:

• Reorder descriptor fields. (PR 594)
• Add test for ocidir throttle race. (PR 601)
• Add gomajor utility to Makefile. (PR 602)
• Add commands to Makefile for managing releases. (PR 604)
• Pin GitHub actions. (PR 605)
• Use full semver on dependencies where available. (PR 605)
• Adjust token permissions on GitHub actions. (PR 606)
• Include disclosure timeline in security policy. (PR 608)
• Improve contributor guidelines. (PR 612)
• Improve BlobPut tests. (PR 613)

Contributors:

• @peusebiu
• @sudo-bmitch

v0.5.4

Release v0.5.4

New Features:

• Add regctl --host flag to configure registries for a single command. (PR 572)
• Configure HTTP client timeouts. (PR 584)
• Add regclient.Ping method. (PR 590)
• regctl: warn on failed logins or bad registry configuration changes. (PR 590)

Fixes:

• Fix handling of invalid hostname in regclient.RepoList. (PR 577)
• Fix bug in regsync tag filtering when running as a server. (PR 579)
• Enable parallel builds of the make "binaries" target. (PR 588)

Chores:

• Update Go docs on blob APIs and the config. (PR 573)
• Refactor the Ref package. (PR 587)

Contributors:

• @andyli
• @edigaryev
• @Juneezee
• @sudo-bmitch

v0.5.3

Release v0.5.3

Fixes:

• Fix formatting variables in regctl image inspect. (PR 554)

New Features:

• Add a GetSize method to image manifests (OCI and Docker2 manifests). (PR 565)

Chores:

• Refactoring CLIs to remove global state. (PR 550)
• Set GOTOOLCHAIN=local in CI (PR 556)
• Reorder Go imports to move local packages last. (PR 557)
• Remove duplicated tests from ci-registry action. (PR 559)
• Run tests using t.Parallel where possible. (PR 564)
• Update install guidance for quarantined binaries on MacOS. (PR 569)
• Release notes now include contributors. (PR 570)

Contributors:

• @felipecrs
• @sorenisanerd
• @sudo-bmitch

v0.5.2

Release v0.5.2

Breaking Changes:

• A few interfaces in the blob package were converted to pointers to structs. (PR 547)

Features:

• Expose the underlying OCI Layout Index to regctl tag ls --format (PR 518)
• Support compression on image export and import. (PR 522)
• Image mod of timestamps is now aware of base images. (PR 524)
• Add reproducible method / option to image mod. (PR 525)
• Support setting labels on specific platforms with image mod. (PR 528)
• Add WithFileTarTime method and regctl image mod --file-tar-time option to edit timestamps inside tar files. (PR 530)
• Support digest-tags in artifact list and tree output (PR 531)
• Add support for decompressing xz layers (PR 534)
• Support getting an artifact from an index of artifacts (PR 536)
• Add repo filters to regsync when copying registries (PR 538)
• Add gosec security linter (PR 541)
• Refactor type/blob package. (PR 547)
• Support pushing artifact to an index entry with regctl artifact put --index (PR 548)

Fixes:

• Add size limits on manifests (PR 512)
• Always set artifactType with regctl artifact put (PR 513)
• Manifest delete should not fail when referrer file is missing (PR 515)
• Artifact put of referrer should not add a manifest reference in ocidir (PR 515)
• Reproducible image creation scripts should prune stale referrers (PR 515)
• Fail faster on image copy when target registry is unreachable (PR 517)
• Avoid changing docker build attestations when converting to referrers (PR 527)

Chores:

• Cleanup docs on regclient package. (PR 543)
• Upgrade yaml package to v3. (PR 544)

New Contributors:

• @fanthos

v0.5.1

Release v0.5.1

Features:

• Add options to regctl index create for artifactType and subject (PR 490)
• Add --latest flag to regctl artifact get and regctl artifact list (PR 507)
• Add in memory caching support. (PR 510)

Fixes:

• Fix typo in OCI annotations (PR 485)
• Support multiple dashes in repo names. (PR 489)
• Fix auth failures, do not trigger a backoff (PR 492)
• Update Go dependencies from all subdirectories and used in tests (PR 495)
• Warning header log message is fixed. (PR 497)
• Include version annotation in regclient images (PR 499)
• Fix digest check when running regctl image get-file (PR 503)
• Switch org.opencontainers.artifact.* to org.opencontainers.image.* annotations in regclient images. (PR 506)

Chores:

• Sync OCI types to align with upstream sources. (PR 488)
• Add OSV vulnerability scanner (PR 498)

v0.5.0

Release v0.5.0

The two key features are:

• Updating the image copy to copy layers concurrently and with an improved UI.
• Update support for OCI with the Referrers changes coming in their 1.1 releases.

Image Copy:

• Add progress display to regctl image copy (PR 413)
• Image copy is now run with concurrency. (PR 419)
• Fix regctl image copy output on narrow terminals. (PR 440)
• Add a fast check option for copying images with referrers and digest tags. (PR 441)
• Update regctl image copy for tty displays. (PR 447)

OCI Support:

• Add support for artifactType in image manifest (PR 400)
• Accept manifests with OCI artifact media type (experimental). (PR 418)
• Handle the OCI-Subject header to detect referrer support. (PR 446)
• Embed the Platform field directly in the ImageConfig (PR 456)
• Switch from scratch to empty JSON media type (PR 463)
• Support artifactType and subject fields on OCI Index (PR 476)

Other Features:

• Image mod pushes directly to the target ref without an extra copy step (PR 438)
• Performance improvements for regsync (PR 449)
• Support client certs and keys for mTLS registry auth. (PR 454)
• Support updating annotations on platform specific manifests in a manifest list. (PR 457)
• Add ability to sort referrers by annotation. (PR 467)
• Use SOURCE_DATE_EPOCH build arg support in buildkit. (PR 472)
• Add regctl tag list filtering (PR 477)
• Add option to import a specific image or tag from an export of multiple images (PR 482)

Fixes:

• Invalid references are detected before querying the registry (PR 414)
• Fix handling of content-type headers. (PR 418)
• Fix race when creating ocidir (PR 420)
• Avoid an internal race condition when managing the referrers fallback tag. (PR 427)
• Fix: close reader when converting a blob to an OCI config (PR 434)
• Support manifests missing a mediaType field. (PR 436)
• Fix GitHub badges. (PR 437)
• Handle symlinks in the tar file with regctl image import (PR 452)
• Fix GCR credential helper to work on Artifact Registry (PR 455)
• Fix deadlock when referrers or digest tags refer to a parent manifest (PR 464)
• Improve error handling of regctl artifact tree. (PR 470)
• Fix copy when both referrers and digest-tags are included. (PR 471)
• Fix handling of copy with looping referrers or digest-tags to validating registries (PR 475)

v0.4.8

Release v0.4.8

Breaking Changes:

• Deprecated: regclient.WithConfigHosts is replaced by a variadic on regclient.WithConfigHost (PR 409)
• Deprecated: regclient.WithBlobLimit, regcleint.WithBlobSize, regclient.WithCertDir, regclient.WithRetryDelay, and regclient.WithRetryLimit are replaced by regclient.WithRegOpts (PR 409)

New Features:

• Add --platform option to regctl image copy/export (PR 379)
• Add option to override name in regctl image export (PR 380)
• Add platforms option to regctl index add/create (PR 381)
• Add --referrers and --digest-tags options to regctl index add/create (PR 382)
• Add regctl blob copy command (PR 385)
• Adding regctl image mod --to-docker to convert manifests from OCI to Docker schema2 (PR 388)
• Support OCI-Chunk-Min-Length header (PR 394)
• Add support for registry warning headers (PR 396)
• Add regclient.WithRegOpts (PR 408)

Bug Fixes:

• Improve handling of the referrers API with Harbor (PR 389)
• Fix an issue on regctl tag rm to support registries that require a layer (PR 395)
• Image mod only converts config.mediaType between known values (PR 399)
• Ignore anonymous blob mount failures (PR 401)
• Fix handling of docker registry logins with credStore (PR 405)
• Fix regsync handling of the paginated repo listing when syncing registries (PR 406)

Other Changes:

• Recursively sign manifest list and platform specific images with cosign (PR 378)
• Include tag in the version output (PR 392)