v0.73.0

Info

This release introduces a few important changes.

Ephemeral branch

The ephemeral branch created by Updatecli before opening a pullrequest or merge request changes its format to include the base branch, more information here about why this change is needed.
The consequence of this, is that every pull requests or merge requests created by Updatecli before 0.73.0 will become orphan. They can be closed as Updatecli will recreate them with the new ephemeral branch format.

Autodiscovery updating container tag

The Autodiscovery plugins for Helm, Dockerfile, and docker compose have been improved to also include the image digest by default.

So

1. updatecli/updatecli:latest will be updated to updatecli/updatecli:latest@sha256xxxx
2. updatecli/updatecli:0.23.0 to updatecli/updatecli:0.73.0@sha256xxx
3. updatecli/updatecli:0.23.0@sha256xxx to updatecli/updatecli:0.73.0@sha256yyy

Docker image using digest without specifying the tag will be ignored.

This behavior can be disabled using the parameter digest set to false such as in the following example:

autodiscovery:
  scmid: default
  crawlers:
    helm:
      digest: false

Changes

• fix: updatecli autodiscovery file variable @olblak (#1939)

🚀 Features

• feat: helm autodiscovery handles digest @olblak (#1938)
• feat: dockercompose autodiscovery handles digest @olblak (#1932)
• feat: dockerfile autodiscovery handles digest @olblak (#1931)
• feat: add ko autodiscovery plugin @olblak (#1929)
• feat: add kubernetes autodiscovery @olblak (#1928)
• feat: Allow to override updatecli autodiscovery files @olblak (#1921)
• feat: add base branch to temporary working branch @olblak (#1899)
• feat(cargo): set user-agent for crate api request @olblak (#1933)

🐛 Bug Fixes

• fix: WriteLineToFile truncates file when opening @mcwarman (#1916)

🧰 Maintenance

• chore(deps): Bump golangci/golangci-lint-action from 3 to 4 @dependabot (#1927)
• chore: remove depecrated versionFilter for versionfilter @olblak (#1930)
• Update Golang module github.com/aws/aws-sdk-go @updateclibot (#1920)
• Update Golang module golang.org/x/oauth2 @updateclibot (#1923)
• deps: bump Golang version to 1.22.0 @updateclibot (#1917)
• chore(deps): Bump github.com/moby/buildkit from 0.12.4 to 0.12.5 @dependabot (#1907)
• chore(deps): Bump github.com/opencontainers/runc from 1.1.7 to 1.1.12 @dependabot (#1908)
• chore(deps): Bump codecov/codecov-action from 3 to 4 @dependabot (#1909)
• chore(deps): Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 @dependabot (#1910)
• Update Golang module github.com/oras-project/oras-credentials-go @updateclibot (#1913)
• chore(deps): Bump release-drafter/release-drafter from 5 to 6 @dependabot (#1912)
• chore(deps): Bump anchore/sbom-action from 0.15.4 to 0.15.8 @dependabot (#1906)
• Update Golang module github.com/google/go-containerregistry @updateclibot (#1901)
• Update Golang module oras.land/oras-go/v2 @updateclibot (#1902)

Contributors

@dependabot, @dependabot[bot], @mcwarman, @olblak, @updateclibot and @updateclibot[bot]