v5.34.1

What's Changed

• [release-5.34] policy.json BYOPKI signature verification API by @mtrmac in #2725

Full Changelog: v5.34.0...v5.34.1

v5.34.0

What's Changed

• Bump c/storage to v1.56.0, c/image to v5.33.0 by @TomSweeneyRedHat in #2625
• Update stubs to match signature of actual methods by @SpangleLabs in #2541
• docker: add check for too many parts by @giuseppe in #2619
• fix(deps): update module golang.org/x/crypto to v0.29.0 by @renovate in #2624
• fix(deps): update module golang.org/x/oauth2 to v0.24.0 by @renovate in #2626
• chore(deps): update dependency golangci/golangci-lint to v1.62.0 by @renovate in #2630
• chore(deps): update dependency containers/automation_images to v20241107 by @renovate in #2631
• fix(deps): update module github.com/sigstore/sigstore to v1.8.10 by @renovate in #2601
• fix(deps): update module github.com/sylabs/sif/v2 to v2.20.0 by @renovate in #2611
• docker: drop use of external distribution challenge pkg by @flavianmissi in #2629
• Merge tag 'v5.33.0' into main by @mtrmac in #2634
• Improve an error message by @mtrmac in #2595
• Propagate CompressedDigest/CompressedSize when reusing data from another layer by @mtrmac in #2583
• chore(deps): update dependency golangci/golangci-lint to v1.62.2 by @renovate in #2640
• fix(deps): update module github.com/proglottis/gpgme to v0.1.4 by @renovate in #2638
• fix(deps): update module github.com/stretchr/testify to v1.10.0 by @renovate in #2639
• Two small lint updates by @mtrmac in #2642
• Use testify's ErrorAs to simplify tests a bit by @mtrmac in #2641
• Fix excessive memory and disk usage when sharing layers by @mtrmac in #2636
• Fix a missing s.lock.Unlock() on an error path by @mtrmac in #2643
• In pulls, compute DiffIDs earlier, and also for v2s2 by @mtrmac in #2635
• Update module golang.org/x/sync to v0.10.0 by @renovate in #2650
• Update golang.org/x/exp digest to 2d47ceb by @renovate in #2648
• Update module golang.org/x/term to v0.27.0 by @renovate in #2651
• Update module golang.org/x/crypto to v0.30.0 by @renovate in #2652
• Update module github.com/docker/docker to v27.4.0+incompatible by @renovate in #2654
• Update module github.com/docker/cli to v27.4.0+incompatible by @renovate in #2653
• Update module golang.org/x/crypto to v0.31.0 by @renovate in #2655
• Update module github.com/sylabs/sif/v2 to v2.20.1 by @renovate in #2656
• Update module github.com/sigstore/sigstore to v1.8.11 by @renovate in #2657
• Update module github.com/secure-systems-lab/go-securesystemslib to v0.9.0 by @renovate in #2658
• Update module github.com/containers/ocicrypt to v1.2.1 by @renovate in #2659
• Update module github.com/docker/docker to v27.4.1+incompatible by @renovate in #2662
• Update module github.com/sylabs/sif/v2 to v2.20.2 by @renovate in #2660
• Update module github.com/docker/cli to v27.4.1+incompatible by @renovate in #2661
• Fix docker daemon on Windows trying to use https instead of http for named pipes by @brbayes-msft in #2666
• Update dependency golangci/golangci-lint to v1.63.2 by @renovate in #2667
• Update dependency golangci/golangci-lint to v1.63.3 by @renovate in #2668
• Update dependency golangci/golangci-lint to v1.63.4 by @renovate in #2669
• OCI layout extensions by @vrothberg in #2633
• Update module golang.org/x/term to v0.28.0 by @renovate in #2671
• Update module golang.org/x/oauth2 to v0.25.0 by @renovate in #2670
• Update module golang.org/x/crypto to v0.32.0 by @renovate in #2674
• Update module github.com/vbauerster/mpb/v8 to v8.9.1 by @renovate in #2675
• Add a comment justifying lack of unit test coverage by @mtrmac in #2673
• Move JSONFormatToInvalidSignatureError to an unconditionally-included file by @mtrmac in #2632
• Update dependency containers/automation_images to v20250107 by @renovate in #2677
• Update module github.com/sigstore/sigstore to v1.8.12 by @renovate in #2678
• Update for c/storage almost always computing UncompressedDigest by @mtrmac in #2680
• Update module github.com/docker/docker to v27.5.0+incompatible by @renovate in #2682
• Update module github.com/docker/cli to v27.5.0+incompatible by @renovate in #2681
• Update module github.com/containers/storage to v1.56.1 by @renovate in #2684
• Update module github.com/sigstore/rekor to v1.3.8 by @renovate in #2685
• Update module github.com/vbatts/tar-split to v0.11.7 by @renovate in #2686
• Expect UncompressedDigest to be set for partial pulls, enforce DiffID match by @mtrmac in #2613
• Validate digests of data downloaded while fetching sigstore attachments by @mtrmac in #2689
• Merge tag 'v5.33.1' into main by @mtrmac in #2691
• Update module github.com/docker/cli to v27.5.1+incompatible by @renovate in #2692
• Update module github.com/docker/docker to v27.5.1+incompatible by @renovate in #2693
• ignore ENOENT errors when parsing .d files by @Luap99 in #2696

New Contributors

• @SpangleLabs made their first contribution in #2541
• @flavianmissi made their first contribution in #2629
• @brbayes-msft made their first contribution in #2666

Full Changelog: v5.33.1...v5.34.0

v5.33.1

[release-5.33] Bump c/storage to v1.56.1, c/image to v5.33.1 by @TomSweeneyRedHat in #2683

Full Changelog: v5.33.0...v5.33.1

v5.33.0

What's Changed

• Merge 5.32.1 back into main by @mtrmac in #2510
• Update module github.com/docker/docker to v27.1.2+incompatible by @renovate in #2516
• Update module github.com/docker/cli to v27.1.2+incompatible by @renovate in #2515
• pkg/blobcache: simplify test case by @kolyshkin in #2521
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.1 by @renovate in #2517
• Update module github.com/vbauerster/mpb/v8 to v8.8.1 by @renovate in #2525
• Introduce/use JSONFormatToInvalidSignatureError by @kolyshkin in #2518
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.2 by @renovate in #2528
• fix(deps): update module dario.cat/mergo to v1.0.1 by @renovate in #2527
• Use %w to wrap errors, enable errorlint by @kolyshkin in #2519
• Add keyPaths, keyDatas to prSigstoreSigned by @mtrmac in #2524
• Add support for accepting multiple Rekor public keys by @mtrmac in #2526
• Release 5.32.2 by @mtrmac in #2531
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 by @renovate in #2533
• Merge release-5.32 into main by @mtrmac in #2532
• Update module github.com/vbauerster/mpb/v8 to v8.8.3 by @renovate in #2540
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 by @renovate in #2535
• Support proxy environment for docker client by @PMExtra in #2424
• Update module github.com/docker/docker to v27.2.0+incompatible by @renovate in #2543
• Update module github.com/docker/cli to v27.2.0+incompatible by @renovate in #2542
• Update dependency containers/automation_images to v20240821 by @renovate in #2545
• Update golang.org/x/exp digest to 9b4947d by @renovate in #2549
• Add a workaround for null values in the tag list by @mtrmac in #2544
• Update module github.com/mattn/go-sqlite3 to v1.14.23 by @renovate in #2554
• Update module golang.org/x/oauth2 to v0.23.0 by @renovate in #2555
• Update module golang.org/x/term to v0.24.0 by @renovate in #2556
• Update module golang.org/x/crypto to v0.27.0 by @renovate in #2561
• Assorted clean ups, optimizations, and a small bug fix by @mtrmac in #2552
• Update to Go 1.22 by @mtrmac in #2550
• Update module github.com/sigstore/fulcio to v1.6.4 by @renovate in #2560
• Refactor image deletion in OCI by @mtrmac in #2551
• Update module github.com/docker/docker to v27.2.1+incompatible by @renovate in #2564
• Update module github.com/docker/cli to v27.2.1+incompatible by @renovate in #2563
• Update dependency golangci/golangci-lint to v1.61.0 by @renovate in #2565
• storage: use PrepareStagedLayer instead of ApplyDiffWithDiffer by @giuseppe in #2570
• fix(deps): update module github.com/sigstore/sigstore to v1.8.9 by @renovate in #2571
• copy: Don't print "skipped: 0.0b = 0.00%" by @cgwalters in #2576
• fix(deps): update module github.com/docker/docker to v27.3.0+incompatible by @renovate in #2575
• fix(deps): update module github.com/docker/cli to v27.3.0+incompatible by @renovate in #2574
• fix(deps): update module github.com/docker/cli to v27.3.1+incompatible by @renovate in #2577
• fix(deps): update module github.com/docker/docker to v27.3.1+incompatible by @renovate in #2578
• Fix an incorrect expected MIME type when validating manifests by @mtrmac in #2572
• fix(deps): update module github.com/klauspost/compress to v1.17.10 by @renovate in #2580
• fix(deps): update module github.com/vbatts/tar-split to v0.11.6 by @renovate in #2584
• Fix: Improving error log message for missing policy.json file by @Sativarsainath-26 in #2582
• fix(deps): update github.com/containers/storage digest to 4bf3f07 by @renovate in #2586
• fix(deps): update golang.org/x/exp digest to 701f63a by @renovate in #2587
• registry: remove ping v1 by @carlosrodfern in #2588
• fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24 by @renovate in #2592
• fix(deps): update module golang.org/x/crypto to v0.28.0 by @renovate in #2593
• copy: attempt fallback to full retrieval only when possible by @giuseppe in #2589
• chore(deps): update dependency containers/automation_images to v20241010 by @renovate in #2596
• fix(deps): update module github.com/klauspost/compress to v1.17.11 by @renovate in #2597
• fix(deps): update module github.com/opencontainers/selinux to v1.11.1 by @renovate in #2604
• Update c/storage after containers/storage#2143 by @mtrmac in #2610
• Document the semantics of the metadata created by pkg/compression by @mtrmac in #2605
• Consistently use a string type for expectedLayerDiffIDFlag by @mtrmac in #2603
• Actually record last retry time after reconnecting by @mtrmac in #2608
• Special-case an error message to make it clearer by @mtrmac in #2607
• fix(deps): update github.com/containers/storage digest to 5958b09 by @renovate in #2615
• fix(deps): update golang.org/x/exp digest to f66d83c by @renovate in #2616
• Add Copy.Options.ReportResolvedReference by @mtrmac in #2609

New Contributors

• @PMExtra made their first contribution in #2424
• @Sativarsainath-26 made their first contribution in #2582
• @carlosrodfern made their first contribution in #2588

Full Changelog: v5.32.2...v5.33.0

v5.27.1

What's Changed

• [release-5.27] Preparing 5.27 backport by @mtrmac in #2075
• [release-5.27] Fix the branch we use for determining a git-validation starting point by @mtrmac in #2084
• [release-5.27] Backport by @mtrmac in #2546
• [release-5.27] Bump c/image to v5.27.1 and then to v5.27.2-dev by @TomSweeneyRedHat in https://github.com/containers/image/pull/25577

Full Changelog: v5.27.0...v5.27.1

v5.26.3

What's Changed

• [release-5.26] Bump c/storage to 1.48.1, c/image to 5.26.2 and 5.26.3-dev by @TomSweeneyRedHat in #2096
• [release-5.26] Backport by @mtrmac in #2547
• [release-5.26] Bump c/image to v5.26.3 then to v5.26.4-dev by @TomSweeneyRedHat in #2558

Full Changelog: v5.26.2...v5.26.3

v5.24.3

What's Changed

• [release-5.24] Backport retries heuristics updates by @mtrmac in #1859
• [release-5.24] Backport #2418 + #2453 by @mtrmac in #2548
• [release-5.24] Bump c/image to v5.24.3 then to v5.24.4-dev by @TomSweeneyRedHat in #2559

Full Changelog: v5.24.2...v5.24.3

v5.32.2

This adds the ability to accept sigstore signatures signed by any key from a set of several (huge thanks to @dcermak and @danishprakash for doing almost all the work), and Rekor log presence proofs signed by any key from a set of several keys.

v5.32.1

What's Changed

• Bump c/storage to v1.55.0, c/image to v5.32.0 by @TomSweeneyRedHat in #2495
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5 by @renovate in #2496
• Record (TOC digest → DiffID) mapping in BlobInfoCache by @mtrmac in #2321
• Revamp codespell by @kolyshkin in #2498
• fix(deps): update module golang.org/x/oauth2 to v0.22.0 by @renovate in #2501
• fix(deps): update module golang.org/x/sync to v0.8.0 by @renovate in #2502
• manifest: LayerInfos: preallocate the slice by @kolyshkin in #2499
• zstd:chunked refactoring for early review by @mtrmac in #2503
• fix(deps): update module golang.org/x/crypto to v0.26.0 by @renovate in #2504
• Record zstd:chunked format, and annotations, in BlobInfoCache by @mtrmac in #2487

Full Changelog: v5.32.0...v5.32.1

v5.29.5

What's Changed

• [release-5.29] Don't abort listing tags when we encounter a digest by @TomSweeneyRedHat in #2453

Full Changelog: v5.29.4...v5.29.5