deislabs/oras (github.com/deislabs/oras)
### [`v1.1.0`](https://togithub.com/oras-project/oras/releases/tag/v1.1.0)
[Compare Source](https://togithub.com/deislabs/oras/compare/v1.0.1...v1.1.0)
#### New Features
- `oras` is compliant with OCI [image-spec v1.1.0-rc4](https://togithub.com/opencontainers/image-spec/blob/v1.1.0-rc4/manifest.md#oci-image-manifest-specification) and [distribution-spec v1.1.0-rc3](https://togithub.com/opencontainers/distribution-spec/tree/v1.1.0-rc3)
- Support copying or pulling image index with a `subject` field
- Output OCI distribution [warning headers](https://togithub.com/opencontainers/distribution-spec/blob/v1.1.0-rc3/spec.md#warnings)
- Improve `oras push`
- Formalize the default config to [empty descriptor](https://togithub.com/opencontainers/image-spec/blob/v1.1.0-rc4/manifest.md#guidance-for-an-empty-descriptor) (previously `application/vnd.unknown.config.v1+json`)
- Default to artifact type `application/vnd.unknown.artifact.v1` if not specified
- Allow [artifact type and config](https://oras.land/docs/concepts/artifact#artifacts-with-config) to be specified at the same time
#### Experimental Features
- **BREAKING CHANGE**: [Redesign](https://togithub.com/oras-project/oras/blob/131f395a28830d0a53c6764b1f82ee7952d11839/docs/proposals/compatibility-mode.md) the flag `--image-spec`
- Add options `v1.0` and `v1.1`
- Remove options `v1.1-image` and `v1.1-artifact`
- No longer produce manifests of type `application/vnd.oci.artifact.manifest.v1+json`
- **BREAKING CHANGE**: Remove the flag `--image-spec` from `oras attach`
#### Bug Fixes
- Fix [#995](https://togithub.com/deislabs/oras/issues/995): `oras push` and `oras attach` generates unwanted manifest file
- Fix [#983](https://togithub.com/deislabs/oras/issues/983), [#980](https://togithub.com/deislabs/oras/issues/980), [#973](https://togithub.com/deislabs/oras/issues/973): Flag `--disable-path-validation` not working for `oras attach` and `oras push`
- Fix [#897](https://togithub.com/deislabs/oras/issues/897): Wrong error log when `--distribution-spec` is provided with invalid value
- Fix [#1003](https://togithub.com/deislabs/oras/issues/1003): Tree view output of `oras discover` prints unexpected nodes
#### Other Changes
- Improve UX, documentation, performance, tests and code coverage
- Update dependencies
- Update to Golang `1.21.0`
***
### What's Changed Since RC.2
#### Other Changes
- Improve performance
- Reduced number of auth requests for push and attach ([#1084](https://togithub.com/deislabs/oras/issues/1084))
- Improve documentation
- Update security guide ([#1017](https://togithub.com/deislabs/oras/issues/1017))
- Update compatibility mode doc ([#1065](https://togithub.com/deislabs/oras/issues/1065))
- Update dependencies
- Bump oras-go to 2.3.0
- Improve tests
#### Detailed Commits
- bump: tag and release ORAS CLI v1.1.0-rc.2 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1078](https://togithub.com/oras-project/oras/pull/1078)
- test(e2e): add zot as a testing backend by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1072](https://togithub.com/oras-project/oras/pull/1072)
- Add SECURITY.md file by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/1082](https://togithub.com/oras-project/oras/pull/1082)
- test(e2e): update e2e specs for `oras attach` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1081](https://togithub.com/oras-project/oras/pull/1081)
- test(e2e): use ZOT as testing backend for `oras blob` specs by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1083](https://togithub.com/oras-project/oras/pull/1083)
- test(e2e): fix logging when e2e test fails by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1090](https://togithub.com/oras-project/oras/pull/1090)
- test(e2e): migrate `oras push` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1085](https://togithub.com/oras-project/oras/pull/1085)
- test(e2e): migrate `oras pull` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1086](https://togithub.com/oras-project/oras/pull/1086)
- test(e2e): migrate `oras tag` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1087](https://togithub.com/oras-project/oras/pull/1087)
- test(e2e): migrate `oras repo` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1088](https://togithub.com/oras-project/oras/pull/1088)
- test(e2e): migrate `oras manifest` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1089](https://togithub.com/oras-project/oras/pull/1089)
- perf: save auth requests for push and attach by [@Wwwsylvia](https://togithub.com/Wwwsylvia) in [https://github.com/oras-project/oras/pull/1097](https://togithub.com/oras-project/oras/pull/1097)
- test(e2e): re-bake test data by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1094](https://togithub.com/oras-project/oras/pull/1094)
- test(e2e): migrate `oras cp` and `oras discover` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1093](https://togithub.com/oras-project/oras/pull/1093)
- test(e2e): cover pulling test for image spec 1.1.0-rc.2 artifact by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1098](https://togithub.com/oras-project/oras/pull/1098)
- test(e2e): add tests to cover OCI spec v1.1.0-rc.4 and OCI distribution spec 1.1.0-rc3 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1099](https://togithub.com/oras-project/oras/pull/1099)
- test(e2e): add doc for ZOT test data by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1100](https://togithub.com/oras-project/oras/pull/1100)
- build(deps): bump oras-go to v2.3.0 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1101](https://togithub.com/oras-project/oras/pull/1101)
- doc: update example for `oras push` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1102](https://togithub.com/oras-project/oras/pull/1102)
- doc: update compatibility mode doc to align with ORAS v1.1.0 by [@FeynmanZhou](https://togithub.com/FeynmanZhou) in [https://github.com/oras-project/oras/pull/1068](https://togithub.com/oras-project/oras/pull/1068)
**Full Changelog**: https://github.com/oras-project/oras/compare/v1.1.0-rc.2...v1.1.0
#### Notes
This release was signed with `BE6F A8DD A48D 4C23 0091 A0A9 276D 8A72 4CE1 C704` ([@qweeah](https://togithub.com/qweeah)'s GPG key) which can be found [here](https://togithub.com/qweeah.gpg).
### [`v1.0.1`](https://togithub.com/oras-project/oras/releases/tag/v1.0.1)
[Compare Source](https://togithub.com/deislabs/oras/compare/v1.0.0...v1.0.1)
#### Bug Fixes
- `oras push` and `oras attach` generates unwanted manifest file ([#995](https://togithub.com/deislabs/oras/issues/995))
- Path validation not enforced for `oras attach` and `oras push` ([#983](https://togithub.com/deislabs/oras/issues/983), [#980](https://togithub.com/deislabs/oras/issues/980), [#973](https://togithub.com/deislabs/oras/issues/973))
- Wrong error information when `--distribution-spec` is provided with invalid value ([#897](https://togithub.com/deislabs/oras/issues/897))
- Tree view print bug in `oras discover` ([#1003](https://togithub.com/deislabs/oras/issues/1003))
#### Other Changes
- Improve UX
- `oras pull` prints better error message when path traversal is required ([#978](https://togithub.com/deislabs/oras/issues/978))
- Mention OCI support in help doc ([#904](https://togithub.com/deislabs/oras/issues/904))
- Mark filtered tag listing as experimental ([#993](https://togithub.com/deislabs/oras/issues/993))
- Improve documentation
- Fix link to contributing guide ([#950](https://togithub.com/deislabs/oras/issues/950))
- Update dependencies
- Remove dependencies on docker CLI ([#414](https://togithub.com/deislabs/oras/issues/414))
- Update dependency from `github.com/moby/term` to `golang.org/x/term` ([#908](https://togithub.com/deislabs/oras/issues/908))
- Update to Golang `1.20.7`
- Improve tests
- Generate code coverage for E2E tests ([#900](https://togithub.com/deislabs/oras/issues/900))
- Add more tests ([#904](https://togithub.com/deislabs/oras/issues/904), [#901](https://togithub.com/deislabs/oras/issues/901), [#972](https://togithub.com/deislabs/oras/issues/972), [#1022](https://togithub.com/deislabs/oras/issues/1022))
- Workflow
- Add GitHub actions to lint go code ([#981](https://togithub.com/deislabs/oras/issues/981))
- Update GitHub actions output configuration ([#1018](https://togithub.com/deislabs/oras/issues/1018))
- Add GitHub stale actions
#### Detailed Commits
- refactor: Logger initializes logging by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/867](https://togithub.com/oras-project/oras/pull/867)
- test(cov): make unit tests cover more by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/905](https://togithub.com/oras-project/oras/pull/905)
- refactor: add root package for Cobra commands by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/825](https://togithub.com/oras-project/oras/pull/825)
- build(deps): bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/909](https://togithub.com/oras-project/oras/pull/909)
- refactor: unify command contexts by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/899](https://togithub.com/oras-project/oras/pull/899)
- test: generate coverage profile during e2e tests by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/903](https://togithub.com/oras-project/oras/pull/903)
- build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/919](https://togithub.com/oras-project/oras/pull/919)
- refactor: replace terminal package used by `oras login` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/910](https://togithub.com/oras-project/oras/pull/910)
- test(e2e): OCI layout specs for `oras tag` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/902](https://togithub.com/oras-project/oras/pull/902)
- build(deps): bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/918](https://togithub.com/oras-project/oras/pull/918)
- Add make target for e2e by [@sajayantony](https://togithub.com/sajayantony) in [https://github.com/oras-project/oras/pull/924](https://togithub.com/oras-project/oras/pull/924)
- test: make e2e coverage data in action by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/926](https://togithub.com/oras-project/oras/pull/926)
- build(deps): bump github.com/docker/cli from 23.0.3+incompatible to 23.0.4+incompatible by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/929](https://togithub.com/oras-project/oras/pull/929)
- feat: use oras-credential-go to do auth by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/932](https://togithub.com/oras-project/oras/pull/932)
- doc: fix broken logo link by [@FeynmanZhou](https://togithub.com/FeynmanZhou) in [https://github.com/oras-project/oras/pull/935](https://togithub.com/oras-project/oras/pull/935)
- docs: fix broken links in README by [@wangxiaoxuan273](https://togithub.com/wangxiaoxuan273) in [https://github.com/oras-project/oras/pull/937](https://togithub.com/oras-project/oras/pull/937)
- build: using cross compilation in docker build by [@northtyphoon](https://togithub.com/northtyphoon) in [https://github.com/oras-project/oras/pull/938](https://togithub.com/oras-project/oras/pull/938)
- build(deps): bump golang.org/x/term from 0.7.0 to 0.8.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/942](https://togithub.com/oras-project/oras/pull/942)
- build(deps): bump oras-go and oras-credentials-go by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/946](https://togithub.com/oras-project/oras/pull/946)
- fixed the link in the file : oras/CONTRIBUTING.md by [@yash7raut](https://togithub.com/yash7raut) in [https://github.com/oras-project/oras/pull/951](https://togithub.com/oras-project/oras/pull/951)
- build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/953](https://togithub.com/oras-project/oras/pull/953)
- build: add dependabot for e2e module by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/958](https://togithub.com/oras-project/oras/pull/958)
- build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/955](https://togithub.com/oras-project/oras/pull/955)
- build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.0 to 0.1.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/956](https://togithub.com/oras-project/oras/pull/956)
- build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc2 to 1.1.0-rc.3 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/961](https://togithub.com/oras-project/oras/pull/961)
- build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.5 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/962](https://togithub.com/oras-project/oras/pull/962)
- build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.7 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/959](https://togithub.com/oras-project/oras/pull/959)
- build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/960](https://togithub.com/oras-project/oras/pull/960)
- build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/963](https://togithub.com/oras-project/oras/pull/963)
- fix: correct spec flag description by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/964](https://togithub.com/oras-project/oras/pull/964)
- build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/966](https://togithub.com/oras-project/oras/pull/966)
- chore: add snap for ubuntu by [@SamirPS](https://togithub.com/SamirPS) in [https://github.com/oras-project/oras/pull/965](https://togithub.com/oras-project/oras/pull/965)
- build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/970](https://togithub.com/oras-project/oras/pull/970)
- build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/969](https://togithub.com/oras-project/oras/pull/969)
- chore: simplify e2e scripts and github action by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/967](https://togithub.com/oras-project/oras/pull/967)
- Revert "Add help to make file" by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/974](https://togithub.com/oras-project/oras/pull/974)
- Add help to make file by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/975](https://togithub.com/oras-project/oras/pull/975)
- build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/971](https://togithub.com/oras-project/oras/pull/971)
- build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/976](https://togithub.com/oras-project/oras/pull/976)
- test: add unit-tests for `internal/version.go` by [@enraiha0307](https://togithub.com/enraiha0307) in [https://github.com/oras-project/oras/pull/977](https://togithub.com/oras-project/oras/pull/977)
- build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.1 to 0.2.0 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/990](https://togithub.com/oras-project/oras/pull/990)
- fix: enforce path validation for push/attach and improve path traversal failure message for pull by [@suganyas](https://togithub.com/suganyas) in [https://github.com/oras-project/oras/pull/988](https://togithub.com/oras-project/oras/pull/988)
- chore: add experimental mark to filtered tag listing by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/994](https://togithub.com/oras-project/oras/pull/994)
- test(e2e): add test for pushing via absolute path by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/991](https://togithub.com/oras-project/oras/pull/991)
- test(e2e): update spec-related constants to string literal by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/992](https://togithub.com/oras-project/oras/pull/992)
- chore: update help doc with OCI layout support by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/997](https://togithub.com/oras-project/oras/pull/997)
- feat: add flag to skip deleting obsolete referrers index by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/957](https://togithub.com/oras-project/oras/pull/957)
- fix: pushing based on temporary file store path by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/996](https://togithub.com/oras-project/oras/pull/996)
- chore: update minor version by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1000](https://togithub.com/oras-project/oras/pull/1000)
- fix: properly print tree for `oras discover` by [@shizhMSFT](https://togithub.com/shizhMSFT) in [https://github.com/oras-project/oras/pull/1005](https://togithub.com/oras-project/oras/pull/1005)
- build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1008](https://togithub.com/oras-project/oras/pull/1008)
- build(deps): bump oras-go to main branch by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1004](https://togithub.com/oras-project/oras/pull/1004)
- revert: "chore: update minor version ([#1000](https://togithub.com/deislabs/oras/issues/1000))" by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1014](https://togithub.com/oras-project/oras/pull/1014)
- bump: update golang from 1.20.2 to 1.20.5 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1015](https://togithub.com/oras-project/oras/pull/1015)
- bump: tag and release ORAS CLI v1.1.0-rc.1 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1016](https://togithub.com/oras-project/oras/pull/1016)
- chore: fix lint warning by [@kranurag7](https://togithub.com/kranurag7) in [https://github.com/oras-project/oras/pull/1001](https://togithub.com/oras-project/oras/pull/1001)
- chore: fix the links in project readme by [@amands98](https://togithub.com/amands98) in [https://github.com/oras-project/oras/pull/1012](https://togithub.com/oras-project/oras/pull/1012)
- chore: update container build prepare job output in Github Actions by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1019](https://togithub.com/oras-project/oras/pull/1019)
- test: add unit test for error scenario in `internal/credential/store.go` by [@enraiha0307](https://togithub.com/enraiha0307) in [https://github.com/oras-project/oras/pull/982](https://togithub.com/oras-project/oras/pull/982)
- chore: use golangci lint by [@kranurag7](https://togithub.com/kranurag7) in [https://github.com/oras-project/oras/pull/986](https://togithub.com/oras-project/oras/pull/986)
- fix: correct e2e specs and CI check configuration by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1023](https://togithub.com/oras-project/oras/pull/1023)
- workflow: add github stale action by [@sajayantony](https://togithub.com/sajayantony) in [https://github.com/oras-project/oras/pull/1024](https://togithub.com/oras-project/oras/pull/1024)
- fix: move stale into .github/workflows by [@sajayantony](https://togithub.com/sajayantony) in [https://github.com/oras-project/oras/pull/1031](https://togithub.com/oras-project/oras/pull/1031)
- build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1037](https://togithub.com/oras-project/oras/pull/1037)
- chore: improving error log for `oras push` and `oras attach` when the annotation file is invalid by [@1Shubham7](https://togithub.com/1Shubham7) in [https://github.com/oras-project/oras/pull/1026](https://togithub.com/oras-project/oras/pull/1026)
- chore: exempt stale if milestone is set by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1036](https://togithub.com/oras-project/oras/pull/1036)
- merge: fast forward release-1.0 to main by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1045](https://togithub.com/oras-project/oras/pull/1045)
- revert: "feat: add flag to skip deleting obsolete referrers index ([#957](https://togithub.com/deislabs/oras/issues/957))" by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1046](https://togithub.com/oras-project/oras/pull/1046)
- revert: "bump: update oras version to 1.1.0-rc.1" by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1047](https://togithub.com/oras-project/oras/pull/1047)
- bump: update golang version to 1.20.7 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1049](https://togithub.com/oras-project/oras/pull/1049)
#### New Contributors
- [@northtyphoon](https://togithub.com/northtyphoon) made their first contribution in [https://github.com/oras-project/oras/pull/938](https://togithub.com/oras-project/oras/pull/938)
- [@yash7raut](https://togithub.com/yash7raut) made their first contribution in [https://github.com/oras-project/oras/pull/951](https://togithub.com/oras-project/oras/pull/951)
- [@SamirPS](https://togithub.com/SamirPS) made their first contribution in [https://github.com/oras-project/oras/pull/965](https://togithub.com/oras-project/oras/pull/965)
- [@enraiha0307](https://togithub.com/enraiha0307) made their first contribution in [https://github.com/oras-project/oras/pull/977](https://togithub.com/oras-project/oras/pull/977)
- [@suganyas](https://togithub.com/suganyas) made their first contribution in [https://github.com/oras-project/oras/pull/988](https://togithub.com/oras-project/oras/pull/988)
- [@kranurag7](https://togithub.com/kranurag7) made their first contribution in [https://github.com/oras-project/oras/pull/1001](https://togithub.com/oras-project/oras/pull/1001)
- [@amands98](https://togithub.com/amands98) made their first contribution in [https://github.com/oras-project/oras/pull/1012](https://togithub.com/oras-project/oras/pull/1012)
- [@1Shubham7](https://togithub.com/1Shubham7) made their first contribution in [https://github.com/oras-project/oras/pull/1026](https://togithub.com/oras-project/oras/pull/1026)
**Full Changelog**: https://github.com/oras-project/oras/compare/v1.0.0...v1.0.1
#### Notes
This release was signed with `BE6F A8DD A48D 4C23 0091 A0A9 276D 8A72 4CE1 C704` ([@qweeah](https://togithub.com/qweeah)'s GPG key) which can be found [here](https://togithub.com/qweeah.gpg).
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v1.0.0
->v1.1.0
Release Notes
deislabs/oras (github.com/deislabs/oras)
### [`v1.1.0`](https://togithub.com/oras-project/oras/releases/tag/v1.1.0) [Compare Source](https://togithub.com/deislabs/oras/compare/v1.0.1...v1.1.0) #### New Features - `oras` is compliant with OCI [image-spec v1.1.0-rc4](https://togithub.com/opencontainers/image-spec/blob/v1.1.0-rc4/manifest.md#oci-image-manifest-specification) and [distribution-spec v1.1.0-rc3](https://togithub.com/opencontainers/distribution-spec/tree/v1.1.0-rc3) - Support copying or pulling image index with a `subject` field - Output OCI distribution [warning headers](https://togithub.com/opencontainers/distribution-spec/blob/v1.1.0-rc3/spec.md#warnings) - Improve `oras push` - Formalize the default config to [empty descriptor](https://togithub.com/opencontainers/image-spec/blob/v1.1.0-rc4/manifest.md#guidance-for-an-empty-descriptor) (previously `application/vnd.unknown.config.v1+json`) - Default to artifact type `application/vnd.unknown.artifact.v1` if not specified - Allow [artifact type and config](https://oras.land/docs/concepts/artifact#artifacts-with-config) to be specified at the same time #### Experimental Features - **BREAKING CHANGE**: [Redesign](https://togithub.com/oras-project/oras/blob/131f395a28830d0a53c6764b1f82ee7952d11839/docs/proposals/compatibility-mode.md) the flag `--image-spec` - Add options `v1.0` and `v1.1` - Remove options `v1.1-image` and `v1.1-artifact` - No longer produce manifests of type `application/vnd.oci.artifact.manifest.v1+json` - **BREAKING CHANGE**: Remove the flag `--image-spec` from `oras attach` #### Bug Fixes - Fix [#995](https://togithub.com/deislabs/oras/issues/995): `oras push` and `oras attach` generates unwanted manifest file - Fix [#983](https://togithub.com/deislabs/oras/issues/983), [#980](https://togithub.com/deislabs/oras/issues/980), [#973](https://togithub.com/deislabs/oras/issues/973): Flag `--disable-path-validation` not working for `oras attach` and `oras push` - Fix [#897](https://togithub.com/deislabs/oras/issues/897): Wrong error log when `--distribution-spec` is provided with invalid value - Fix [#1003](https://togithub.com/deislabs/oras/issues/1003): Tree view output of `oras discover` prints unexpected nodes #### Other Changes - Improve UX, documentation, performance, tests and code coverage - Update dependencies - Update to Golang `1.21.0` *** ### What's Changed Since RC.2 #### Other Changes - Improve performance - Reduced number of auth requests for push and attach ([#1084](https://togithub.com/deislabs/oras/issues/1084)) - Improve documentation - Update security guide ([#1017](https://togithub.com/deislabs/oras/issues/1017)) - Update compatibility mode doc ([#1065](https://togithub.com/deislabs/oras/issues/1065)) - Update dependencies - Bump oras-go to 2.3.0 - Improve tests #### Detailed Commits - bump: tag and release ORAS CLI v1.1.0-rc.2 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1078](https://togithub.com/oras-project/oras/pull/1078) - test(e2e): add zot as a testing backend by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1072](https://togithub.com/oras-project/oras/pull/1072) - Add SECURITY.md file by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/1082](https://togithub.com/oras-project/oras/pull/1082) - test(e2e): update e2e specs for `oras attach` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1081](https://togithub.com/oras-project/oras/pull/1081) - test(e2e): use ZOT as testing backend for `oras blob` specs by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1083](https://togithub.com/oras-project/oras/pull/1083) - test(e2e): fix logging when e2e test fails by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1090](https://togithub.com/oras-project/oras/pull/1090) - test(e2e): migrate `oras push` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1085](https://togithub.com/oras-project/oras/pull/1085) - test(e2e): migrate `oras pull` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1086](https://togithub.com/oras-project/oras/pull/1086) - test(e2e): migrate `oras tag` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1087](https://togithub.com/oras-project/oras/pull/1087) - test(e2e): migrate `oras repo` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1088](https://togithub.com/oras-project/oras/pull/1088) - test(e2e): migrate `oras manifest` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1089](https://togithub.com/oras-project/oras/pull/1089) - perf: save auth requests for push and attach by [@Wwwsylvia](https://togithub.com/Wwwsylvia) in [https://github.com/oras-project/oras/pull/1097](https://togithub.com/oras-project/oras/pull/1097) - test(e2e): re-bake test data by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1094](https://togithub.com/oras-project/oras/pull/1094) - test(e2e): migrate `oras cp` and `oras discover` specs to ZOT by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1093](https://togithub.com/oras-project/oras/pull/1093) - test(e2e): cover pulling test for image spec 1.1.0-rc.2 artifact by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1098](https://togithub.com/oras-project/oras/pull/1098) - test(e2e): add tests to cover OCI spec v1.1.0-rc.4 and OCI distribution spec 1.1.0-rc3 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1099](https://togithub.com/oras-project/oras/pull/1099) - test(e2e): add doc for ZOT test data by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1100](https://togithub.com/oras-project/oras/pull/1100) - build(deps): bump oras-go to v2.3.0 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1101](https://togithub.com/oras-project/oras/pull/1101) - doc: update example for `oras push` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1102](https://togithub.com/oras-project/oras/pull/1102) - doc: update compatibility mode doc to align with ORAS v1.1.0 by [@FeynmanZhou](https://togithub.com/FeynmanZhou) in [https://github.com/oras-project/oras/pull/1068](https://togithub.com/oras-project/oras/pull/1068) **Full Changelog**: https://github.com/oras-project/oras/compare/v1.1.0-rc.2...v1.1.0 #### Notes This release was signed with `BE6F A8DD A48D 4C23 0091 A0A9 276D 8A72 4CE1 C704` ([@qweeah](https://togithub.com/qweeah)'s GPG key) which can be found [here](https://togithub.com/qweeah.gpg). ### [`v1.0.1`](https://togithub.com/oras-project/oras/releases/tag/v1.0.1) [Compare Source](https://togithub.com/deislabs/oras/compare/v1.0.0...v1.0.1) #### Bug Fixes - `oras push` and `oras attach` generates unwanted manifest file ([#995](https://togithub.com/deislabs/oras/issues/995)) - Path validation not enforced for `oras attach` and `oras push` ([#983](https://togithub.com/deislabs/oras/issues/983), [#980](https://togithub.com/deislabs/oras/issues/980), [#973](https://togithub.com/deislabs/oras/issues/973)) - Wrong error information when `--distribution-spec` is provided with invalid value ([#897](https://togithub.com/deislabs/oras/issues/897)) - Tree view print bug in `oras discover` ([#1003](https://togithub.com/deislabs/oras/issues/1003)) #### Other Changes - Improve UX - `oras pull` prints better error message when path traversal is required ([#978](https://togithub.com/deislabs/oras/issues/978)) - Mention OCI support in help doc ([#904](https://togithub.com/deislabs/oras/issues/904)) - Mark filtered tag listing as experimental ([#993](https://togithub.com/deislabs/oras/issues/993)) - Improve documentation - Fix link to contributing guide ([#950](https://togithub.com/deislabs/oras/issues/950)) - Update dependencies - Remove dependencies on docker CLI ([#414](https://togithub.com/deislabs/oras/issues/414)) - Update dependency from `github.com/moby/term` to `golang.org/x/term` ([#908](https://togithub.com/deislabs/oras/issues/908)) - Update to Golang `1.20.7` - Improve tests - Generate code coverage for E2E tests ([#900](https://togithub.com/deislabs/oras/issues/900)) - Add more tests ([#904](https://togithub.com/deislabs/oras/issues/904), [#901](https://togithub.com/deislabs/oras/issues/901), [#972](https://togithub.com/deislabs/oras/issues/972), [#1022](https://togithub.com/deislabs/oras/issues/1022)) - Workflow - Add GitHub actions to lint go code ([#981](https://togithub.com/deislabs/oras/issues/981)) - Update GitHub actions output configuration ([#1018](https://togithub.com/deislabs/oras/issues/1018)) - Add GitHub stale actions #### Detailed Commits - refactor: Logger initializes logging by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/867](https://togithub.com/oras-project/oras/pull/867) - test(cov): make unit tests cover more by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/905](https://togithub.com/oras-project/oras/pull/905) - refactor: add root package for Cobra commands by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/825](https://togithub.com/oras-project/oras/pull/825) - build(deps): bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/909](https://togithub.com/oras-project/oras/pull/909) - refactor: unify command contexts by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/899](https://togithub.com/oras-project/oras/pull/899) - test: generate coverage profile during e2e tests by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/903](https://togithub.com/oras-project/oras/pull/903) - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/919](https://togithub.com/oras-project/oras/pull/919) - refactor: replace terminal package used by `oras login` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/910](https://togithub.com/oras-project/oras/pull/910) - test(e2e): OCI layout specs for `oras tag` by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/902](https://togithub.com/oras-project/oras/pull/902) - build(deps): bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/918](https://togithub.com/oras-project/oras/pull/918) - Add make target for e2e by [@sajayantony](https://togithub.com/sajayantony) in [https://github.com/oras-project/oras/pull/924](https://togithub.com/oras-project/oras/pull/924) - test: make e2e coverage data in action by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/926](https://togithub.com/oras-project/oras/pull/926) - build(deps): bump github.com/docker/cli from 23.0.3+incompatible to 23.0.4+incompatible by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/929](https://togithub.com/oras-project/oras/pull/929) - feat: use oras-credential-go to do auth by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/932](https://togithub.com/oras-project/oras/pull/932) - doc: fix broken logo link by [@FeynmanZhou](https://togithub.com/FeynmanZhou) in [https://github.com/oras-project/oras/pull/935](https://togithub.com/oras-project/oras/pull/935) - docs: fix broken links in README by [@wangxiaoxuan273](https://togithub.com/wangxiaoxuan273) in [https://github.com/oras-project/oras/pull/937](https://togithub.com/oras-project/oras/pull/937) - build: using cross compilation in docker build by [@northtyphoon](https://togithub.com/northtyphoon) in [https://github.com/oras-project/oras/pull/938](https://togithub.com/oras-project/oras/pull/938) - build(deps): bump golang.org/x/term from 0.7.0 to 0.8.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/942](https://togithub.com/oras-project/oras/pull/942) - build(deps): bump oras-go and oras-credentials-go by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/946](https://togithub.com/oras-project/oras/pull/946) - fixed the link in the file : oras/CONTRIBUTING.md by [@yash7raut](https://togithub.com/yash7raut) in [https://github.com/oras-project/oras/pull/951](https://togithub.com/oras-project/oras/pull/951) - build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/953](https://togithub.com/oras-project/oras/pull/953) - build: add dependabot for e2e module by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/958](https://togithub.com/oras-project/oras/pull/958) - build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/955](https://togithub.com/oras-project/oras/pull/955) - build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.0 to 0.1.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/956](https://togithub.com/oras-project/oras/pull/956) - build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc2 to 1.1.0-rc.3 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/961](https://togithub.com/oras-project/oras/pull/961) - build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.5 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/962](https://togithub.com/oras-project/oras/pull/962) - build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.7 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/959](https://togithub.com/oras-project/oras/pull/959) - build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/960](https://togithub.com/oras-project/oras/pull/960) - build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/963](https://togithub.com/oras-project/oras/pull/963) - fix: correct spec flag description by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/964](https://togithub.com/oras-project/oras/pull/964) - build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/966](https://togithub.com/oras-project/oras/pull/966) - chore: add snap for ubuntu by [@SamirPS](https://togithub.com/SamirPS) in [https://github.com/oras-project/oras/pull/965](https://togithub.com/oras-project/oras/pull/965) - build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/970](https://togithub.com/oras-project/oras/pull/970) - build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/969](https://togithub.com/oras-project/oras/pull/969) - chore: simplify e2e scripts and github action by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/967](https://togithub.com/oras-project/oras/pull/967) - Revert "Add help to make file" by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/974](https://togithub.com/oras-project/oras/pull/974) - Add help to make file by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/975](https://togithub.com/oras-project/oras/pull/975) - build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/971](https://togithub.com/oras-project/oras/pull/971) - build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/976](https://togithub.com/oras-project/oras/pull/976) - test: add unit-tests for `internal/version.go` by [@enraiha0307](https://togithub.com/enraiha0307) in [https://github.com/oras-project/oras/pull/977](https://togithub.com/oras-project/oras/pull/977) - build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.1 to 0.2.0 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/990](https://togithub.com/oras-project/oras/pull/990) - fix: enforce path validation for push/attach and improve path traversal failure message for pull by [@suganyas](https://togithub.com/suganyas) in [https://github.com/oras-project/oras/pull/988](https://togithub.com/oras-project/oras/pull/988) - chore: add experimental mark to filtered tag listing by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/994](https://togithub.com/oras-project/oras/pull/994) - test(e2e): add test for pushing via absolute path by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/991](https://togithub.com/oras-project/oras/pull/991) - test(e2e): update spec-related constants to string literal by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/992](https://togithub.com/oras-project/oras/pull/992) - chore: update help doc with OCI layout support by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/997](https://togithub.com/oras-project/oras/pull/997) - feat: add flag to skip deleting obsolete referrers index by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/957](https://togithub.com/oras-project/oras/pull/957) - fix: pushing based on temporary file store path by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/996](https://togithub.com/oras-project/oras/pull/996) - chore: update minor version by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1000](https://togithub.com/oras-project/oras/pull/1000) - fix: properly print tree for `oras discover` by [@shizhMSFT](https://togithub.com/shizhMSFT) in [https://github.com/oras-project/oras/pull/1005](https://togithub.com/oras-project/oras/pull/1005) - build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1008](https://togithub.com/oras-project/oras/pull/1008) - build(deps): bump oras-go to main branch by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1004](https://togithub.com/oras-project/oras/pull/1004) - revert: "chore: update minor version ([#1000](https://togithub.com/deislabs/oras/issues/1000))" by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1014](https://togithub.com/oras-project/oras/pull/1014) - bump: update golang from 1.20.2 to 1.20.5 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1015](https://togithub.com/oras-project/oras/pull/1015) - bump: tag and release ORAS CLI v1.1.0-rc.1 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1016](https://togithub.com/oras-project/oras/pull/1016) - chore: fix lint warning by [@kranurag7](https://togithub.com/kranurag7) in [https://github.com/oras-project/oras/pull/1001](https://togithub.com/oras-project/oras/pull/1001) - chore: fix the links in project readme by [@amands98](https://togithub.com/amands98) in [https://github.com/oras-project/oras/pull/1012](https://togithub.com/oras-project/oras/pull/1012) - chore: update container build prepare job output in Github Actions by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1019](https://togithub.com/oras-project/oras/pull/1019) - test: add unit test for error scenario in `internal/credential/store.go` by [@enraiha0307](https://togithub.com/enraiha0307) in [https://github.com/oras-project/oras/pull/982](https://togithub.com/oras-project/oras/pull/982) - chore: use golangci lint by [@kranurag7](https://togithub.com/kranurag7) in [https://github.com/oras-project/oras/pull/986](https://togithub.com/oras-project/oras/pull/986) - fix: correct e2e specs and CI check configuration by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1023](https://togithub.com/oras-project/oras/pull/1023) - workflow: add github stale action by [@sajayantony](https://togithub.com/sajayantony) in [https://github.com/oras-project/oras/pull/1024](https://togithub.com/oras-project/oras/pull/1024) - fix: move stale into .github/workflows by [@sajayantony](https://togithub.com/sajayantony) in [https://github.com/oras-project/oras/pull/1031](https://togithub.com/oras-project/oras/pull/1031) - build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1037](https://togithub.com/oras-project/oras/pull/1037) - chore: improving error log for `oras push` and `oras attach` when the annotation file is invalid by [@1Shubham7](https://togithub.com/1Shubham7) in [https://github.com/oras-project/oras/pull/1026](https://togithub.com/oras-project/oras/pull/1026) - chore: exempt stale if milestone is set by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1036](https://togithub.com/oras-project/oras/pull/1036) - merge: fast forward release-1.0 to main by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1045](https://togithub.com/oras-project/oras/pull/1045) - revert: "feat: add flag to skip deleting obsolete referrers index ([#957](https://togithub.com/deislabs/oras/issues/957))" by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1046](https://togithub.com/oras-project/oras/pull/1046) - revert: "bump: update oras version to 1.1.0-rc.1" by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1047](https://togithub.com/oras-project/oras/pull/1047) - bump: update golang version to 1.20.7 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1049](https://togithub.com/oras-project/oras/pull/1049) #### New Contributors - [@northtyphoon](https://togithub.com/northtyphoon) made their first contribution in [https://github.com/oras-project/oras/pull/938](https://togithub.com/oras-project/oras/pull/938) - [@yash7raut](https://togithub.com/yash7raut) made their first contribution in [https://github.com/oras-project/oras/pull/951](https://togithub.com/oras-project/oras/pull/951) - [@SamirPS](https://togithub.com/SamirPS) made their first contribution in [https://github.com/oras-project/oras/pull/965](https://togithub.com/oras-project/oras/pull/965) - [@enraiha0307](https://togithub.com/enraiha0307) made their first contribution in [https://github.com/oras-project/oras/pull/977](https://togithub.com/oras-project/oras/pull/977) - [@suganyas](https://togithub.com/suganyas) made their first contribution in [https://github.com/oras-project/oras/pull/988](https://togithub.com/oras-project/oras/pull/988) - [@kranurag7](https://togithub.com/kranurag7) made their first contribution in [https://github.com/oras-project/oras/pull/1001](https://togithub.com/oras-project/oras/pull/1001) - [@amands98](https://togithub.com/amands98) made their first contribution in [https://github.com/oras-project/oras/pull/1012](https://togithub.com/oras-project/oras/pull/1012) - [@1Shubham7](https://togithub.com/1Shubham7) made their first contribution in [https://github.com/oras-project/oras/pull/1026](https://togithub.com/oras-project/oras/pull/1026) **Full Changelog**: https://github.com/oras-project/oras/compare/v1.0.0...v1.0.1 #### Notes This release was signed with `BE6F A8DD A48D 4C23 0091 A0A9 276D 8A72 4CE1 C704` ([@qweeah](https://togithub.com/qweeah)'s GPG key) which can be found [here](https://togithub.com/qweeah.gpg).Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.