search

jetstack / paranoia

Inspect certificate authorities in container images
Apache License 2.0
228 stars 9 forks source link

Bump github.com/google/go-containerregistry from 0.11.0 to 0.12.0 #57

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps github.com/google/go-containerregistry from 0.11.0 to 0.12.0.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.12.0

Changelog

  • 9b4fdd50 Bump actions/setup-go from 2 to 3 (#1463)
  • 7268da01 Bump actions/stale from 5 to 6 (#1452)
  • 7196cf3d Bump aws-actions/configure-aws-credentials from 1.6.1 to 1.7.0 (#1424)
  • 8eae069f Bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1453)
  • 969699e7 Bump deps using ./hack/bump-deps.sh (#1467)
  • c1f9836a Bump opencontainers/image-spec (#1423)
  • 49cdb8b4 Correct usage of authn.NewKeychainFromHelper in docs (#1419)
  • 3ba4c511 Fix tar PAX format handling (#1414)
  • 24a1c335 Ignore docker config if it's a directory (#1420)
  • a0f66878 Make ErrBadName checkable via errors.Is() (#1462)
  • 19e3eff7 Retry ECONNRESET errors (#1415)
  • 5749ee68 Support the platform specific authentication of krane in "auth get" command (#1413)
  • e3b94c7e allow remote.DefaultTransport to be overridden by an http.RoundTripper (#1449)
  • f981b4c0 deps: update goreleaser-action for bug (#1444)
  • 771a9b44 e2e: pull and export stdin and stdout (#1436)
  • 87b3a796 feat: Add krane to release archive (#1443)
  • 2859a0d0 feat: generate slsa provenance on github release artifacts (#1438)
  • 9a5c14ad fix crane's root.go after DefaultTransport change (#1450)
  • 2b54510b fix: consider base image media type when appending layers (#1437)
  • d3ed4089 registry: implement blob deletion (#1432)
  • 3413eb6c registry: implement pagination (#1430)
  • e2d575cf update crane installation instructions and release verification (#1440)

Container Images

https://gcr.io/go-containerregistry/crane:v0.12.0 https://gcr.io/go-containerregistry/gcrane:v0.12.0

For example:

docker pull gcr.io/go-containerregistry/crane:v0.12.0
docker pull gcr.io/go-containerregistry/gcrane:v0.12.0
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)