build(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1

[dependabot[bot]]

Bumps github.com/google/go-containerregistry from 0.15.2 to 0.16.1.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.16.1

Release is broken due to goreleaser error, 0.16.1 has the fix

What's Changed

• bump deps using ./hack/bump-deps.sh by @​imjasonh in google/go-containerregistry#1702
• Allow crane to export schema 1 images by @​jonjohnsonjr in google/go-containerregistry#1704
• fixed a goroutine leak by @​ktarplee in google/go-containerregistry#1705
• retry HTTP 522 errors by default by @​imjasonh in google/go-containerregistry#1707
• Limit size of manifest by @​AdamKorcz in google/go-containerregistry#1711
• Add crane auth token by @​jonjohnsonjr in google/go-containerregistry#1709
• Bump codecov/codecov-action from 3.1.3 to 3.1.4 by @​dependabot in google/go-containerregistry#1710
• Pass scopes through crane auth token by @​jonjohnsonjr in google/go-containerregistry#1713
• fix: add bounds checking to addendum layer mutations to prevent panic by @​aaron-prindle in google/go-containerregistry#1715
• Surface better error messages in crane index by @​jonjohnsonjr in google/go-containerregistry#1722
• crane: add missing name option in crane index commands by @​HubertZhang in google/go-containerregistry#1723
• crane: Respect cmd.OutOrStdout by @​kyleconroy in google/go-containerregistry#1728
• Make ErrSchema1 checkable via errors.Is() by @​Laitr0n in google/go-containerregistry#1721
• Don't load into daemon if the image already exists by @​jonjohnsonjr in google/go-containerregistry#1724
• add --blobs-to-disk to 'crane registry serve' by @​imjasonh in google/go-containerregistry#1731
• Correct crane registry help text by @​jonjohnsonjr in google/go-containerregistry#1732
• Allow concurrent blob Sets, use RWMutex by @​mattmoor in google/go-containerregistry#1733
• Use RWLock, limit scope of locking, write digest first by @​mattmoor in google/go-containerregistry#1734
• Let the filesystem handle atomicity by @​mattmoor in google/go-containerregistry#1735
• Don't try cross-origin mounting against dockerhub by @​jonjohnsonjr in google/go-containerregistry#1743
• Drop localhost to support crane registry serve in a container by @​mattmoor in google/go-containerregistry#1746
• Return OCI Index content-type for referrers response by @​jdolitsky in google/go-containerregistry#1762

New Contributors

• @​AdamKorcz made their first contribution in google/go-containerregistry#1711
• @​HubertZhang made their first contribution in google/go-containerregistry#1723
• @​kyleconroy made their first contribution in google/go-containerregistry#1728
• @​Laitr0n made their first contribution in google/go-containerregistry#1721

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.15.2...v0.16.1

Container Images

https://gcr.io/go-containerregistry/crane:v0.16.1 https://gcr.io/go-containerregistry/gcrane:v0.16.1

For example:

docker pull gcr.io/go-containerregistry/crane:v0.16.1
docker pull gcr.io/go-containerregistry/gcrane:v0.16.1

v0.16.0

Release is broken due to goreleaser error, 0.16.1 has the fix

Commits

• a54d642 fix: pin to goreleaser v1.18 to unblock release (#1763)
• ea19b57 Return OCI Index content-type for referrers response (#1762)
• b850480 Drop localhost to support crane registry serve in a container (#1746)
• fe268b7 Don't try cross-origin mounting against dockerhub (#1743)
• 2472cbb Let the filesystem handle atomicity (#1735)
• db818dc Use RWLock, limit scope of locking, write digest first (#1734)
• 44a6e2e Allow concurrent blob Sets, use RWMutex (#1733)
• 9010ce1 Correct crane registry help text (#1732)
• 03ad2ac add --blobs-to-disk to 'crane registry serve' (#1731)
• 4e4b03a Don't load into daemon if the image already exists (#1724)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)