renovate[bot]
commented
2 months ago Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️ Warning: custom changes will be lost.
This PR contains the following updates:
v1.7.6->v2.0.0Release Notes
bazel-contrib/rules_oci (rules_oci)
### [`v2.0.0`](https://redirect.github.com/bazel-contrib/rules_oci/releases/tag/v2.0.0) [Compare Source](https://redirect.github.com/bazel-contrib/rules_oci/compare/v1.8.0...v2.0.0-rc0) #### BREAKING CHANGES - Uncompressed archives in the tars attribute is no longer compressed when creating the image, this might make images bigger compared to 1.x. Use pkg_tar#extension or tar#compress attribute to compress the layers beforehand. ```starlark ### For pkg_tar pkg_tar( extension = "tar.gz" ) ### For tar tar( compress = "gzip" ) ``` - Digests of images created 1.x rules_oci will not match 2.x rules_oci, as we are no longer using crane to create the images. However, images should stay the same semantically. You can use [diffoci](https://redirect.github.com/reproducible-containers/diffoci) to make sure they are the same semantically! - Default output of `oci_tarball` is no longer a tarball, use a `filegroup` target to get the tarball. See [https://github.com/bazel-contrib/rules_oci/pull/548](https://redirect.github.com/bazel-contrib/rules_oci/pull/548) - `oci_tarball` is renamed to `oci_load` to better reflect it's purpose. - Bazel 5 is no longer supported, and tested by the CI, we will not be accepting fixes for it. #### SIGNIFICANT CHANGES - OCIImage action no longer spins an ephemeral registry instance to mutate images locally, making it slightly faster. See design [document](https://docs.google.com/document/d/1wZEB9QFxyrydhLiafYbaJ0D7Jd2FZRZjvoTtx0B8-yY/edit?usp=sharing) - oci_image now supports `zstd` compression - Now oci_pull fetches blobs in parallel on `Bazel >= 7.1` #### API Removals - oci_pull no longer has a `config_path` attribute, use `config` attribute instead. It was deprecated in 1.x. #### Using bzlmod with Bazel 6 or later: 1. Add `common --enable_bzlmod` to `.bazelrc`. 2. Add to your `MODULE.bazel` file: ```starlark bazel_dep(name = "rules_oci", version = "2.0.0") ### For testing, we also recommend https://registry.bazel.build/modules/container_structure_test oci = use_extension("@rules_oci//oci:extensions.bzl", "oci") ### Declare external images you need to pull, for example: oci.pull( name = "distroless_base", ### 'latest' is not reproducible, but it's convenient. ### During the build we print a WARNING message that includes recommended 'digest' and 'platforms' ### values which you can use here in place of 'tag' to pin for reproducibility. tag = "latest", image = "gcr.io/distroless/base", platforms = ["linux/amd64"], ) ### For each oci.pull call, repeat the "name" here to expose them as dependencies. use_repo(oci, "distroless_base") ``` #### Using WORKSPACE: ```starlark load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive") http_archive( name = "rules_oci", sha256 = "d007e6c96eb62c88397b68f329e4ca56e0cfe31204a2c54b0cb17819f89f83c8", strip_prefix = "rules_oci-2.0.0", url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.0.0/rules_oci-v2.0.0.tar.gz", ) load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies") rules_oci_dependencies() load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains") oci_register_toolchains(name = "oci") ### You can pull your base images using oci_pull like this: load("@rules_oci//oci:pull.bzl", "oci_pull") oci_pull( name = "distroless_base", digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86", image = "gcr.io/distroless/base", platforms = [ "linux/amd64", "linux/arm64", ], ) ``` #### What's Changed - docs: simplify use of expand_template by [@alexeagle](https://redirect.github.com/alexeagle) in [https://github.com/bazel-contrib/rules_oci/pull/534](https://redirect.github.com/bazel-contrib/rules_oci/pull/534) - chore: upgrade rules_go and gazelle by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/541](https://redirect.github.com/bazel-contrib/rules_oci/pull/541) - ci: only test with bazel 6, 7 by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/533](https://redirect.github.com/bazel-contrib/rules_oci/pull/533) - Add a minimal c++ example in doc by [@rygx](https://redirect.github.com/rygx) in [https://github.com/bazel-contrib/rules_oci/pull/516](https://redirect.github.com/bazel-contrib/rules_oci/pull/516) - \[docs] Add missing name to push examples by [@ptxmac](https://redirect.github.com/ptxmac) in [https://github.com/bazel-contrib/rules_oci/pull/513](https://redirect.github.com/bazel-contrib/rules_oci/pull/513) - feat: add nvcr.io to \_WWW_AUTH by [@nobu-k](https://redirect.github.com/nobu-k) in [https://github.com/bazel-contrib/rules_oci/pull/511](https://redirect.github.com/bazel-contrib/rules_oci/pull/511) - fix: Add quay back to authn config by [@ankit-agarwal1999](https://redirect.github.com/ankit-agarwal1999) in [https://github.com/bazel-contrib/rules_oci/pull/543](https://redirect.github.com/bazel-contrib/rules_oci/pull/543) - docs: recommend rules_distroless by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/546](https://redirect.github.com/bazel-contrib/rules_oci/pull/546) - refactor: remove yq dependency by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/386](https://redirect.github.com/bazel-contrib/rules_oci/pull/386) - refactor: use hermetic tar by [@alexeagle](https://redirect.github.com/alexeagle) in [https://github.com/bazel-contrib/rules_oci/pull/385](https://redirect.github.com/bazel-contrib/rules_oci/pull/385) - Add `toolchain` param to the affected actions by [@kotlaja](https://redirect.github.com/kotlaja) in [https://github.com/bazel-contrib/rules_oci/pull/341](https://redirect.github.com/bazel-contrib/rules_oci/pull/341) - Pass headers to Bazel downloader where available by [@mortenmj](https://redirect.github.com/mortenmj) in [https://github.com/bazel-contrib/rules_oci/pull/528](https://redirect.github.com/bazel-contrib/rules_oci/pull/528) - feat: don't produce big tar file as default output of oci_tarball by [@alexeagle](https://redirect.github.com/alexeagle) in [https://github.com/bazel-contrib/rules_oci/pull/548](https://redirect.github.com/bazel-contrib/rules_oci/pull/548) - refactor: remove registry references by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/551](https://redirect.github.com/bazel-contrib/rules_oci/pull/551) - chore: update deps and bazel by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/553](https://redirect.github.com/bazel-contrib/rules_oci/pull/553) - refactor: registryless oci_image by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/550](https://redirect.github.com/bazel-contrib/rules_oci/pull/550) - feat: implement out-of-band descriptor calculation by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/558](https://redirect.github.com/bazel-contrib/rules_oci/pull/558) - feat: implement tars symlinks by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/559](https://redirect.github.com/bazel-contrib/rules_oci/pull/559) - feat: support symlinking blobs from base by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/560](https://redirect.github.com/bazel-contrib/rules_oci/pull/560) - fix: make oci_image fully hermetic by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/569](https://redirect.github.com/bazel-contrib/rules_oci/pull/569) - fix: canonicalize missing components by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/567](https://redirect.github.com/bazel-contrib/rules_oci/pull/567) - fix: duplicate tar copying by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/576](https://redirect.github.com/bazel-contrib/rules_oci/pull/576) - Add jq as dependency required for oci_push by [@mering](https://redirect.github.com/mering) in [https://github.com/bazel-contrib/rules_oci/pull/589](https://redirect.github.com/bazel-contrib/rules_oci/pull/589) - example: add dockerfile build by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/570](https://redirect.github.com/bazel-contrib/rules_oci/pull/570) - refactor: remove curl fallback by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/568](https://redirect.github.com/bazel-contrib/rules_oci/pull/568) - Use non-blocking download to get image blobs, on Bazel >=7.1.0 by [@mortenmj](https://redirect.github.com/mortenmj) in [https://github.com/bazel-contrib/rules_oci/pull/601](https://redirect.github.com/bazel-contrib/rules_oci/pull/601) - fix: add tars into action inputs by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/599](https://redirect.github.com/bazel-contrib/rules_oci/pull/599) - chore: disable dockerfile example by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/605](https://redirect.github.com/bazel-contrib/rules_oci/pull/605) - fix: return correct extension metadata by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/611](https://redirect.github.com/bazel-contrib/rules_oci/pull/611) - chore: add --check_direct_dependencies to .bazelrc by [@gregmagolan](https://redirect.github.com/gregmagolan) in [https://github.com/bazel-contrib/rules_oci/pull/615](https://redirect.github.com/bazel-contrib/rules_oci/pull/615) - fix: make oci_tarball work with disjoint output root by [@thesayyn](https://redirect.github.com/thesayyn) in [https://github.com/bazel-contrib/rules_oci/pull/614](https://redirect.github.com/bazel-contrib/rules_oci/pull/614) - Copy files using coreutils cp by [@plobsing](https://redirect.github.com/plobsing) in [https://github.com/bazel-contrib/rules_oci/pull/595](https://redirect.github.com/bazel-contrib/rules_oci/pull/595) - Fix `jq: error (atConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.