v0.0.9

Changelog

• 729419a: Add 'ko build' as a preferred alias for 'ko publish' (ko-build#456) (@imjasonh)
• 96bedf1: Add .ko.yaml to base ko container image on golang:1.17 (ko-build#533) (@imjasonh)
• 2fbc908: Add Trimpath build option (@halvards)
• 1425e4b: Add a mutex to map writing when using KOCACHE (ko-build#580) (@imjasonh)
• a8c0773: Add a workflow to push a :latest ko image to ghcr.io (ko-build#528) (@imjasonh)
• 22c9a52: Add coverage of --platform=a,b (ko-build#547) (@mattmoor)
• 9821190: Add e2e test for using ldflags to set a build-time variable (ko-build#480) (@imjasonh)
• da244de: Add how to use Azure Container Apps (ko-build#561) (@koudaiii)
• 00d0a34: Add integration test config to repo (@halvards)
• 4ac50b0: Add purls to SPDX sbom (ko-build#677) (@puerco)
• f5762be: Add support for --image-refs (ko-build#555) (@mattmoor)
• 6d06913: Add support for writing SBOMs when the build.Result is oci.Signed*. (ko-build#506) (@mattmoor)
• 84e8ab6: Allow to customize publish.Namer (ko-build#477) (@cardil)
• 73a4629: Always clean Dir for packages.Load (@jonjohnsonjr)
• 465eca2: Always produce OCI images and indexes (ko-build#449) (@imjasonh)
• 2502eb9: Build each platform concurrently (ko-build#527) (@jonjohnsonjr)
• 5fb6c8c: Bump actions/checkout from 2 to 3 (ko-build#640) (@dependabot[bot])
• 97cba5d: Bump actions/setup-go from 2 to 3 (ko-build#680) (@dependabot[bot])
• 2a54d04: Bump actions/stale from 3 to 4.1.0 (ko-build#613) (@dependabot[bot])
• 42fa3ec: Bump actions/stale from 4.1.0 to 5 (ko-build#639) (@dependabot[bot])
• d8e8aa5: Bump actions/upload-artifact from 2 to 3 (ko-build#681) (@dependabot[bot])
• 88c512e: Bump codecov/codecov-action from 1 to 2.1.0 (ko-build#614) (@dependabot[bot])
• 2e32caa: Bump codecov/codecov-action from 2.1.0 to 3.0.0 (ko-build#682) (@dependabot[bot])
• 7e69826: Bump codecov/codecov-action from 3.0.0 to 3.1.0 (ko-build#692) (@dependabot[bot])
• 84356b8: Bump ecr-login dep and update WithLogger callsite (ko-build#658) (@imjasonh)
• 7477a29: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#464) (@dependabot[bot])
• 933e908: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#508) (@dependabot[bot])
• 32490da: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#577) (@dependabot[bot])
• 1ae0fdd: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#615) (@dependabot[bot])
• 90970f8: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#647) (@dependabot[bot])
• 9459e51: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#664) (@dependabot[bot])
• 479ed62: Bump github.com/containerd/stargz-snapshotter/estargz (ko-build#685) (@dependabot[bot])
• 6230daa: Bump github.com/docker/docker (ko-build#466) (@dependabot[bot])
• b1c35d2: Bump github.com/docker/docker (ko-build#490) (@dependabot[bot])
• b20faa5: Bump github.com/docker/docker (ko-build#510) (@dependabot[bot])
• ddf9257: Bump github.com/docker/docker (ko-build#559) (@dependabot[bot])
• c6e07e8: Bump github.com/docker/docker (ko-build#646) (@dependabot[bot])
• 895cff9: Bump github.com/docker/docker (ko-build#673) (@dependabot[bot])
• 16c44ca: Bump github.com/docker/docker (ko-build#700) (@dependabot[bot])
• 70b671c: Bump github.com/google/go-cmp from 0.5.6 to 0.5.7 (ko-build#567) (@dependabot[bot])
• 901730b: Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 (ko-build#695) (@dependabot[bot])
• f44a16c: Bump github.com/google/go-containerregistry from 0.6.0 to 0.7.0 (ko-build#503) (@dependabot[bot])
• 64df1a7: Bump github.com/google/go-containerregistry from 0.7.0 to 0.8.0 (ko-build#565) (@dependabot[bot])
• fd81c29: Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (ko-build#557) (@dependabot[bot])
• e010e79: Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (ko-build#648) (@dependabot[bot])
• 815a59a: Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (ko-build#558) (@dependabot[bot])
• 7352239: Bump github.com/spf13/viper from 1.10.1 to 1.11.0 (ko-build#686) (@dependabot[bot])
• a1c8717: Bump github.com/spf13/viper from 1.9.0 to 1.10.0 (ko-build#529) (@dependabot[bot])
• 92e8055: Bump github/codeql-action from 1 to 2 (ko-build#696) (@dependabot[bot])
• b7c9449: Bump golang.org/x/tools from 0.1.6 to 0.1.7 (ko-build#465) (@dependabot[bot])
• 5565544: Bump golang.org/x/tools from 0.1.8 to 0.1.9 (ko-build#575) (@dependabot[bot])
• 61b3ccd: Bump golang.org/x/tools from 0.1.9 to 0.1.10 (ko-build#663) (@dependabot[bot])
• 6a11009: Bump goreleaser/goreleaser-action from 1 to 2.8.1 (ko-build#611) (@dependabot[bot])
• 56e14a1: Bump goreleaser/goreleaser-action from 2.8.1 to 2.9.0 (ko-build#621) (@dependabot[bot])
• cab626d: Bump goreleaser/goreleaser-action from 2.9.0 to 2.9.1 (ko-build#638) (@dependabot[bot])
• 08dfc02: Bump k8s.io/apimachinery from 0.22.2 to 0.22.3 (ko-build#489) (@dependabot[bot])
• 23c6850: Bump k8s.io/apimachinery from 0.22.3 to 0.22.4 (ko-build#509) (@dependabot[bot])
• 2ba70fc: Bump k8s.io/apimachinery from 0.22.4 to 0.23.0 (ko-build#531) (@dependabot[bot])
• 1a12a62: Bump k8s.io/apimachinery from 0.23.0 to 0.23.1 (ko-build#556) (@dependabot[bot])
• 64fa5ed: Bump k8s.io/apimachinery from 0.23.1 to 0.23.3 (ko-build#576) (@dependabot[bot])
• a36ea50: Bump k8s.io/apimachinery from 0.23.3 to 0.23.4 (ko-build#606) (@dependabot[bot])
• 327a88f: Bump k8s.io/apimachinery from 0.23.4 to 0.23.5 (ko-build#662) (@dependabot[bot])
• a639e6d: Bump k8s.io/apimachinery from 0.23.5 to 0.23.6 (ko-build#691) (@dependabot[bot])
• 0384619: Bump k8s.io/apimachinery from 0.23.6 to 0.24.0 (ko-build#701) (@dependabot[bot])
• d5233ab: Bump sigs.k8s.io/kind from 0.11.1 to 0.12.0 (ko-build#645) (@dependabot[bot])
• 53d896e: Bump sigstore/cosign-installer from 2.0.0 to 2.0.1 (ko-build#612) (@dependabot[bot])
• 9baeed2: Bump sigstore/cosign-installer from 2.0.1 to 2.1.0 (ko-build#637) (@dependabot[bot])
• f6a4279: Bump sigstore/cosign-installer from 2.1.0 to 2.2.0 (ko-build#683) (@dependabot[bot])
• 3e1b96d: Bump sigstore/cosign-installer from 2.2.1 to 2.3.0 (ko-build#697) (@dependabot[bot])
• ad0607f: Cache base image metadata in-memory (ko-build#525) (@jonjohnsonjr)
• 5ac3ef9: Clean filepath from zip before creating tempdir (ko-build#459) (@imjasonh)
• 66bd5fc: Clear Cmd when setting Entrypoint (ko-build#624) (@jonjohnsonjr)
• 3edb68b: Connect SBOMs with SPDX support. (ko-build#511) (@mattmoor)
• 204fbc9: Correctly pass through base image annotations (ko-build#636) (@imjasonh)
• 5617d1e: Document /ko-app/ and entrypoint in README.md (ko-build#499) (@imjasonh)
• 1e3c8ae: Document ko publish in README (ko-build#469) (@imjasonh)
• 52d42d8: Document setup-ko in README.md (ko-build#484) (@imjasonh)
• b9cd759: Don't log the value of --password if given (ko-build#458) (@imjasonh)
• 0015a81: Enforce more lint checks, fix findings (ko-build#492) (@imjasonh)
• a56047a: Filter out nil addendum before constructing index. (ko-build#546) (@mattmoor)
• 6cc2d7f: Fix ko-build#530 Hanging behavior with ASDF installed Go on Darwin (ko-build#548) (@StevenACoffman)
• a41529e: Fix Windows e2e test (ko-build#599) (@imjasonh)
• 66a77a9: Fix handling of 'has' selectors (ko-build#473) (@antoineco)
• de2ce53: Fix issue where kubectl apply is run in place of kubectl create (ko-build#494) (@sbwsg)
• 420c353: Fix issues related to Go 1.18 (ko-build#657) (@imjasonh)
• 5a13603: Fix tarball publisher ctx handling (ko-build#545) (@jonjohnsonjr)
• 6aaa366: Fix texts regarding SBOM (ko-build#698) (@otms61)
• 98ff104: Generate CycloneDX SBOMs using our own JSON generation (ko-build#587) (@imjasonh)
• af2ff52: Generate ko deps in SPDX format (ko-build#507) (@imjasonh)
• b9f9268: Improve build config issue error scenario ko-build#483 (ko-build#487) (@HeavyWombat)
• bdc2d9f: Include builds for Go 1.18 in CI matrixes (ko-build#652) (@imjasonh)
• 89ede91: Include cred helpers in keychain (ko-build#581) (@imjasonh)
• 70f0273: Introduce --verbose flag that enables logs.Warn logs (ko-build#600) (@imjasonh)
• 54cddcc: Introduce KOCACHE (ko-build#269) (@jonjohnsonjr)
• f8d0aca: Log base image@digest when building (ko-build#592) (@imjasonh)
• 08fccaa: Mention other tools that integrate with ko (ko-build#504) (@imjasonh)
• 5787600: Normalize the package hash to hex. (ko-build#512) (@mattmoor)
• c67fb03: Pre-parse platform string with StringSliceVar (ko-build#551) (@wilsonehusin)
• b813b95: Prepare for Go 1.18 by replacing all our forked code (ko-build#549) (@imjasonh)
• 7e9709a: Produce OCI images by default (ko-build#623) (@imjasonh)
• dde6c6d: Re-enable codeql analysis (ko-build#457) (@imjasonh)
• cd41b3e: Remove --watch mode (ko-build#585) (@imjasonh)
• 42723d7: Revert "Always produce OCI images and indexes (ko-build#449)" (ko-build#462) (@imjasonh)
• aafd3e8: Revert "Produce OCI images by default (ko-build#623)" (ko-build#653) (@imjasonh)
• 5640c33: Run golangci-lint before tool setup to fix tar errors (ko-build#518) (@markusthoemmes)
• e961890: Set GOAMD64 if variant is set (ko-build#578) (@imjasonh)
• 8135bf2: Set config creation time without mutating (ko-build#524) (@imjasonh)
• 0187841: Sign image using cosign (ko-build#595) (@imjasonh)
• 33fa766: Support osversion when selecting base images (ko-build#536) (@imjasonh)
• 5f733f9: Support partial platform matching for osversion only (ko-build#572) (@imjasonh)
• 31be2cb: Take advantage of Chainguard maintained versions of various actions. (ko-build#609) (@mattmoor)
• ea93812: Test the right directory for kocache (ko-build#616) (@jonjohnsonjr)
• eb2597f: Update 'ko publish' -> 'ko build' in README (ko-build#601) (@imjasonh)
• f40d2dc: Update Go 1.18 code to match RC 1 (ko-build#631) (@imjasonh)
• 3fc720f: Update ecr-login dependency to allow us to avoid logspam (ko-build#586) (@imjasonh)
• d91d7a4: Update golangci-lint and fix issues (ko-build#519) (@markusthoemmes)
• 103ff5b: Use build config Dir for all go tool commands (@halvards)
• 6ff3469: Use default completion command provided by cobra. (ko-build#522) (@darklore)
• 1e46fde: Use signal.NotifyContext and cmd.Context (ko-build#482) (@imjasonh)
• 5d7673e: Use tools/go/packages in place of go/build (ko-build#486) (@benmoss)
• 3e5ee5b: Validate KO_CONFIG_PATH (ko-build#471) (@tcnghia)
• 6014fcd: bump containerd dependency (ko-build#463) (@imjasonh)
• a5f223e: check and use the latest go available for the defined version (ko-build#690) (@cpanato)
• 921a580: feat: not enforce KO_DOCKER_REPO with push=false (ko-build#604) (@dirien)
• 4a0f1af: feat: sign checksum using cosign (@Dentrax)
• d48a621: fix: create dir for KOCACHE (ko-build#607) (@developer-guy)
• cefd28f: go1.18: Preserve trailing tabs while massaging go version -m output (ko-build#668) (@tstromberg)
• 967e3eb: rm cmd/ko/main.go (ko-build#628) (@imjasonh)
• 3cf55a1: use automaxprocs to calculate the number of CPUs (ko-build#649) (@dprotaso)
• 6447264: use github api to generate the changelog (ko-build#474) (@caarlos0)
• 62800bc: warning users when using both --base-import-paths --bare flags (ko-build#618) (@cpanato)