v0.0.9

v0.0.9

Dependency Updates

• bump golang.org/x/crypto from 0.28.0 to 0.29.0 [#321 @dependabot]
• bump github.com/sylabs/sif/v2 from 2.19.2 to 2.20.0 [#322 @dependabot]

(Full Changelog)

v0.0.8

v0.0.8

Dependency Updates

• bump github.com/adrg/xdg from 0.5.1 to 0.5.3 in the go group across 1 directory [#318 @dependabot]
• bump crazy-max/ghaction-setup-containerd from 3.0.0 to 3.1.0 in the workflows group [#316 @dependabot]

Additional Changes

• Configure max layer/file size [#311 #314 @2rigor]
• update minimum supported go version to 1.22.9 [#320 @kzantow]

(Full Changelog)

v0.0.5

v0.0.5

Dependency Updates

• bump github.com/sylabs/sif/v2 from 2.19.1 to 2.19.2 in the go group [#313 @dependabot]
• bump github.com/adrg/xdg from 0.5.0 to 0.5.1 in the go group [#310 @dependabot]

(Full Changelog)

v0.0.4

v0.0.4

Additional Changes

• Update and use upstream mimetype lib [#307 @wagoodman]

(Full Changelog)

v0.0.3

v0.0.3

Additional Changes

• Bump docker version [#234 @jonjohnsonjr]

(Full Changelog)

v0.0.2

v0.0.2

Bug Fixes

• update tar traversal to respect current director entry [#225 @spiffcs]
• Fix panic when pulling OCI-packaged helm chart [#228 @willmurphyscode]

Additional Changes

• Drop github.com/pkg/errors [#212 @jonjohnsonjr]
• separate tagged image providers [#219 @kzantow]
• add testutil logging [#222 @kzantow]

(Full Changelog)

v0.0.1

Security Fixes

• Fix tar path traversal issue by @wagoodman in #214

Full Changelog: https://github.com/anchore/stereoscope/commits/v0.0.1