v5.33.0

What's Changed

• Merge 5.32.1 back into main by @mtrmac in #2510
• Update module github.com/docker/docker to v27.1.2+incompatible by @renovate in #2516
• Update module github.com/docker/cli to v27.1.2+incompatible by @renovate in #2515
• pkg/blobcache: simplify test case by @kolyshkin in #2521
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.1 by @renovate in #2517
• Update module github.com/vbauerster/mpb/v8 to v8.8.1 by @renovate in #2525
• Introduce/use JSONFormatToInvalidSignatureError by @kolyshkin in #2518
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.2 by @renovate in #2528
• fix(deps): update module dario.cat/mergo to v1.0.1 by @renovate in #2527
• Use %w to wrap errors, enable errorlint by @kolyshkin in #2519
• Add keyPaths, keyDatas to prSigstoreSigned by @mtrmac in #2524
• Add support for accepting multiple Rekor public keys by @mtrmac in #2526
• Release 5.32.2 by @mtrmac in #2531
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 by @renovate in #2533
• Merge release-5.32 into main by @mtrmac in #2532
• Update module github.com/vbauerster/mpb/v8 to v8.8.3 by @renovate in #2540
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 by @renovate in #2535
• Support proxy environment for docker client by @PMExtra in #2424
• Update module github.com/docker/docker to v27.2.0+incompatible by @renovate in #2543
• Update module github.com/docker/cli to v27.2.0+incompatible by @renovate in #2542
• Update dependency containers/automation_images to v20240821 by @renovate in #2545
• Update golang.org/x/exp digest to 9b4947d by @renovate in #2549
• Add a workaround for null values in the tag list by @mtrmac in #2544
• Update module github.com/mattn/go-sqlite3 to v1.14.23 by @renovate in #2554
• Update module golang.org/x/oauth2 to v0.23.0 by @renovate in #2555
• Update module golang.org/x/term to v0.24.0 by @renovate in #2556
• Update module golang.org/x/crypto to v0.27.0 by @renovate in #2561
• Assorted clean ups, optimizations, and a small bug fix by @mtrmac in #2552
• Update to Go 1.22 by @mtrmac in #2550
• Update module github.com/sigstore/fulcio to v1.6.4 by @renovate in #2560
• Refactor image deletion in OCI by @mtrmac in #2551
• Update module github.com/docker/docker to v27.2.1+incompatible by @renovate in #2564
• Update module github.com/docker/cli to v27.2.1+incompatible by @renovate in #2563
• Update dependency golangci/golangci-lint to v1.61.0 by @renovate in #2565
• storage: use PrepareStagedLayer instead of ApplyDiffWithDiffer by @giuseppe in #2570
• fix(deps): update module github.com/sigstore/sigstore to v1.8.9 by @renovate in #2571
• copy: Don't print "skipped: 0.0b = 0.00%" by @cgwalters in #2576
• fix(deps): update module github.com/docker/docker to v27.3.0+incompatible by @renovate in #2575
• fix(deps): update module github.com/docker/cli to v27.3.0+incompatible by @renovate in #2574
• fix(deps): update module github.com/docker/cli to v27.3.1+incompatible by @renovate in #2577
• fix(deps): update module github.com/docker/docker to v27.3.1+incompatible by @renovate in #2578
• Fix an incorrect expected MIME type when validating manifests by @mtrmac in #2572
• fix(deps): update module github.com/klauspost/compress to v1.17.10 by @renovate in #2580
• fix(deps): update module github.com/vbatts/tar-split to v0.11.6 by @renovate in #2584
• Fix: Improving error log message for missing policy.json file by @Sativarsainath-26 in #2582
• fix(deps): update github.com/containers/storage digest to 4bf3f07 by @renovate in #2586
• fix(deps): update golang.org/x/exp digest to 701f63a by @renovate in #2587
• registry: remove ping v1 by @carlosrodfern in #2588
• fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24 by @renovate in #2592
• fix(deps): update module golang.org/x/crypto to v0.28.0 by @renovate in #2593
• copy: attempt fallback to full retrieval only when possible by @giuseppe in #2589
• chore(deps): update dependency containers/automation_images to v20241010 by @renovate in #2596
• fix(deps): update module github.com/klauspost/compress to v1.17.11 by @renovate in #2597
• fix(deps): update module github.com/opencontainers/selinux to v1.11.1 by @renovate in #2604
• Update c/storage after containers/storage#2143 by @mtrmac in #2610
• Document the semantics of the metadata created by pkg/compression by @mtrmac in #2605
• Consistently use a string type for expectedLayerDiffIDFlag by @mtrmac in #2603
• Actually record last retry time after reconnecting by @mtrmac in #2608
• Special-case an error message to make it clearer by @mtrmac in #2607
• fix(deps): update github.com/containers/storage digest to 5958b09 by @renovate in #2615
• fix(deps): update golang.org/x/exp digest to f66d83c by @renovate in #2616
• Add Copy.Options.ReportResolvedReference by @mtrmac in #2609

New Contributors

• @PMExtra made their first contribution in #2424
• @Sativarsainath-26 made their first contribution in #2582
• @carlosrodfern made their first contribution in #2588

Full Changelog: v5.32.2...v5.33.0

v5.27.1

What's Changed

• [release-5.27] Preparing 5.27 backport by @mtrmac in #2075
• [release-5.27] Fix the branch we use for determining a git-validation starting point by @mtrmac in #2084
• [release-5.27] Backport by @mtrmac in #2546
• [release-5.27] Bump c/image to v5.27.1 and then to v5.27.2-dev by @TomSweeneyRedHat in https://github.com/containers/image/pull/25577

Full Changelog: v5.27.0...v5.27.1

v5.26.3

What's Changed

• [release-5.26] Bump c/storage to 1.48.1, c/image to 5.26.2 and 5.26.3-dev by @TomSweeneyRedHat in #2096
• [release-5.26] Backport by @mtrmac in #2547
• [release-5.26] Bump c/image to v5.26.3 then to v5.26.4-dev by @TomSweeneyRedHat in #2558

Full Changelog: v5.26.2...v5.26.3

v5.24.3

What's Changed

• [release-5.24] Backport retries heuristics updates by @mtrmac in #1859
• [release-5.24] Backport #2418 + #2453 by @mtrmac in #2548
• [release-5.24] Bump c/image to v5.24.3 then to v5.24.4-dev by @TomSweeneyRedHat in #2559

Full Changelog: v5.24.2...v5.24.3

v5.32.2

This adds the ability to accept sigstore signatures signed by any key from a set of several (huge thanks to @dcermak and @danishprakash for doing almost all the work), and Rekor log presence proofs signed by any key from a set of several keys.

v5.32.1

What's Changed

• Bump c/storage to v1.55.0, c/image to v5.32.0 by @TomSweeneyRedHat in #2495
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5 by @renovate in #2496
• Record (TOC digest → DiffID) mapping in BlobInfoCache by @mtrmac in #2321
• Revamp codespell by @kolyshkin in #2498
• fix(deps): update module golang.org/x/oauth2 to v0.22.0 by @renovate in #2501
• fix(deps): update module golang.org/x/sync to v0.8.0 by @renovate in #2502
• manifest: LayerInfos: preallocate the slice by @kolyshkin in #2499
• zstd:chunked refactoring for early review by @mtrmac in #2503
• fix(deps): update module golang.org/x/crypto to v0.26.0 by @renovate in #2504
• Record zstd:chunked format, and annotations, in BlobInfoCache by @mtrmac in #2487

Full Changelog: v5.32.0...v5.32.1

v5.29.5

What's Changed

• [release-5.29] Don't abort listing tags when we encounter a digest by @TomSweeneyRedHat in #2453

Full Changelog: v5.29.4...v5.29.5

v5.32.0

What's Changed

• Bump to c/storage v1.54.0 then c/image to v5.31.0 and then to v5.31.1-dev by @TomSweeneyRedHat in #2425
• Bump to v5.32.0-dev by @TomSweeneyRedHat in #2430
• fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.2 by @renovate in #2433
• fix(deps): update module github.com/burntsushi/toml to v1.4.0 by @renovate in #2434
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.59.0 by @renovate in #2427
• fix(deps): update module github.com/sigstore/sigstore to v1.8.4 by @renovate in #2436
• blobinfocache: add function to delete the cache directory by @giuseppe in #2435
• chore(deps): update dependency containers/automation_images to v20240529 by @renovate in #2414
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 by @renovate in #2437
• Update github.com/letsencrypt/boulder by @mtrmac in #2438
• fix(deps): update golang.org/x/exp digest to fd00a4e by @renovate in #2439
• Don't abort listing tags when we encounter a digest by @mtrmac in #2440
• fix(deps): update module golang.org/x/oauth2 to v0.21.0 by @renovate in #2441
• [Additional Layer Store] Enable Additional Layer Store to perform registry authentication by @ktock in #2417
• fix(deps): update module golang.org/x/crypto to v0.24.0 by @renovate in #2442
• fix(deps): update module github.com/docker/cli to v26.1.4+incompatible by @renovate in #2444
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.59.1 by @renovate in #2446
• fix(deps): update module github.com/klauspost/compress to v1.17.9 by @renovate in #2448
• fix(deps): update module github.com/sylabs/sif/v2 to v2.17.0 by @renovate in #2455
• Add more context to errors when obtaining a registry access token by @mtrmac in #2454
• fix(deps): update module github.com/docker/docker to v27 by @renovate in #2459
• fix(deps): update module github.com/docker/cli to v27 by @renovate in #2457
• fix(deps): update module github.com/docker/docker to v27.0.2+incompatible by @renovate in #2463
• fix(deps): update module github.com/docker/cli to v27.0.2+incompatible by @renovate in #2462
• Warn that docker-archive and oci-archive overwrite the whole file by @mtrmac in #2468
• fix(deps): update golang.org/x/exp digest to 7f521ea by @renovate in #2470
• fix(deps): update module github.com/sylabs/sif/v2 to v2.17.1 by @renovate in #2469
• Improve the error message when MessageDetails.SignedBy == nil by @mtrmac in #2466
• Drop the toolchain directive from go.mod by @mtrmac in #2473
• fix(deps): update module github.com/docker/docker to v27.0.3+incompatible by @renovate in #2472
• fix(deps): update module github.com/docker/cli to v27.0.3+incompatible by @renovate in #2471
• fix(deps): update module github.com/containers/ocicrypt to v1.2.0 by @renovate in #2474
• Preserve more-recently-added fields when copying/updating OCI indices by @mtrmac in #2475
• fix(deps): update module golang.org/x/term to v0.22.0 by @renovate in #2476
• fix(deps): update module golang.org/x/crypto to v0.25.0 by @renovate in #2477
• fix(deps): update module github.com/sylabs/sif/v2 to v2.18.0 by @renovate in #2479
• Allow matching of compressed blobs converted on the fly to zstd:chunked by @mtrmac in #2478
• Beautify by @mtrmac in #2467
• Clean up obtaining bearer tokens for registries by @mtrmac in #2480
• chore(deps): update module google.golang.org/grpc to v1.64.1 [security] by @renovate in #2481
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.4 by @renovate in #2486
• fix(deps): update module github.com/docker/docker to v27.1.0+incompatible by @renovate in #2489
• fix(deps): update module github.com/docker/cli to v27.1.0+incompatible by @renovate in #2488
• Trivial zstd:chunked-related cleanups by @mtrmac in #2490
• fix(deps): update module github.com/docker/cli to v27.1.1+incompatible by @renovate in #2491
• fix(deps): update module github.com/docker/docker to v27.1.1+incompatible by @renovate in #2492

Full Changelog: v5.31.0...v5.32.0

v5.30.2

Fixes an interoperability issue while listing tags from JFrog Artifactory.

v5.31.1

Fixes an interoperability issue while listing tags from JFrog Artifactory.