v5.19.4

• vendor c/storage@v1.38.4 (backports for https://bugzilla.redhat.com/show_bug.cgi?id=2072452)

v5.19.3

What's Changed

• [v5.19, backport] storage: use race-free AddNames instead of SetNames by @flouthoc in #1503
• [release-5.19 backport] Remove keyring support and Cirrus update to f36 VMs by @lsm5 in #1542
• [release-5.19 backport] Bump github.com/containers/ocicrypt to 566b808 by @lsm5 in #1539

Full Changelog: v5.19.2...v5.19.3

v5.21.1

What's Changed

• Release v5.21.0 by @mtrmac in #1514
• Use c/storage/pkg/ioutils.AtomicWriteFiles to update auth.json by @mtrmac in #1515
• build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 by @dependabot in #1516
• build(deps): bump github.com/sylabs/sif/v2 from 2.4.2 to 2.5.0 by @dependabot in #1520
• Update to benefit from Go 1.16 by @mtrmac in #1521
• build(deps): bump github.com/sylabs/sif/v2 from 2.5.0 to 2.6.0 by @dependabot in #1524
• man containers-registries.conf: clarify mirror association by @vrothberg in #1525
• Use strings.NewReader instead of bytes.NewBufferString by @mtrmac in #1517
• Use correct list syntax in containers-registries.conf(5) by @mtrmac in #1527
• Don't require a Docker-Content-Digest header when deleting images by @mtrmac in #1497
• build(deps): bump github.com/sylabs/sif/v2 from 2.6.0 to 2.7.0 by @dependabot in #1528
• Improve progress bars, and update mpb by @mtrmac in #1530
• build(deps): bump github.com/klauspost/compress from 1.15.1 to 1.15.2 by @dependabot in #1531
• Cirrus: Update to F36 VMs by @cevich in #1535
• Bump github.com/containers/ocicrypt to 566b808 by @lsm5 in #1534
• Fix unwanted reuse of encrypted layers by @mtrmac in #1533

Full Changelog: v5.21.0...v5.21.1

v5.21.0

What's Changed

• Release v5.20.0 by @mtrmac in #1482
• storage: use race-free AddNames instead of SetNames by @flouthoc in #1480
• build(deps): bump github.com/klauspost/compress from 1.14.4 to 1.15.0 by @dependabot in #1484
• Update github.com/containerd/containerd by @mtrmac in #1485
• build(deps): bump github.com/docker/distribution from 2.8.0+incompatible to 2.8.1+incompatible by @dependabot in #1486
• build(deps): bump github.com/sylabs/sif/v2 from 2.3.2 to 2.4.0 by @dependabot in #1488
• build(deps): bump github.com/klauspost/compress from 1.15.0 to 1.15.1 by @dependabot in #1490
• build(deps): bump github.com/docker/docker from 20.10.12+incompatible to 20.10.13+incompatible by @dependabot in #1489
• Silence go-staticcheck about openpgp use by @mtrmac in #1491
• Try to make (make lint) pass with Go 1.18 by @mtrmac in #1492
• build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 by @dependabot in #1494
• Use assert.ErrorContains by @mtrmac in #1495
• build(deps): bump github.com/sylabs/sif/v2 from 2.4.0 to 2.4.1 by @dependabot in #1496
• Formally require Go 1.15 by @mtrmac in #1493
• build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3 by @dependabot in #1498
• build(deps): bump github.com/docker/docker from 20.10.13+incompatible to 20.10.14+incompatible by @dependabot in #1504
• registries.conf: prefixes: subdomain matching by @vrothberg in #1505
• toml decoding: report unknown keys by @vrothberg in #1507
• registries.conf: fix typo in prefix by @vrothberg in #1508
• build(deps): bump github.com/opencontainers/selinux from 1.10.0 to 1.10.1 by @dependabot in #1511
• Add option to specify the identity for signing by @Jamstah in #1510
• Add pull-from-mirror for adding per-mirror level restrictions by @QiWang19 in #1411
• build(deps): bump github.com/sylabs/sif/v2 from 2.4.1 to 2.4.2 by @dependabot in #1513

Full Changelog: v5.20.0...v5.21.0

v5.19.2

storage: use race-free AddNames instead of SetNames

v5.20.0

• docker/referece: add IsFullIdentifier
• Changed oci layout transport to thread-safe destination
• add pkg/blobcache from Buildah
• blobcache: drop import on buildah/docker
• blobcache: drop history comment
• blobcache: make ClearCache() private
• blobcache: remove CacheLookupReferenceFunc
• blobcache: turn BlobCache into a struct
• blobcache: export clearCache
• Remove (unused and unreachable) keyring support
• Eliminate a goroutine
• Also introduces internal-only interfaces to allow extending the transport feature set in the future

v5.19.1

• build(deps): bump github.com/klauspost/compress from 1.14.1 to 1.14.2
• build(deps): bump github.com/containers/storage from 1.38.0 to 1.38.1
• build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2

v5.19.0

What's Changed

• Release c/image v5.18.0 by @mtrmac in #1437
• build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 by @dependabot in #1440
• build(deps): bump github.com/klauspost/compress from 1.13.6 to 1.14.1 by @dependabot in #1441
• Initial sif transport implementation by @mtrmac in #1438
• build(deps): bump github.com/sylabs/sif/v2 from 2.3.0 to 2.3.1 by @dependabot in #1443
• build(deps): bump github.com/vbauerster/mpb/v7 from 7.3.0 to 7.3.1 by @dependabot in #1444
• Corrects wrong default path for auth.json in docs by @svdHero in #1442
• Log every credential path we consult by @mtrmac in #1445
• build(deps): bump github.com/containers/storage from 1.37.0 to 1.38.0 by @dependabot in #1447
• Run codespell on code by @rhatdan in #1449
• build(deps): bump github.com/vbauerster/mpb/v7 from 7.3.1 to 7.3.2 by @dependabot in #1450
• GPGME: support passphrase for prompt-less signing by @vrothberg in #1446

New Contributors

• @svdHero made their first contribution in #1442

Full Changelog: v5.18.0...v5.19.0

v5.18.0

• Add copy.Options.PreserveDigests
• Link the two variants of cannotModifyManifest*Reason together.
• shortnames: mechanism to enforce resolving to Docker Hub
• manifest.GuessMIMEType(): recognize self-described OCI manifests
• Add a comment about only looking up credential helpers by registry
• Reorganize the success case in getCredentialsWithHomeDir
• Introduce a string key in getCredentialsWithHomeDir
• Modify findAuthentication to use a string key instead of a reference.Named
• Allow using namespaced keys in GetCredentials and GetAuthentication
• Rename useLegacyAPI to useLegacyFormat
• Fix GetAllCredentials
• Reject invalid keys in GetCredentials/GetAuthentication
• Make validateKey a bit more strict
• Don't include full manifest contents in error messages
• Log if a manifest upload doesn't contain a Docker-Content-Digest header
• docker/config: handle credentials not found errors
• docker: less bears :(
• Remove unused filler argument to customPartialBlobCounter
• Inline decor.Any into the caller
• Inline sstyle into the only user
• Simplify a check for missing credentials
• Fix handling of missing data in GetAllCredentials
• Fix the pseudo-version of github.com/opencontainers/image-spec
• Update golang.org/x/crypto, and silence warnings about openpgp

v5.17.0

Includes a fix for CVE-2021-41190 / GHSA-77vh-xpmg-72qh .

• [CI:DOCS] Misc manpage fixups
• Log credentials helper path if available
• Record locations of blobs discovered by PutBlob but not TryReusingBlob
• Fix possible out-of-bounds accesses in string indexing
• Precompute digests option prior to registry upload
• Add simple documentation how to use c/image with podman's rootless mode
• Fix c/image fails to pull OCI image with non-http(s):// urls
• Reject ambiguous manifest formats