------------------------------------------------------------------- Fri Dec 12 08:18:23 UTC 2025 - Johannes Kastl - Update to version 0.39.1: * fix: upgrade Go to 1.25.5 to address CVE-2025-61729 and CVE-2025-61727 (#2501) * fix: Skip platform-specific digest resolution with --pull-policy never (#2498) * build(deps): bump the go-dependencies group across 1 directory with 3 updates (#2494) ------------------------------------------------------------------- Fri Nov 28 13:55:26 UTC 2025 - Johannes Kastl - Update to version 0.39.0: * Features - Updating lifecycle version to v0.20.19 (#2481 by @jjbustamante) - Use Docker API version negotiation instead of hardcoded version (#2474 by @jjbustamante) - When fetching lifecycle image, use a platform-specific digest (#2467 by @natalieparellano) - fix: update lifecycle API validation for experimental flag solve issue #2414 (#2432 by @vky5) - Update imgutil to improve containerd storage driver performance (#2427 by @jabrown85) - Fix #2405: Add template parameter to GitHub issue URL (#2407 by @jjbustamante) - Added the first tag argument (#2394 by @dgannon991) * Dependencies - build(deps): bump @octokit/plugin-paginate-rest, @actions/github and @octokit/rest (#2338) - build(deps): bump @octokit/request, @actions/github and @octokit/rest (#2370) - build(deps): bump actions/download-artifact from 4 to 5 (#2426) - build(deps): bump actions/setup-go from 5 to 6 (#2441) - build(deps): bump buildpacks/github-actions from 5.9.1 to 5.9.2 (#2412) - build(deps): bump buildpacks/github-actions from 5.9.2 to 5.9.3 (#2421) - build(deps): bump buildpacks/github-actions from 5.9.3 to 5.9.4 (#2439) - build(deps): bump github.com/go-viper/mapstructure/v2 (#2430) - build(deps): bump github.com/go-viper/mapstructure/v2 in /tools (#2431) - build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#2473) - build(deps): bump the go-dependencies group across 1 directory with 14 updates (#2449) - build(deps): bump the go-dependencies group across 1 directory with 3 updates (#2479) - build(deps): bump the go-dependencies group with 3 updates (#2422) - build(deps): bump the go-dependencies group with 6 updates (#2424) - build(deps): bump the go-dependencies group with 8 updates (#2416) - build(deps): bump the go-dependencies group with 8 updates (#2453) ------------------------------------------------------------------- Mon Jun 30 06:00:38 UTC 2025 - Johannes Kastl - Update to version 0.38.2: * Updating lifecycle version to latest v0.20.11 (#2411) * build(deps): bump github.com/go-viper/mapstructure/v2 in /tools (#2409) * build(deps): bump github.com/go-viper/mapstructure/v2 (#2410) * build(deps): bump buildpacks/github-actions from 5.8.11 to 5.9.1 (#2401) * build(deps): bump the go-dependencies group across 1 directory with 3 updates (#2408) * Bump imgutil to latest and docker from v27.5.1 to v28.3.0 (#2406) * updating to ubuntu jammy when releasing pack (#2400) * Jjbustamante/fix pack 2397 (#2399) ------------------------------------------------------------------- Mon Jun 16 19:23:18 UTC 2025 - Johannes Kastl - Update to version 0.38.1: * upding delivery workflow to correct the wrong format (#2398) ------------------------------------------------------------------- Sat Jun 14 08:26:05 UTC 2025 - Johannes Kastl - Update to version 0.38.0: * Features - Make go build work without Makefile (#2390 by @abitrolly) - Fix default userns=host behavior to be opt-in (#2386 by @jjbustamante) - Add as suggested builder the ubi8 builder image (#2383 by @cmoulliard) - Bump to go 1.24 (#2364 by @AidanDelaney) - Clarify help text for append-image-name-suffix (#2358 by @natalieparellano) - Support FreeBSD build phase (#2357 by @gogolok) - Updating default lifecycle version to 0.20.8 (#2356 by @jjbustamante) - pack builder create supports system buildpacks (#2349 by @jjbustamante) - Support docker uri for lifecycle (#2112 by @rashadism) - Support Insecure Registries (#2077 by @prashantrewar) * Bugs - Do not select target for daemon only from os if arch is specified (#2385 by @pigeonhands) * Dependencies - build(deps): bump buildpacks/github-actions from 5.8.10 to 5.8.11 (#2381) - build(deps): bump the go-dependencies group with 6 updates (#2380) - build(deps): bump github.com/go-git/go-git/v5 (#2373) - Upgrade Go version to 1.24 - build(deps): bump the go-dependencies group across 1 directory with 8 updates - updating go.mod at tools to 1.24 - Bump to go 1.24 - build(deps): bump buildpacks/github-actions from 5.8.8 to 5.8.10 - build(deps): bump the go-dependencies group across 1 directory with 9 updates - build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 - Upgrade Go version to 1.23.3 across project files ------------------------------------------------------------------- Fri Mar 21 21:03:07 UTC 2025 - opensuse_buildservice@ojkastl.de - Update to version 0.37.0: * build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 * build(deps): bump the go-dependencies group across 1 directory with 4 updates * doc: adjusting documentation to include extension * fix: using the KindBuildpack and KindExtension variable instead of hardcoded values * Use unix build constraint * build(deps): bump github.com/spf13/cobra in the go-dependencies group * Remove obsolete // +build lines * build(deps): bump the go-dependencies group across 1 directory with 10 updates * remove unnecessary variable in unit test * remove unnecessary version assignment in unit test * remove negation that was causing tests to fail * fix unit test * add version check * move version check to `before` block * fix acceptance tests * pick up where pglushko left off * build(deps): bump buildpacks/github-actions from 5.8.5 to 5.8.8 * running go mod tidy * fix:linting and typos * fix: intentation * feat: Adding targets and path flags when packaging an extension * feat: adding targets on the extension descriptor * feat: Adding functionality on CopyConfigFiles function to copy an extension .toml file * fix: typo on targets description * build(deps): bump the go-dependencies group across 1 directory with 4 updates ------------------------------------------------------------------- Sat Jan 18 07:42:00 UTC 2025 - opensuse_buildservice@ojkastl.de - Update to version 0.36.4: * implementing logic for adding tag suffix * fixing formatting issue * WIP - adding a new flag --append-image-name-suffix to append [os]-[arch]-[variant] to the image name when pushing a multi-arch buildpack or builder * removing additional string matching * Updating hardcoded error message handling when an image was not found in a registry by platform ------------------------------------------------------------------- Mon Jan 13 06:14:19 UTC 2025 - opensuse_buildservice@ojkastl.de - Update to version 0.36.3: * build(deps): bump the go-dependencies group across 1 directory with 7 updates * with the new go-git version, this issue was fixed https://github.com/go-git/go-git/pull/1050 * build(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 * build(deps): bump anchore/scan-action from 5 to 6 * build(deps): bump buildpacks/github-actions from 5.8.4 to 5.8.5 ------------------------------------------------------------------- Fri Dec 27 12:34:16 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.36.2: * Updating x/net library to v0.33.0 * build(deps): bump buildpacks/github-actions from 5.8.3 to 5.8.4 * build(deps): bump the go-dependencies group with 2 updates ------------------------------------------------------------------- Wed Dec 18 06:50:01 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.36.1: * build(deps): bump the go-dependencies group with 2 updates * build(deps): bump the go-dependencies group with 7 updates * Correct wording for `buildpack new` targets flag * build(deps): bump the go-dependencies group across 1 directory with 4 updates * build(deps): bump buildpacks/github-actions from 5.8.1 to 5.8.3 * acceptance tests on arm64 ------------------------------------------------------------------- Wed Nov 27 09:55:16 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.36.0: * Emit a performance warning if containerd is enabled and we're exporting to the daemon * build(deps): bump the go-dependencies group across 1 directory with 9 updates * Cleanup after running acceptance tests * Try lifecycle binary 0.20.3 * Bump lifecycle binary version also * Fixing lifecycle validation to use fully qualified names * Allow trusted builders by repo and tag * Use released lifecycle * build(deps): bump buildpacks/github-actions from 5.8.0 to 5.8.1 * build(deps): bump buildpacks/github-actions from 5.7.4 to 5.8.0 * build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 * Update actions * Pin BurntSushi/toml as test failures seem related to https://github.com/BurntSushi/toml/issues/417 * FIXME: update lifecycle (to non-released version) so that we can bump docker * Bump deps and run tidy * Fix lint * Update go and run tidy * Use an existing directory instead of creating and deleting directories for each '--path' flag case to ensure no temp directories are left behind in case of a test failure. * build(deps): bump github.com/docker/docker * build(deps): bump buildpacks/github-actions from 5.5.4 to 5.7.4 * avoid using os.MkdirTemp() to prevent test failures on macOS * rephrase the test description * Make it warns only when a local path with the same string as the specified image name exists * Don't warn about clear-env key while parsing buildpack.toml as this is actually expected. * Fix deletion of ephemeral builder * Improve descriptions for some test cases. * Add a test case for when the 'pack build' is called with the '--path' flag. * Make the 'pack build' command warn that the positional argument will not be treated as the source directory path. * handled case sensitivity * build(deps): bump anchore/scan-action from 3 to 4 * Update image references in internal documents and ci settings to use fully qualified names. * Update references to lifecycle image to use fully qualified image name. ------------------------------------------------------------------- Tue Aug 06 05:47:34 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.35.1: * Add retries for docker network remove * Fix ephemeral bridge network name for podman * Fix the helper script for testing the GitHub Action workflows on forked repositories. * Add ${{ matrix.suffix }} to the source tag for retagging. * Fix buildpacks#2237: consider /workspace as a sensitive dir * Support OCI layouts with application/vnd.oci.image.manifest.v1+json media type * Bump default lifecycle binary version from 0.19.6 to 0.20.0 * Fix variable name. * Fix variable name. * Update the DEVELOPMENT.md * Fix variable name mismatch. * Finish the helper script for testing GitHub Action workflows on forked repository. * Add a draft helper script for testing GitHub Action workflows on forked repository. * Add --trust-extra-buildpacks option * Trust buildpacks in addition to those on the builder ------------------------------------------------------------------- Mon Jul 22 18:46:49 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.35.0: * Log a warning (once) when PACK_VOLUME_KEY is unset and running in a container * Validate build image name * Try to fix wcow * Fix macos by not requiring real docker client for lifecycle execution unit tests * Launch build containers in a separate ephemeral Docker bridge network * Resolve some TODOs * Initial implementation (still has TODOs) * Warn if NOT --pull-policy=always in container ------------------------------------------------------------------- Mon Jul 22 18:44:44 UTC 2024 - Johannes Kastl - new package buildpacks-cli: CLI for building apps using Cloud Native Buildpacks