------------------------------------------------------------------- Wed Feb 25 10:06:03 UTC 2026 - Johannes Kastl - Update to version 0.11.2: * Features: - Add support for regctl config in XDG and APPDATA. (PR 1038) - Add ImageWithBlobReaderHook for callbacks per layer when copying an image. (PR 1046) * Fixes: - Do not sign released images multiple times. (PR 1027) - regctl/action update for path fix. (PR 1031) - Remove default values from regctl config. (PR 1039) - Apply Go modernizations with go fix from 1.26.0. (PR 1053) - Adjust test repo names to avoid races. (PR 1054) - Automatically upgrade goimports and gorelease. (PR 1056) * Other Changes: - Add REGCTL_CONFIG to regctl help messages. (PR 1037) - Go upgrade fixes CVE-2025-68121, govulncheck indicates this project is not vulnerable. (PR 1047) ------------------------------------------------------------------- Mon Dec 08 08:37:08 UTC 2025 - Johannes Kastl - Update to version 0.11.1: * Security: - Go 1.25.5 fixes CVE-2025-61729 (PR 1025) - Go 1.25.5 fixes CVE-2025-61727 (PR 1025) * Fixes: - Correct selection of previous tag for releases. (PR 1023) - Make sure ContentLength is correctly set in the request. (PR 1024) ------------------------------------------------------------------- Thu Dec 04 06:08:31 UTC 2025 - Johannes Kastl - Update to version 0.11.0: * Features: - Build artifacts for riscv64. (PR 1011) - Generate FreeBSD amd64 binaries. (PR 1013) - Add support for cosign v3 bundles. (PR 1018) * Fixes: - Fix ECR Helper version pin. (PR 1017) - Fix the cosign use-signing-config flag. (PR 1019) - Improve reproducibility in Dockerfiles. (PR 1020) * Other Changes: - Add a policy for LLM generated contributions. (PR 1016) ------------------------------------------------------------------- Mon Nov 10 13:02:59 UTC 2025 - Johannes Kastl - Update to version 0.10.0: * Features: - Feat: Support DOCKER_AUTH_CONFIG variable. (PR 996) - Feat: Add regctl repo copy. (PR 997) - Feat: regsync support for semantic versioning(semver) for matching tags (PR 1005) - Feat: Add tagSets to regsync. (PR 1008) * Changes: - Chore: Add go:fix lines to deprecated code. (PR 994) - Chore: Add gofumpt to the build. (PR 995) - Chore: Remove the unused bps field. (PR 998) - Fix: Handle semver compare of numeric prerelease (PR 1007) * Security: - CVE-2025-58187: Fixed with Go upgrade (https://osv.dev/GO-2025-4007). - CVE-2025-58189: Fixed with Go upgrade (https://osv.dev/GO-2025-4008). - CVE-2025-61723: Fixed with Go upgrade (https://osv.dev/GO-2025-4009). - CVE-2025-47912: Fixed with Go upgrade (https://osv.dev/GO-2025-4010). - CVE-2025-58185: Fixed with Go upgrade (https://osv.dev/GO-2025-4011). - CVE-2025-58186: Fixed with Go upgrade (https://osv.dev/GO-2025-4012). - CVE-2025-58188: Fixed with Go upgrade (https://osv.dev/GO-2025-4013). - CVE-2025-58183: Fixed with Go upgrade (https://osv.dev/GO-2025-4014). - CVE-2025-9230: Fixed with Alpine image upgrade. - CVE-2025-9232: Fixed with Alpine image upgrade. - CVE-2025-9231: Fixed with Alpine image upgrade. ------------------------------------------------------------------- Tue Sep 02 05:48:59 UTC 2025 - Johannes Kastl - Update to version 0.9.2: * Security: - xz upgrade fixes CVE-2025-58058 (PR 989) * Miscellaneous: - Fix CLI lint errors. (PR 983) - Cleanup version output. (PR 985) - Dockerfile cleanup. (PR 986) ------------------------------------------------------------------- Mon Aug 25 04:49:53 UTC 2025 - Johannes Kastl - Update to version 0.9.1: * Features: - Allow relative urls in bearer auth. (PR 963) - Add "ns" query param to registry mirror requests. (PR 976) * Miscellaneous: - Update to SLSA v1 provenance. (PR 968) - Add a "make clean" command. (PR 969) ------------------------------------------------------------------- Mon Jun 30 14:33:28 UTC 2025 - Johannes Kastl - Update to version 0.9.0: * Breaking: - Drop support for 3rd Go release because of upstream forced upgrades (see golang/go#69095). (PR 948) * Features: - Add a script to reproduce regclient images. (PR 940) - Support IPv6 hosts. (PR 956) * Fixes: - Convert docker attestations built with oci-artifact=true. (PR 949) - Allow duplicate keys in yaml config. (PR 952) * Miscellaneous: - Migrate yaml library. (PR 947) - Convert the build to use OCI style attestations. (PR 950) ------------------------------------------------------------------- Thu Apr 24 15:31:03 UTC 2025 - Johannes Kastl - Update to version 0.8.3: * Features: - Add ref.AddDigest method that does not unset the tag. (PR 910) - Adding a regctl registry whoami command. (PR 912) - Improve regctl image check-base output. (PR 917) - regsync option to abort on errors. (PR 924) - Improve fallback tag handling. (PR 925) - regctl flag to ignore missing images on delete. (PR 930) * Fixes: - Validate registry names. (PR 911) - Escape regexp example. (PR 920) - Auth header parsing. (PR 936) * Changes: - Update supported Go releases to 1.22, 1.23, and 1.24. (PR 909) - Modernize Go to the 1.22 specs. (PR 910) - Refactor cobra commands. (PR 915) - Include Docker Hub repository documentation. (PR 918) - Move documentation pointers to the website. (PR 939) ------------------------------------------------------------------- Sun Feb 16 08:52:14 UTC 2025 - opensuse_buildservice@ojkastl.de - Update to version 0.8.2: * Release v0.8.2 * Fix: Allow authentication with a token ------------------------------------------------------------------- Wed Feb 12 05:53:54 UTC 2025 - opensuse_buildservice@ojkastl.de - Update to version 0.8.1: * Release v0.8.1 * Version bump * Version bump * Fix: interval overrides a default schedule * Version bump * Fix: Align log levels with slog * Feat: Add cobra command for documentation * Version bump * Version bump * Fix: Combine known actions for matching repository names in bearerHandler * Feat: Improve regctl arg completion * Fix: Ignore unsupported entries in docker config * Fix: Do not request offline refresh token * Version bump * Version bump * Chore: Adding a logo * Version bump * Version bump ------------------------------------------------------------------- Wed Dec 11 06:54:31 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.8.0: * Release v0.8.0 * Feat: Support incomplete subject descriptor * Fix: Handle repeated digest in copy with external referrers * Feat: Support external referrers in regsync * Version bump * Fix: Platform test for darwin/macos should not add variant * Feat: Document community maintained packages * Chore: Remove unused short arg parameters * Feat: Copy image with external referrers * Feat: Add external flag to regctl artifact put * Feat: Include source in referrers response * Version bump * Feat: Image mod environment variables * Feat: Support referrers in an external repository * Version bump * Chore: Improve error message when inspecting artifacts * Version bump * Feat: Allow plus in ocidir path * Fix: Inject release notes by file * Feat: Move logrus calls into files excluded by wasm * Breaking: Disable legacy packages by default. * Switch regsync to slog * Feat: Switch regctl to slog * Feat: Switch regbot to slog * Version bump * Feat: Refactor logging to use log/slog ------------------------------------------------------------------- Mon Nov 04 19:50:32 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.7.2: * Release v0.7.2 * Fix: Dedup warnings on image mod * Fix: Race condition in the pqueue tests * Fix: Add a warning if syft is not installed * Chore: Update docker image base filesystem * Chore: Remove OpenSSF scorecard and best practices * Chore: Do not automatically assign myself * Fix: Detect integer overflows on type conversion * Feat: Add default host config * Chore: Remove throttle package. * Chore: Refactor to remove globals in regbot * Chore: Refactoring to remove globals in regsync * Fix: Prevent data race when reading blob and seeking * Chore: Move throttle from config to reghttp * Feat: Limit number of retries for a request * Feat: Consolidate warnings * Chore: Remove ReqPerSec in tests * Feat: Support auth on redirect * Refactor: Move logging into transport and rework backoff * Refactor: Free up pqueue resources when last entry released * Configure priority queue algorithm and reorder image copy steps * Refactor: cleanup reghttp.Resp methods * Refactor: remove time.Ticker for rate limiting * Refactor: Remove reghttp.Resp interface * Refactor: Remove digest calculation from reghttp * Refactor: Remove multiple API support * Feat: Add a priority queue for network requests * Chore: Update staticcheck and fix linter warnings for Go 1.23 * Fix: Lookup referrers when registry does not give digest with head * Fix: Update GHA output generating steps ------------------------------------------------------------------- Sun Aug 04 07:24:13 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.7.1: * Release v0.7.1 * Version bump * Fix: Validate the digest of the ref when provided * Version bump * Option to output config with regctl artifact get * Add funding.yml * Tar file should use forward slashes * Add WithDockerCredsFile() RegClient Opt * Fix: Mod tracking of changed manifests * Fix platform detection * Remove docker build caching to GHA ------------------------------------------------------------------- Fri Jul 12 19:26:38 UTC 2024 - opensuse_buildservice@ojkastl.de - Update to version 0.7.0: * Release v0.7.0 * Support pushing tagged manifests with different digest algorithms * Version bump * Support changing digest algorithm * Include a contributor list in the readme * Enable docker caching of GHA builds * Remove rwfs internal package * Allow well known architectures as a platform * Cleanup Dockerfile linter warnings * Refactor pulling a platform specific manifest * Add an experimental regctl ref command * feat: allow ~ (tilde) in reference paths * Fix: Enable deletion on olareg tests * Feat: Return non-zero on a failed registry ping * Handle nil blob reader ------------------------------------------------------------------- Thu Jul 11 11:00:22 UTC 2024 - Johannes Kastl - new package regclient: Docker and OCI Registry Client in Go and tooling using those libraries