v5.25.0

What's Changed

• Release v5.24.0 by @mtrmac in #1814
• fix(deps): update module github.com/theupdateframework/go-tuf to v0.5.2 by @renovate in #1815
• Migrate from ghodss/yaml to gopkg.in/yaml.v3 by @mtrmac in #1818
• build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 by @dependabot in #1820
• Add a more specific error message on invalid docker-config-in-OCI-image images by @mtrmac in #1822
• Update to github.com/vbauerster/mpb/v8 by @mtrmac in #1821
• Cirrus: Use human-readable CI VM Images by @cevich in #1817
• Update to docker/docker v23.0.0 by @mtrmac in #1825
• Update to Go 1.18 by @mtrmac in #1827
• Update to golangci-lint 1.51.0 by @mtrmac in #1824
• Update golang.org/x/exp digest to 46f607a by @renovate in #1829
• Update module github.com/sylabs/sif/v2 to v2.9.1 by @renovate in #1830
• Update module github.com/vbauerster/mpb/v8 to v8.1.6 by @renovate in #1831
• Reconnecting blob reader by @mtrmac in #1816
• manifest: introduce internal/manifest with private types and freeze public manifest.List by @flouthoc in #1791
• fix(deps): update module golang.org/x/term to v0.5.0 by @renovate in #1833
• fix(deps): update module github.com/opencontainers/selinux to v1.11.0 by @renovate in #1835
• [CI:DOCS] Disable dependabot by @cevich in #1837
• fix(deps): update module golang.org/x/crypto to v0.6.0 by @renovate in #1838
• Run codespell on codebase by @rhatdan in #1841
• fix(deps): update module golang.org/x/oauth2 to v0.5.0 by @renovate in #1840
• fix(deps): update module github.com/docker/docker to v23.0.1+incompatible by @renovate in #1823
• Remove a direct use of golang.org/x/net/http2 by @mtrmac in #1843
• Merge pullSource tests as table driven format by @QiWang19 in #1826
• Relax retry heuristics by @mtrmac in #1847
• Simplify bodyReader.errorIfNotReconnecting by @mtrmac in #1850
• Update letsencrypt/boulder after letsencrypt/boulder#6651 by @mtrmac in #1849
• More warning fixes by @mtrmac in #1846
• Merge release branch into main by @mtrmac in #1842
• Update module github.com/sigstore/fulcio to v1.1.0 by @renovate in #1853
• Make it clear that cleartext signatures are not accepted in simple signing by @mtrmac in #1854
• Make some symbols in internal packages package-private by @mtrmac in #1855
• distribution: remove use of deprecated dial.DualStack by @giuseppe in #1856
• fix(deps): update module github.com/sylabs/sif/v2 to v2.9.2 by @renovate in #1857
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.2.0 by @renovate in #1858
• Fix builds of the ostree transport by @mtrmac in #1860
• [release-5.24] Backport retries heuristics updates by @mtrmac in #1859
• Merge release branch into main by @mtrmac in #1861
• fix(deps): update module github.com/sigstore/sigstore to v1.5.2 by @renovate in #1862
• fix(deps): update module github.com/containers/storage to v1.45.4 by @renovate in #1863
• fix(deps): update module github.com/stretchr/testify to v1.8.2 by @renovate in #1865
• fix(deps): update module github.com/sylabs/sif/v2 to v2.10.0 by @renovate in #1864
• fix(deps): update module github.com/klauspost/compress to v1.16.0 by @renovate in #1866
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.2.1 by @renovate in #1868
• manifest,zstd: give priority to zstd compressed images when pulling image from a manifest list by @flouthoc in #1789
• client: enable HTTP(S) keep-alive by @giuseppe in #1867
• fix(deps): update module github.com/sigstore/sigstore to v1.6.0 by @renovate in #1870
• fix(deps): update module golang.org/x/term to v0.6.0 by @renovate in #1871
• fix(deps): update module golang.org/x/crypto to v0.7.0 by @renovate in #1872
• fix(deps): update module golang.org/x/oauth2 to v0.6.0 by @renovate in #1873
• Split copy/copy.go into three files by @mtrmac in #1878
• fix(deps): update module github.com/sylabs/sif/v2 to v2.11.0 by @renovate in #1879
• copy: move c.compression* to imageCopier by @flouthoc in #1881
• Remove some inaccurate comments by @mtrmac in #1880
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.3.0 by @renovate in #1882
• fix(deps): update module github.com/klauspost/compress to v1.16.3 by @renovate in #1885
• fix(deps): update golang.org/x/exp digest to 522b1b5 by @renovate in #1844
• Don't claim auth.json contains encrypted information by @mtrmac in #1884
• fix(deps): update module github.com/imdario/mergo to v0.3.14 by @renovate in #1887
• fix(deps): update module github.com/go-openapi/strfmt to v0.21.5 by @renovate in #1889
• refactor(docs): Disambiguate sigstoreSigned documentation by @Delet0r in #1890
• fix(deps): update module github.com/sylabs/sif/v2 to v2.11.1 by @renovate in #1891
• Cirrus: Replace Ubuntu container w/ Debian VM by @cevich in #1886
• Don’t discard annotations on blob reuse and partial pulls by @mtrmac in #1892
• chore(deps): update dependency containers/automation_images to v20230320 by @renovate in #1893
• fix(deps): update module github.com/imdario/mergo to v0.3.15 by @renovate in #1895
• fix(deps): update module github.com/vbatts/tar-split to v0.11.3 by @renovate in #1897
• fix(deps): update module github.com/go-openapi/strfmt to v0.21.7 by @renovate in #1898
• fix(deps): update module github.com/docker/docker to v23.0.2+incompatible by @renovate in #1900
• fix(deps): update module github.com/sigstore/rekor to v1.1.0 by @renovate in #1901
• Allow using cosign-generated private keys with a "SIGSTORE" type by @mtrmac in #1902
• chore(deps): update dependency containers/automation_images to v20230330 by @renovate in #1905
• Add ability to verify a signature with a set of fingerprints by @Jamstah in #1904
• fix(deps): update golang.org/x/exp digest to 10a5072 by @renovate in #1906
• Update, and support, Fulcio v1.2.0 by @mtrmac in #1903
• Add FIXMEs about handling of zstd:chunked blob annotations on blob changes by @mtrmac in #1894
• Vendor in latest containers/storage by @rhatdan in #1908

New Contributors

• @Delet0r made their first contribution in #1890

Full Changelog: v5.24.2...v5.25.0