Sometimes Authenticators stick around for a while and eventually expire.
This changes modifies ...

Bumps [slsa-framework/slsa-verifier](https://github.com/slsa-framework/slsa-verifier) from 2.0.1...

I'm not sure the backoff needs changing, but the posted quotas have changed.

TODO: ARBackoff()

* Adding mutate --workdir option to set the working directory

* Regenerating the Markdown doc...

Bumps [actions/stale](https://github.com/actions/stale) from 7 to 8.
- [Release notes](https://...

* Support Warning header aggregation and reporting in crane

* write to stderr

* revert man...

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](ht...

Because of how omitempty works, an empty Layers and a nil Layers will
both be omitted. We don't...

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-crede...

Signed-off-by: Batuhan Apaydın <[email protected]>

Signed-off-by: Tianon Gravi <[email protected]>

Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-gener...

* crane: add --flatten for index append

While it's possible that folks might want to append a...

* tarball: godocs typo

* tarball: memoize imageToTags

Set previously unset mediaType for empty.ImageIndex so that the
mediaType will be present in th...

* Implement crane index subcommand

crane index filter allows platform-based filtering of mani...

Signed-off-by: Jose R. Gonzalez <[email protected]>

Fixes: #1558

Signed-off-by: Luiz Carvalho <[email protected]>

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.1.1...

* Support for OCI 1.1+ referrers via API

Signed-off-by: Josh Dolitsky <[email protected]>

* m...

This uses the --media-type flag.

Currently, layerTime only mutates the modification timestamp which is
present in all tar format...

Signed-off-by: Josh Dolitsky <[email protected]>

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.3...

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.1.0...

* Support artifactType, for images whose config.mediaType is not a config

* lint feedback

...

* hash: use generic instantiation

This enables doing something like
https://github.com/openc...

* clarify crane download readme

* Update cmd/crane/README.md

Co-authored-by: Jason Hall <j...

This reverts commit 46031f6496261dcd61af9d6081e97553973df6b7.

* crane: support --full-ref for crane ls

* generate docs

See https://github.com/docker/hub-feedback/issues/2107#issuecomment-1371293316

* crane: add digest --full

* --full-ref

This commit replaces `os.MkdirTemp` with `t.TempDir` in tests. The
directory created by `t.Temp...

This implements a "happy eyeballs" (RFC 6555) style of race in order to
speed up http fallback ...

Bumps [actions/stale](https://github.com/actions/stale) from 6 to 7.
- [Release notes](https://...

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3.2.0...

Make DefaultKeychain return the Anonymous authenticator when the config
for a registry is empty...

* Replace interface{} with any

* Add godoc comments

* Add missing err check

* gofmt

...

This reverts commit 37b993ac11d2c2f9708ed7927909d850b4a17bbe.

We have two levels of retries here.

The first is in the retryTransport, which currently just ...

* Plumb logger option into registry blobs

The logger was previously just being ignored.

* ...

We hit this if the auth handshake fails, but this says "no matching
credentials", which isn't n...

* Add support for zstd compression

Squashed commits:
[6563fc82] Run ./hack/update-codegen.sh...

Co-authored-by: tydra-wang <[email protected]>

Signed-off-by: Batuhan Apaydın <[email protected]>

Signed-off-by: Batuhan Apaydın ...

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.3...

:gift: There are contexts where it may be desirable to leverage the `kubernetes` keychain for au...

Our v0.12.1 failed to generate provenance because we're using a broken
version. I checked for t...

* crane: add catalog argument use annotation

* crane: catalog examples and syntex update

*...

Signed-off-by: Spike Curtis <[email protected]>

Signed-off-by: Spike Curtis <[email protected]>

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.2...

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3.1.0...

Signed-off-by: Asra Ali <[email protected]>

Signed-off-by: Asra Ali <[email protected]>

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2 to 3.
- [Release notes](ht...

* Make ErrBadName checkable via errors.Is()

The function IsErrBadName says it is deprecated a...

Bumps [actions/stale](https://github.com/actions/stale) from 5 to 6.
- [Release notes](https://...

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.0 to 3.1.1.
...

* allow remote.DefaultTransport to be overridden by an http.RoundTripper

* lint finding

Signed-off-by: MisterMX <[email protected]>

Signed-off-by: MisterMX <[email protected]>

Signed-off-by: Asra Ali <[email protected]>

Signed-off-by: Asra Ali <[email protected]>

Signed-off-by: Asra Ali <[email protected]>

Signed-off-by: Asra Ali <[email protected]>

* e2e: pull and export stdin and stdout

* List all resulting tar files

* fix: consider base image media type when appending layers

* fix docs

* fix unit test

...

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-crede...

* Bump opencontainers/image-spec

Signed-off-by: Shubham Sharma <[email protected]>

* ...

In a kubernetes environment, a volume from a Secret can be optionally
mounted. If the Secret do...

We see this often as "connection reset by peer" errors. Not a lot we can
do about this beyond r...