* fix tar PAX handling on Windows

* always force PAX format

* Support the platform specific authentication of krane in "auth get" command

* Add tests for...

* Redact sensitive information in redirected URLs

This adds internal methods to redact potent...

* Implement crane edit

This works at least on linux with neovim. If stdin appears to be
inte...

* bump deps using ./hack/bump-deps.sh

* bump deps using ./hack/bump-deps.sh

* CI: use 1.18...

* Add unit test covering .dockerconfigjson secrets

* WIP: add failing unit test based on Dave...

Sometimes we see authentication errors if the from repo doesn't exist,
so fall back to just ini...

Atomically incrementing the number of bytes written isn't sufficient if
we're sending the updat...

A bunch of breaking changes that might be contentious, but I think this
is probably the right b...

We currently compute these manually, but that drops platform information
and annotations. Keep ...

* Bump staticcheck to latest version

Refactor tests that where Marshalling the transport.Erro...

* Use go-digest to validate digests

* fix presubmit

* remove debugging, Jon is such a stic...

Signed-off-by: jwiegratz <[email protected]>
Signed-off-by: jwhb <[email protected]>

This is currently only implemented by Google but we'd like to upstream
this to the distribution...

Because we wanted to reuse the layer uploading code, we wrap the config
bytes up as a Layer. Un...

Signed-off-by: Batuhan Apaydın <[email protected]>
Co-authored-by: Furkan Türkal <fu...

Co-authored-by: Eric Stroczynski <[email protected]>

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2 to ...

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.1...

* feat(crane): allow setting the repository to push by digest

Signed-off-by: Markus Lippert <...

* Bump dependencies using ./hack/bump-deps.sh

* don't build with 1.14, -compat=1.17 on all go...

Signed-off-by: Markus Lippert <[email protected]>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release n...

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.0.0 to 3.1.0.
...

* check and use the latest go available

Signed-off-by: cpanato <[email protected]>

* update...

* bump require blocks to point to latest main (892d7a8)

* run go mod tidy again

* authn.kubernetes.Resolve now behaves exactly like Kubernetes

Prior we weren't matching host...

Co-authored-by: Eric Stroczynski <[email protected]>

Co-authored-by: Eric Stroczynski <[email protected]>

This speeds up instances where the credentials are in image pull secrets

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.1.0 to 3.0.0.
...

Bumps [actions/stale](https://github.com/actions/stale) from 4 to 5.
- [Release notes](https://...

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2 to 3.
- [Release notes](ht...

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from...

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](ht...

This is an attempt to work around some interesting behavior from
DockerHub.

> This query par...

* crane export: Read tarball from a file

A working concept that reads the image from "test.ta...

* Add rebase_test.sh to hack/presubmit.sh

* look for -eq 0 instead of -ne 1

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 2 t...

Currently we just fail outright if the registry returns a 500 during a
blob HEAD because it's n...

* Add GitHub Action to automatically bump deps

* Disable dependabot

* Add output option to mutate to save to a tar file and not push to a registry (same as append)
...

* Take advantage of Chainguard maintained versions of various actions.

I created these so we ...

GitHub Actions recently updated the Windows version used by
windows-latest, which is no longer ...

* Bump deps, add script to make it easier

* Bump deps

* Check docker config auths for repo and registry

This enables the case where a config's auth...

* LayerFromReader: buffer contents to a temp file instead of in memory

* Add deprecation warn...

This should reduce log spam to stderr for clients using google.Keychain
when they don't have Go...

* Fallback to anonymous if env or gcloud are not configured

Debug-log env or gcloud errors in...

- if GITHUB_TOKEN env var is set, and registry is ghcr.io, use the
token as a password.
- if...

Currently, daemon.Image is so lazy that non-existent images don't return
an error. This changes...

* Implement Platform.String and v1.ParsePlatform

* Remove support for osfeatures and features...

* bump containerd to 1.5.9

* tidy deps in other modules

* go get -u image-spec@main

We see EOF when the server closes a connection without sending an
appropriate "Connection: clos...

* Fix NewKeychainFromHelper

- only pass RegistryStr, since helpers don't expect to see repo p...

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-crede...

* Bump acr cred helper dep

This picks up
https://github.com/chrismellard/docker-credential-a...

This is similar to what happens when the package looks for Docker's
config.json, it ignores any...