Zack Brady
a3d62b204f
another fix to tests for new tests ( #472 )
v1.3.1-rc.1
2025-10-27 18:40:05 -04:00
Zack Brady
d85a1b0775
fixed typo in testdata ( #471 )
...
signed-off-by: zack brady <zackbrady123@gmail.com >
2025-10-27 18:14:58 -04:00
Zack Brady
ea10bc0256
fixed/cleaned new tests ( #470 )
2025-10-27 18:00:01 -04:00
Zack Brady
1aea670588
trying a new way for hauler testing ( #467 )
2025-10-27 14:31:32 -04:00
Adam Martin
f1a632a207
update for cosign v3 verify ( #469 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-10-24 17:07:49 -04:00
Zack Brady
802e062f47
added digests view to info ( #465 )
...
* added digests view to info
* updated digests to be more accurate
2025-10-23 15:08:45 -04:00
dependabot[bot]
d227e1f18f
bump github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.0 in the go_modules group across 1 directory ( #457 )
...
* Bump github.com/nwaples/rardecode/v2
Bumps the go_modules group with 1 update in the / directory: [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode ).
Updates `github.com/nwaples/rardecode/v2` from 2.1.1 to 2.2.0
- [Commits](https://github.com/nwaples/rardecode/compare/v2.1.1...v2.2.0 )
---
updated-dependencies:
- dependency-name: github.com/nwaples/rardecode/v2
dependency-version: 2.2.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
* fixed versions/dependencies for rardecode and archives
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-10-22 18:55:51 -04:00
Adam Martin
33a9bb3f78
update oras-go to v1.2.7 for security patches ( #464 )
...
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-22 13:42:25 -04:00
Adam Martin
344c008607
update cosign to v3.0.2+hauler.1 ( #463 )
...
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-22 12:48:56 -04:00
Zack Brady
09a149dab6
fixed homebrew directory deprecation ( #462 )
2025-10-21 19:44:43 -04:00
Garret Noling
f7f1e2db8f
add registry logout command ( #460 )
...
* add registry logout command
* moved logout/credential removal tests to the end
2025-10-21 19:31:24 -04:00
dependabot[bot]
0fafca87f9
bump the go_modules group across 1 directory with 2 updates ( #455 )
...
bumps the go_modules group with 2 updates in the / directory: [github.com/docker/docker](https://github.com/docker/docker ) and [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure ).
updates `github.com/docker/docker` from 28.2.2+incompatible to 28.3.3+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v28.2.2...v28.3.3 )
updates `github.com/go-viper/mapstructure/v2` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/go-viper/mapstructure/releases )
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-version: 28.3.3+incompatible
dependency-type: indirect
dependency-group: go_modules
- dependency-name: github.com/go-viper/mapstructure/v2
dependency-version: 2.4.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v1.3.0
2025-10-02 16:04:36 -04:00
Zack Brady
38e676e934
upgraded versions/dependencies/deprecations ( #454 )
...
* upgrade go versions/dependencies
* updated deprecated goreleaser code for homebrew
* updated deprecated goreleaser code for docker
2025-10-02 14:23:22 -04:00
Zack Brady
369c85bab9
allow loading of docker tarballs ( #452 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com >
v1.3.0-dev.1
2025-10-01 11:56:36 -04:00
dependabot[bot]
acbd1f1b6a
bump the go_modules group across 1 directory with 2 updates ( #449 )
...
bumps the go_modules group with 2 updates in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm ) and [github.com/docker/docker](https://github.com/docker/docker ).
updates `helm.sh/helm/v3` from 3.18.4 to 3.18.5
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.18.4...v3.18.5 )
updates `github.com/docker/docker` from 27.5.0+incompatible to 28.0.0+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.5.0...v28.0.0 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.18.5
dependency-type: direct:production
dependency-group: go_modules
- dependency-name: github.com/docker/docker
dependency-version: 28.0.0+incompatible
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-24 21:24:58 -04:00
Zack Brady
3e44c53b75
upgraded go and dependencies versions ( #444 )
...
* upgraded go version
* upgraded dependencies
v1.2.5
2025-07-11 11:49:01 -04:00
dependabot[bot]
062bb3ff2c
Bump github.com/go-viper/mapstructure/v2 ( #442 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure ).
Updates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.3.0
- [Release notes](https://github.com/go-viper/mapstructure/releases )
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0 )
---
updated-dependencies:
- dependency-name: github.com/go-viper/mapstructure/v2
dependency-version: 2.3.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-02 14:37:59 -04:00
dependabot[bot]
c8b4e80371
bump github.com/cloudflare/circl ( #441 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl ).
Updates `github.com/cloudflare/circl` from 1.3.7 to 1.6.1
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.1 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-version: 1.6.1
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-11 00:45:29 -04:00
Zack Brady
d86957bf20
deprecate auth from hauler store copy ( #440 )
2025-06-05 14:07:53 -04:00
dependabot[bot]
4a6fc8cec2
Bump github.com/open-policy-agent/opa ( #438 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ).
Updates `github.com/open-policy-agent/opa` from 1.1.0 to 1.4.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.1.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
dependency-version: 1.4.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 12:34:17 -04:00
Zack Brady
e089c31879
minor tests updates ( #437 )
v1.2.4
2025-05-01 11:07:00 -04:00
dependabot[bot]
b7b599e6ed
bump golang.org/x/net in the go_modules group across 1 directory ( #433 )
...
bumps the go_modules group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net ).
Updates `golang.org/x/net` from 0.37.0 to 0.38.0
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.38.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-04-30 22:21:37 -04:00
Adam Martin
ea53002f3a
formatting and flag text updates
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
v1.2.3
2025-04-22 12:43:04 -04:00
Nathaniel Churchill
4d0f779ae6
add keyless signature verification ( #434 )
2025-04-21 15:27:17 -04:00
dependabot[bot]
4d0b407452
bump helm.sh/helm/v3 in the go_modules group across 1 directory ( #430 )
...
bumps the go_modules group with 1 update in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm ).
Updates `helm.sh/helm/v3` from 3.17.0 to 3.17.3
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.17.0...v3.17.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.17.3
dependency-type: direct:production
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-11 00:16:05 -05:00
Adam Martin
3b96a95a94
add --only flag to hauler store copy (for images) ( #429 )
...
* bump cosign fork and tidy
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* add --only to hauler store copy
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
v1.2.3-dev.1
2025-04-08 09:27:12 -04:00
Adam Toy
f9a188259f
fix tlog verification error/warning output ( #428 )
...
* fix tlog verification error/warning output
* extend error msg to avoid ambiguity
2025-04-04 16:51:26 -05:00
Adam Martin
5021f3ab6b
cleanup new tlog flag typos and add shorthand ( #426 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
v1.2.2
2025-03-28 13:15:48 -04:00
Adam Martin
db065a1088
default public transparency log verification to false to be airgap friendly but allow override ( #425 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
v1.2.2-rc.1
2025-03-27 09:13:23 -04:00
dependabot[bot]
01bf58de03
bump github.com/golang-jwt/jwt/v4 ( #423 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt ).
Updates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 15:09:34 -04:00
dependabot[bot]
38b979d0c5
bump the go_modules group across 1 directory with 2 updates ( #422 )
...
bumps the go_modules group with 2 updates in the / directory: [github.com/containerd/containerd](https://github.com/containerd/containerd ) and [golang.org/x/net](https://github.com/golang/net ).
Updates `github.com/containerd/containerd` from 1.7.24 to 1.7.27
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.24...v1.7.27 )
Updates `golang.org/x/net` from 0.33.0 to 0.36.0
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
dependency-group: go_modules
- dependency-name: golang.org/x/net
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 11:52:25 -04:00
dependabot[bot]
7de20a1f15
bump github.com/go-jose/go-jose/v3 ( #417 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose ).
Updates `github.com/go-jose/go-jose/v3` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 23:14:27 -04:00
dependabot[bot]
088fde5aa9
bump github.com/go-jose/go-jose/v4 ( #415 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ).
updates `github.com/go-jose/go-jose/v4` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-28 03:29:02 -05:00
Adam Martin
eb275b9690
clear default manifest name if product flag used with sync ( #412 )
...
* clear default manifest name if product flag used with sync
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* only clear the default if the user did NOT explicitly set --filename
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
v1.2.1
2025-02-07 13:46:23 -05:00
Zack Brady
7d28df1949
updates for v1.2.0 ( #408 )
...
* updates for v1.2.0
* fixed readme typo
v1.2.0
2025-02-05 13:26:34 -05:00
Zack Brady
08f566fb28
fixed remote code ( #407 )
2025-02-05 11:25:11 -05:00
Zack Brady
c465d2c143
added remote file fetch to load ( #406 )
...
* updated load flag and related logs [breaking change]
* fixed load flag typo
* added remote file fetch to load
* fixed merge/rebase typo
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2025-02-05 09:32:35 -05:00
Zack Brady
39325585eb
added remote and multiple file fetch to sync ( #405 )
...
* updated sync flag and related logs [breaking change]
* fixed typo in sync flag name
* and the last typo fix...
* added remote and multiple file fetch to sync
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2025-02-05 09:13:38 -05:00
Zack Brady
535a82c1b5
updated save flag and related logs ( #404 )
...
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2025-02-05 09:06:13 -05:00
Zack Brady
53cf953750
updated load flag and related logs [breaking change] ( #403 )
...
* updated load flag and related logs [breaking change]
* fixed load flag typo
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2025-02-05 09:01:18 -05:00
Zack Brady
ff144b1180
updated sync flag and related logs [breaking change] ( #402 )
...
* updated sync flag and related logs [breaking change]
* fixed typo in sync flag name
* and the last typo fix...
2025-02-05 08:54:54 -05:00
Zack Brady
938914ba5c
upgraded api update to v1/updated dependencies ( #400 )
...
* initial api update to v1
* updated dependencies
* updated manifests
* last bit of updates
* fixed manifest typo
* added deprecation warning
2025-02-04 21:36:20 -05:00
Zack Brady
603249dea9
fixed consts for oci declarations ( #398 )
2025-02-03 08:14:44 -05:00
Adam Martin
37032f5379
fix for correctly grabbing platform post cosign 2.4 updates ( #393 )
2025-01-27 18:44:11 -05:00
Adam Martin
ec9ac48476
use cosign v2.4.1+carbide.2 to address containerd annotation in index.json ( #390 )
v1.2.0-dev.2
2025-01-19 10:32:12 -05:00
dependabot[bot]
5f5cd64c2f
Bump the go_modules group across 1 directory with 2 updates ( #385 )
v1.2.0-dev.1
2025-01-10 19:59:36 -05:00
Adam Martin
882713b725
replace mholt/archiver with mholt/archives ( #384 )
2025-01-10 19:15:00 -05:00
Adam Martin
a20d7bf950
forked cosign bump to 2.4.1 and use as a library vs embedded binary ( #383 )
...
* only ignore project-root/store not all store paths
* remove embedded cosign binary in favor of fork library
2025-01-10 17:14:44 -05:00
Zack Brady
e97adcdfed
cleaned up registry and improved logging ( #378 )
...
* cleaned up registry and improved logging
* last bit of logging improvements/import clean up
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2025-01-09 15:21:03 -05:00
dependabot[bot]
cc17b030a9
Bump golang.org/x/crypto in the go_modules group across 1 directory ( #377 )
...
Bumps the go_modules group with 1 update in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto ).
Updates `golang.org/x/crypto` from 0.28.0 to 0.31.0
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-14 01:02:58 -05:00