Commit Graph
149 Commits
Author SHA1 Message Date
47e74cfd8e bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (#742)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 18:02:36 -04:00
000939b8ef bump github.com/containerd/containerd/v2 from 2.3.3 to 2.3.4 (#741)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 18:01:49 -04:00
2db8be46e4 bump helm.sh/helm/v4 from 4.2.3 to 4.2.4 (#739)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 18:01:15 -04:00
Zack BradyandGitHub 72c723adc9 bumped deps and fixed vulns (#738) 2026-08-15 14:05:04 -04:00
Zack BradyandGitHub 7d7adcaf17 fixed registry bug with debug config (#722) 2026-08-10 12:30:08 -04:00
db7946130f bump github.com/sigstore/cosign/v3 from 3.1.2 to 3.1.3 (#726)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 10:07:23 -04:00
819ad66356 bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 (#725)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 10:06:47 -04:00
a5dbe72dd1 bump github.com/sigstore/sigstore from 1.10.8 to 1.10.9 (#713)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 09:42:15 -04:00
bbdd197248 bump github.com/mattn/go-isatty from 0.0.20 to 0.0.24 (#712)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 09:41:26 -04:00
Adam MartinandGitHub 612473e08a feat: async pulls (#711)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-08-05 16:34:41 -04:00
7a84ef73d5 bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 (#709)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 12:17:15 -04:00
06ab061e10 bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory (#700)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-30 14:46:11 -04:00
2c760462f4 Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in the go_modules group across 1 directory (#691)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-25 11:29:07 -04:00
76ca37fb4f Bump k8s.io/apimachinery from 0.36.2 to 0.36.3 (#688)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-25 11:23:24 -04:00
Adam MartinandGitHub 8677f3cc6c fix: bump golang to 1.26.5 (#685)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-07-21 14:30:40 -04:00
59251c628d Bump github.com/sigstore/cosign/v3 from 3.1.1 to 3.1.2 (#674)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-20 09:52:27 -04:00
Adam MartinandGitHub 2680e57f2e bump containerd to v2 (#663)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-07-16 10:51:39 -04:00
Zack BradyandGitHub b9069d57c6 added audit log functionality (#632)
Signed-off-by: Zack Brady <zackbrady123@gmail.com>
2026-07-10 13:52:24 -04:00
9d04bbdd64 bump helm.sh/helm/v4 from 4.2.2 to 4.2.3 (#661)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-10 08:41:10 -04:00
c38ba852b3 bump github.com/containerd/containerd from 1.7.33 to 1.7.34 (#659)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-10 08:40:35 -04:00
f1dad651db bump golang.org/x/sync from 0.21.0 to 0.22.0 (#650)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 01:49:06 -04:00
Adam MartinandGitHub cbf07f07d9 updates for helm v4 (#648)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-07-04 14:11:03 -04:00
Zack BradyandGitHub 32c30ac28a unpinned distribution/distribution dependency (#647) 2026-07-04 09:31:47 -04:00
Adam MartinandGitHub 4f47155d6f bump go to 1.26.4 to squash CVE noise (#640)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-06-23 11:58:40 -04:00
Adam MartinandGitHub ec5082df18 add v2 to module path to correct version (#637)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-06-22 16:40:31 -04:00
f68969de5c Bump helm.sh/helm/v3 from 3.21.1 to 3.21.2 (#635)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 08:59:48 -04:00
1baff64cc0 bump github.com/containerd/containerd from 1.7.32 to 1.7.33 (#633)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-19 11:00:15 -04:00
Zack BradyandGitHub 9e3fda28ce bumped versions and dependencies (#630) 2026-06-18 15:14:04 -04:00
5abb42e7fc bump helm.sh/helm/v3 from 3.21.0 to 3.21.1 (#623)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 11:21:28 -04:00
4c03e58024 bump k8s.io/apimachinery from 0.36.1 to 0.36.2 (#625)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 10:30:00 -04:00
0c5f8252b8 bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 (#628)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 10:29:18 -04:00
2b31ba465e bump golang.org/x/sync from 0.20.0 to 0.21.0 (#620)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 14:34:26 -04:00
c6c1022298 bump github.com/containerd/containerd from 1.7.31 to 1.7.32 (#616)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:19:55 +02:00
69d6b6e695 bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6 (#613)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 09:15:45 +02:00
953211d308 Bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 in the go_modules group across 1 directory (#612)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 09:59:47 -04:00
Adam Martin 1e782019c3 bump go to 1.26.0
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-05-14 09:13:56 -04:00
a7ab99b2a4 Bump helm.sh/helm/v3 from 3.20.2 to 3.21.0 (#610)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 08:44:38 -04:00
Adam Martin cfa7ea3484 bump github.com/sigstore/cosign/v3 from 3.0.5 to 3.0.6
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-05-13 12:14:20 -04:00
99406d6cf8 bump github.com/containerd/containerd from 1.7.30 to 1.7.31 (#596)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 00:09:32 -04:00
820baf0ba7 bump github.com/google/go-containerregistry from 0.20.7 to 0.21.5 (#600)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 00:09:00 -04:00
d379ffa660 bump github.com/rs/zerolog from 1.34.0 to 1.35.1 (#593)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 00:08:12 -04:00
c3cd3c0379 bump github.com/sigstore/timestamp-authority/v2 (#557)
bumps the go_modules group with 1 update in the / directory: [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority).


updates `github.com/sigstore/timestamp-authority/v2` from 2.0.4 to 2.0.6
- [Release notes](https://github.com/sigstore/timestamp-authority/releases)
- [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/timestamp-authority/compare/v2.0.4...v2.0.6)

---
updated-dependencies:
- dependency-name: github.com/sigstore/timestamp-authority/v2
  dependency-version: 2.0.6
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-19 18:24:01 -05:00
Adam MartinandGitHub 40c4fdded4 add ability to add images from local docker daemon (#551)
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-04-19 17:51:36 -05:00
8560d02a6d bump helm.sh/helm/v3 in the go_modules group across 1 directory (#552)
bumps the go_modules group with 1 update in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm).

updates `helm.sh/helm/v3` from 3.19.0 to 3.20.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.19.0...v3.20.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.2
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-11 10:39:49 -04:00
7319874ea8 bump go.opentelemetry.io/otel/sdk (#548)
bumps the go_modules group with 1 update in the / directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).

updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 17:30:16 -04:00
93938d1acb bump github.com/go-jose/go-jose/v4 (#542)
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose).


updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4

- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4)

---

updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 08:41:54 -04:00
565b27d54b bump google.golang.org/grpc in the go_modules group across 1 directory (#536)
bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).

updates `google.golang.org/grpc` from 1.78.0 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3)

---

updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 23:25:22 -04:00
Zack BradyandGitHub cc6123918f removed deprecated code (#528)
* removed deprecated code
* removed all supported for v1alpha1
2026-03-10 12:51:15 -04:00
995e538412 bump github.com/docker/cli in the go_modules group across 1 directory (#526)
bumps the go_modules group with 1 update in the / directory: [github.com/docker/cli](https://github.com/docker/cli).


updates `github.com/docker/cli` from 29.0.3+incompatible to 29.2.0+incompatible
- [Commits](https://github.com/docker/cli/compare/v29.0.3...v29.2.0)

---

updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.2.0+incompatible
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 12:27:31 -05:00
Adam MartinandGitHub e2a59508af over-"haul": replace oras v1 and cosign fork with native containerd-based implementation (#515)
* remove oras from hauler

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* remove cosign fork and use upstream cosign for verification

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* added support for oci referrers

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* updated README.md projects list

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* updates for copilot PR review

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for unsafe type assertions

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for http getter and dead code

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* fixes for more clarity and better error handling

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for resource leaks and unchecked errors

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for rewrite logic for docker.io images due to cosign removal

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for sigs and referrers

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for index.json missing mediatype

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix to make sure manifest.json doesnt include anything other than actual container images

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
2026-03-06 11:45:47 -05:00