dependabot[bot]
dffcb8254c
bump github.com/theupdateframework/go-tuf/v2 ( #495 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf ).
updates `github.com/theupdateframework/go-tuf/v2` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/theupdateframework/go-tuf/releases )
- [Commits](https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1 )
---
updated-dependencies:
- dependency-name: github.com/theupdateframework/go-tuf/v2
dependency-version: 2.3.1
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-21 13:24:06 -05:00
Zack Brady
4a2b7b13a7
fixed typos for containerd imports ( #493 )
2026-01-15 20:45:24 -05:00
Zack Brady
cf22fa8551
fix and support containerd imports of hauls ( #492 )
...
* fixed hauler save for containerd
* added flag for containerd compatibility
2026-01-15 09:09:23 -05:00
dependabot[bot]
28432fc057
bump github.com/sigstore/fulcio ( #489 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio ).
updates `github.com/sigstore/fulcio` from 1.8.3 to 1.8.5
- [Release notes](https://github.com/sigstore/fulcio/releases )
- [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sigstore/fulcio/compare/v1.8.3...v1.8.5 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/fulcio
dependency-version: 1.8.5
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 23:57:10 -05:00
Zack Brady
ac7d82b55f
added/updated logging for serve and remove ( #487 )
...
* added error logging for hauler store serve
* updated logging for hauler store remove to match others
* added more error logging for user responses
2026-01-12 16:36:37 -05:00
Zack Brady
ded947d609
added/fixed helm chart images/dependencies features ( #485 )
...
* added/fixed helm chart images/dependencies features
* added helm chart images/dependencies features to sync/manifests
* more fixes for helm chart images/dependencies features
* fixed tests for incorrect referenced images
* fixed sync for helm chart images/dependencies
* added helm chart image annotations and registry/platform features
* updated ordering of experimental
* added more parsing types for helm images/dependencies
* a few more remove artifacts updates
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2026-01-09 13:39:52 -05:00
Zack Brady
ff3cece87f
more experimental feature updates ( #486 )
...
* updates for experimental features and renamed delete to remove
* added examples back for experimental features
* update stability warning message
Co-authored-by: Camryn Carter <camryn.carter@ranchergovernment.com >
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
* fixed more tests to use ghcr for hauler
* updated test data workflow
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
Co-authored-by: Camryn Carter <camryn.carter@ranchergovernment.com >
2026-01-08 14:57:52 -05:00
Camryn Carter
c54065f316
add experimental notes ( #483 )
2026-01-08 00:59:23 -05:00
Zack Brady
382dea42a5
updated tempdir flag to store persistent flags ( #484 )
2026-01-07 08:31:40 -05:00
Camryn Carter
3c073688f3
delete artifacts from store ( #473 )
...
* WIP delete artifacts
* handle multiple matches
* confirm deletion
* --force flag for delete-artifact
* clean up remaining unreferenced blobs
* more robust handling of manifest structure
* fixed loop to process all layers
* tests pt 1
* fix tests
* test order
* updated tests for deleting chart and file
* tool cleanup tests
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2026-01-06 11:54:06 -05:00
Camryn Carter
96bab7b81f
path rewrites ( #475 )
...
* image reference rewrite
* remove need for rewrite-provider
* handle charts
* handle leading slash and missing tags
* tests
* tool cleanup
* removed intermediate store cleanup
* fix?
* test cleanup
* clean up tools folder again
* debug test
* clear tempdir after each filename provided by load
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* update tar command in load integration test
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* clean up debug prints
* clean up debug prints
* fix typo
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2026-01-06 11:48:49 -05:00
Zack Brady
5ea9b29b8f
updated/fixed workflow dependency versions ( #478 )
...
* updated/fixed workflow dependency versions
* added hosted tools cache clean up
2026-01-02 14:35:10 -05:00
Adam Martin
15867e84ad
bump to latest cosign fork release ( #481 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-12-12 14:25:40 -05:00
dependabot[bot]
c5da018450
Bump golang.org/x/crypto in the go_modules group across 1 directory ( #476 )
...
Bumps the go_modules group with 1 update in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto ).
Updates `golang.org/x/crypto` from 0.43.0 to 0.45.0
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.45.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 10:39:52 -05:00
dependabot[bot]
5edc8802ee
bump github.com/containerd/containerd ( #474 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/containerd/containerd](https://github.com/containerd/containerd ).
udates `github.com/containerd/containerd` from 1.7.28 to 1.7.29
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.28...v1.7.29 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-version: 1.7.29
dependency-type: direct:production
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-06 18:03:19 -05:00
Zack Brady
a3d62b204f
another fix to tests for new tests ( #472 )
2025-10-27 18:40:05 -04:00
Zack Brady
d85a1b0775
fixed typo in testdata ( #471 )
...
signed-off-by: zack brady <zackbrady123@gmail.com >
2025-10-27 18:14:58 -04:00
Zack Brady
ea10bc0256
fixed/cleaned new tests ( #470 )
2025-10-27 18:00:01 -04:00
Zack Brady
1aea670588
trying a new way for hauler testing ( #467 )
2025-10-27 14:31:32 -04:00
Adam Martin
f1a632a207
update for cosign v3 verify ( #469 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-10-24 17:07:49 -04:00
Zack Brady
802e062f47
added digests view to info ( #465 )
...
* added digests view to info
* updated digests to be more accurate
2025-10-23 15:08:45 -04:00
dependabot[bot]
d227e1f18f
bump github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.0 in the go_modules group across 1 directory ( #457 )
...
* Bump github.com/nwaples/rardecode/v2
Bumps the go_modules group with 1 update in the / directory: [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode ).
Updates `github.com/nwaples/rardecode/v2` from 2.1.1 to 2.2.0
- [Commits](https://github.com/nwaples/rardecode/compare/v2.1.1...v2.2.0 )
---
updated-dependencies:
- dependency-name: github.com/nwaples/rardecode/v2
dependency-version: 2.2.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
* fixed versions/dependencies for rardecode and archives
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-10-22 18:55:51 -04:00
Adam Martin
33a9bb3f78
update oras-go to v1.2.7 for security patches ( #464 )
...
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-22 13:42:25 -04:00
Adam Martin
344c008607
update cosign to v3.0.2+hauler.1 ( #463 )
...
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-22 12:48:56 -04:00
Zack Brady
09a149dab6
fixed homebrew directory deprecation ( #462 )
2025-10-21 19:44:43 -04:00
Garret Noling
f7f1e2db8f
add registry logout command ( #460 )
...
* add registry logout command
* moved logout/credential removal tests to the end
2025-10-21 19:31:24 -04:00
dependabot[bot]
0fafca87f9
bump the go_modules group across 1 directory with 2 updates ( #455 )
...
bumps the go_modules group with 2 updates in the / directory: [github.com/docker/docker](https://github.com/docker/docker ) and [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure ).
updates `github.com/docker/docker` from 28.2.2+incompatible to 28.3.3+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v28.2.2...v28.3.3 )
updates `github.com/go-viper/mapstructure/v2` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/go-viper/mapstructure/releases )
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-version: 28.3.3+incompatible
dependency-type: indirect
dependency-group: go_modules
- dependency-name: github.com/go-viper/mapstructure/v2
dependency-version: 2.4.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 16:04:36 -04:00
Zack Brady
38e676e934
upgraded versions/dependencies/deprecations ( #454 )
...
* upgrade go versions/dependencies
* updated deprecated goreleaser code for homebrew
* updated deprecated goreleaser code for docker
2025-10-02 14:23:22 -04:00
Zack Brady
369c85bab9
allow loading of docker tarballs ( #452 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-01 11:56:36 -04:00
dependabot[bot]
acbd1f1b6a
bump the go_modules group across 1 directory with 2 updates ( #449 )
...
bumps the go_modules group with 2 updates in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm ) and [github.com/docker/docker](https://github.com/docker/docker ).
updates `helm.sh/helm/v3` from 3.18.4 to 3.18.5
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.18.4...v3.18.5 )
updates `github.com/docker/docker` from 27.5.0+incompatible to 28.0.0+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.5.0...v28.0.0 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.18.5
dependency-type: direct:production
dependency-group: go_modules
- dependency-name: github.com/docker/docker
dependency-version: 28.0.0+incompatible
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-24 21:24:58 -04:00
Zack Brady
3e44c53b75
upgraded go and dependencies versions ( #444 )
...
* upgraded go version
* upgraded dependencies
2025-07-11 11:49:01 -04:00
dependabot[bot]
062bb3ff2c
Bump github.com/go-viper/mapstructure/v2 ( #442 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure ).
Updates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.3.0
- [Release notes](https://github.com/go-viper/mapstructure/releases )
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0 )
---
updated-dependencies:
- dependency-name: github.com/go-viper/mapstructure/v2
dependency-version: 2.3.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-02 14:37:59 -04:00
dependabot[bot]
c8b4e80371
bump github.com/cloudflare/circl ( #441 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl ).
Updates `github.com/cloudflare/circl` from 1.3.7 to 1.6.1
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.1 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-version: 1.6.1
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-11 00:45:29 -04:00
Zack Brady
d86957bf20
deprecate auth from hauler store copy ( #440 )
2025-06-05 14:07:53 -04:00
dependabot[bot]
4a6fc8cec2
Bump github.com/open-policy-agent/opa ( #438 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ).
Updates `github.com/open-policy-agent/opa` from 1.1.0 to 1.4.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.1.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
dependency-version: 1.4.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 12:34:17 -04:00
Zack Brady
e089c31879
minor tests updates ( #437 )
2025-05-01 11:07:00 -04:00
dependabot[bot]
b7b599e6ed
bump golang.org/x/net in the go_modules group across 1 directory ( #433 )
...
bumps the go_modules group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net ).
Updates `golang.org/x/net` from 0.37.0 to 0.38.0
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.38.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-04-30 22:21:37 -04:00
Adam Martin
ea53002f3a
formatting and flag text updates
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-04-22 12:43:04 -04:00
Nathaniel Churchill
4d0f779ae6
add keyless signature verification ( #434 )
2025-04-21 15:27:17 -04:00
dependabot[bot]
4d0b407452
bump helm.sh/helm/v3 in the go_modules group across 1 directory ( #430 )
...
bumps the go_modules group with 1 update in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm ).
Updates `helm.sh/helm/v3` from 3.17.0 to 3.17.3
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.17.0...v3.17.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.17.3
dependency-type: direct:production
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-11 00:16:05 -05:00
Adam Martin
3b96a95a94
add --only flag to hauler store copy (for images) ( #429 )
...
* bump cosign fork and tidy
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* add --only to hauler store copy
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-04-08 09:27:12 -04:00
Adam Toy
f9a188259f
fix tlog verification error/warning output ( #428 )
...
* fix tlog verification error/warning output
* extend error msg to avoid ambiguity
2025-04-04 16:51:26 -05:00
Adam Martin
5021f3ab6b
cleanup new tlog flag typos and add shorthand ( #426 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-03-28 13:15:48 -04:00
Adam Martin
db065a1088
default public transparency log verification to false to be airgap friendly but allow override ( #425 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-03-27 09:13:23 -04:00
dependabot[bot]
01bf58de03
bump github.com/golang-jwt/jwt/v4 ( #423 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt ).
Updates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 15:09:34 -04:00
dependabot[bot]
38b979d0c5
bump the go_modules group across 1 directory with 2 updates ( #422 )
...
bumps the go_modules group with 2 updates in the / directory: [github.com/containerd/containerd](https://github.com/containerd/containerd ) and [golang.org/x/net](https://github.com/golang/net ).
Updates `github.com/containerd/containerd` from 1.7.24 to 1.7.27
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.24...v1.7.27 )
Updates `golang.org/x/net` from 0.33.0 to 0.36.0
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
dependency-group: go_modules
- dependency-name: golang.org/x/net
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 11:52:25 -04:00
dependabot[bot]
7de20a1f15
bump github.com/go-jose/go-jose/v3 ( #417 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose ).
Updates `github.com/go-jose/go-jose/v3` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 23:14:27 -04:00
dependabot[bot]
088fde5aa9
bump github.com/go-jose/go-jose/v4 ( #415 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ).
updates `github.com/go-jose/go-jose/v4` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-28 03:29:02 -05:00
Adam Martin
eb275b9690
clear default manifest name if product flag used with sync ( #412 )
...
* clear default manifest name if product flag used with sync
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* only clear the default if the user did NOT explicitly set --filename
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-02-07 13:46:23 -05:00
Zack Brady
7d28df1949
updates for v1.2.0 ( #408 )
...
* updates for v1.2.0
* fixed readme typo
2025-02-05 13:26:34 -05:00
