Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package oras for openSUSE:Factory checked in
at 2025-04-29 16:42:00
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/oras (Old)
and /work/SRC/openSUSE:Factory/.oras.new.30101 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "oras"
Tue Apr 29 16:42:00 2025 rev:5 rq:1273344 version:1.2.3
Changes:
--------
--- /work/SRC/openSUSE:Factory/oras/oras.changes 2024-12-19
21:42:17.740822910 +0100
+++ /work/SRC/openSUSE:Factory/.oras.new.30101/oras.changes 2025-04-29
16:42:17.987027178 +0200
@@ -1,0 +2,21 @@
+Tue Apr 29 08:00:28 UTC 2025 - Johannes Kastl
<opensuse_buildserv...@ojkastl.de>
+
+- Update to version 1.2.3:
+ * Bug Fixes
+ - Fix #1599: Auth token scope not correctly added when using
+ --debug or --no-tty with oras push
+ - Fix #1623: Should show KB instead of kB in the progress bar
+ * Other Changes
+ - Minor security enhancements
+ - Update dependencies
+ * Detailed Commits
+ - bump: tag and release ORAS CLI v1.2.2 by @shizhMSFT in #1592
+ - fix: scope action only has pull when get service token in
+ executing cmd org push by @hopegi in #1600
+ - build: upgrade Go version and dependencies to the latest by
+ @Wwwsylvia in #1706
+ - backport(fix): show KB in progress bar instead of kB (#1623)
+ by @Wwwsylvia in #1707
+ - build: use alpine 3.21.3 by @Wwwsylvia in #1708
+
+-------------------------------------------------------------------
Old:
----
oras-1.2.1.obscpio
oras-1.2.2.obscpio
New:
----
oras-1.2.3.obscpio
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ oras.spec ++++++
--- /var/tmp/diff_new_pack.6lY1bZ/_old 2025-04-29 16:42:18.627054060 +0200
+++ /var/tmp/diff_new_pack.6lY1bZ/_new 2025-04-29 16:42:18.627054060 +0200
@@ -1,7 +1,7 @@
#
# spec file for package oras
#
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: oras
-Version: 1.2.2
+Version: 1.2.3
Release: 0
Summary: OCI registry client - manage content like artifacts, images,
packages
License: Apache-2.0
@@ -26,8 +26,8 @@
Source1: vendor.tar.gz
BuildRequires: bash-completion
BuildRequires: fish
-BuildRequires: go >= 1.23
BuildRequires: zsh
+BuildRequires: golang(API) >= 1.24
%description
ORAS is the de facto tool for working with OCI Artifacts. It treats media types
++++++ _service ++++++
--- /var/tmp/diff_new_pack.6lY1bZ/_old 2025-04-29 16:42:18.659055404 +0200
+++ /var/tmp/diff_new_pack.6lY1bZ/_new 2025-04-29 16:42:18.663055573 +0200
@@ -3,7 +3,7 @@
<param name="url">https://github.com/oras-project/oras</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">v1.2.2</param>
+ <param name="revision">v1.2.3</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="changesgenerate">enable</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.6lY1bZ/_old 2025-04-29 16:42:18.687056581 +0200
+++ /var/tmp/diff_new_pack.6lY1bZ/_new 2025-04-29 16:42:18.691056748 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/oras-project/oras</param>
- <param
name="changesrevision">677529b4e7c38e3295e0883a2ee8a536e3a860f4</param></service></servicedata>
+ <param
name="changesrevision">10fb4e54ba99e8df2ec29a0f14eb12e4058bb500</param></service></servicedata>
(No newline at EOF)
++++++ oras-1.2.1.obscpio -> oras-1.2.3.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/.codecov.yml
new/oras-1.2.3/.github/.codecov.yml
--- old/oras-1.2.1/.github/.codecov.yml 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/.codecov.yml 1970-01-01 01:00:00.000000000 +0100
@@ -1,23 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-coverage:
- status:
- project:
- default:
- target: 75%
- if_ci_failed: error
- patch:
- default:
- target: 80%
- if_ci_failed: error
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/ISSUE_TEMPLATE/bug-report.yaml
new/oras-1.2.3/.github/ISSUE_TEMPLATE/bug-report.yaml
--- old/oras-1.2.1/.github/ISSUE_TEMPLATE/bug-report.yaml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/ISSUE_TEMPLATE/bug-report.yaml 1970-01-01
01:00:00.000000000 +0100
@@ -1,62 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: Bug Report
-description: File a bug report
-labels: [bug, triage]
-body:
- - type: markdown
- id: preface
- attributes:
- value: |
- Thank you for reporting bugs to ORAS!
- - type: textarea
- id: environment
- validations:
- required: true
- attributes:
- label: What happened in your environment?
- description: "Please also attach logs here using `--debug` flag."
- - type: textarea
- id: expect
- attributes:
- label: "What did you expect to happen?"
- - type: textarea
- id: reproduce
- validations:
- required: true
- attributes:
- label: "How can we reproduce it?"
- description: "Please tell us your environment information as minimally
and precisely as possible."
- - type: textarea
- id: version
- validations:
- required: true
- attributes:
- label: What is the version of your ORAS CLI?
- description: "You can use the command `oras version` to get it."
- - type: input
- id: os
- validations:
- required: true
- attributes:
- label: What is your OS environment?
- description: "e.g. Ubuntu 16.04"
- - type: checkboxes
- id: idea
- attributes:
- label: "Are you willing to submit PRs to fix it?"
- description: "This is absolutely not required, but we are happy to guide
you in the contribution process
- especially when you already have a good proposal or understanding of
how to implement it. Join us at https://slack.cncf.io/ and choose #oras
channel."
- options:
- - label: Yes, I am willing to fix it.
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/ISSUE_TEMPLATE/config.yml
new/oras-1.2.3/.github/ISSUE_TEMPLATE/config.yml
--- old/oras-1.2.1/.github/ISSUE_TEMPLATE/config.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/ISSUE_TEMPLATE/config.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,18 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-blank_issues_enabled: true
-contact_links:
- - name: Ask a question or request support in the community
- url: https://github.com/oras-project/oras/discussions/
- about: Ask a question or request support for using ORAS
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/oras-1.2.1/.github/ISSUE_TEMPLATE/feature-request.yaml
new/oras-1.2.3/.github/ISSUE_TEMPLATE/feature-request.yaml
--- old/oras-1.2.1/.github/ISSUE_TEMPLATE/feature-request.yaml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/ISSUE_TEMPLATE/feature-request.yaml 1970-01-01
01:00:00.000000000 +0100
@@ -1,47 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: Feature Request
-description: File a feature request
-labels: [enhancement, triage]
-body:
- - type: markdown
- id: preface
- attributes:
- value: "Thank you for submitting new features for ORAS."
- - type: input
- id: version
- attributes:
- label: "What is the version of your ORAS CLI"
- description: "You can use the command `oras version` to get it"
- - type: textarea
- id: description
- attributes:
- label: "What would you like to be added?"
- validations:
- required: true
- - type: textarea
- id: solution
- attributes:
- label: "Why is this needed for ORAS?"
- description: "Please describe your user story or scenario."
- validations:
- required: true
- - type: checkboxes
- id: idea
- attributes:
- label: "Are you willing to submit PRs to contribute to this feature?"
- description: "This is absolutely not required, but we are happy to guide
you in the contribution process
- especially when you already have a good proposal or understanding of
how to implement it. Join us at https://slack.cncf.io/ and choose #oras
channel."
- options:
- - label: Yes, I am willing to implement it.
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/PULL_REQUEST_TEMPLATE.md
new/oras-1.2.3/.github/PULL_REQUEST_TEMPLATE.md
--- old/oras-1.2.1/.github/PULL_REQUEST_TEMPLATE.md 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/PULL_REQUEST_TEMPLATE.md 1970-01-01
01:00:00.000000000 +0100
@@ -1,12 +0,0 @@
-**What this PR does / why we need it**:
-
-**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes
#<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
-Fixes #
-
-**Please check the following list**:
-- [ ] Does the affected code have corresponding tests, e.g. unit test, E2E
test?
-- [ ] Does this change require a documentation update?
-- [ ] Does this introduce breaking changes that would require an announcement
or bumping the major version?
-- [ ] Do all new files have an appropriate license header?
-
-<!-- If this is a security issue, please do not discuss on GitHub. Please
report any suspected or confirmed security issues directly to
https://github.com/oras-project/oras/blob/main/OWNERS.md. -->
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/dependabot.yml
new/oras-1.2.3/.github/dependabot.yml
--- old/oras-1.2.1/.github/dependabot.yml 2024-12-05 09:41:54.000000000
+0100
+++ new/oras-1.2.3/.github/dependabot.yml 1970-01-01 01:00:00.000000000
+0100
@@ -1,32 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-version: 2
-
-updates:
- - package-ecosystem: "gomod"
- directory: "/"
- schedule:
- interval: "daily"
-
- - package-ecosystem: "gomod"
- directory: "/test/e2e/"
- schedule:
- interval: "daily"
-
- - package-ecosystem: "github-actions"
- # Workflow files stored in the
- # default location of `.github/workflows`
- directory: "/"
- schedule:
- interval: "weekly"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/licenserc.yml
new/oras-1.2.3/.github/licenserc.yml
--- old/oras-1.2.1/.github/licenserc.yml 2024-12-05 09:41:54.000000000
+0100
+++ new/oras-1.2.3/.github/licenserc.yml 1970-01-01 01:00:00.000000000
+0100
@@ -1,50 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-header:
- license:
- spdx-id: Apache-2.0
- content: |
- Copyright The ORAS Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-
- paths-ignore:
- - '**/*.md'
- - 'CODEOWNERS'
- - 'LICENSE'
- - 'KEYS'
- - 'go.mod'
- - 'go.sum'
- - 'go.work'
- - '**/testdata/**'
-
- comment: on-failure
-
-dependency:
- files:
- - go.mod
- licenses:
- # known issue:
https://github.com/apache/skywalking-eyes/pull/107#issuecomment-1129761574
- - name: github.com/chzyer/logex
- version: v1.1.10
- license: MIT
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/build.yml
new/oras-1.2.3/.github/workflows/build.yml
--- old/oras-1.2.1/.github/workflows/build.yml 2024-12-05 09:41:54.000000000
+0100
+++ new/oras-1.2.3/.github/workflows/build.yml 1970-01-01 01:00:00.000000000
+0100
@@ -1,60 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: build
-
-on:
- push:
- branches:
- - main
- - release-*
- pull_request:
- branches:
- - main
- - release-*
-jobs:
- build:
- runs-on: ubuntu-latest
- strategy:
- matrix:
- go-version: ['1.23']
- fail-fast: true
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: Setup Go ${{ matrix.go-version }}
- uses: actions/setup-go@v5
- with:
- go-version: ${{ matrix.go-version }}
- check-latest: true
- - name: Build CLI
- run: make build-linux-amd64
- - name: Run Unit Tests
- run: make test
- - name: Run E2E Tests
- run: |
- if [[ $GITHUB_REF_NAME == v* && $GITHUB_REF_TYPE == tag ]]; then
- make teste2e
- else
- make teste2e-covdata
- fi
- env:
- ORAS_PATH: bin/linux/amd64/oras
- - name: Check Version
- run: bin/linux/amd64/oras version
- - name: Upload coverage to codecov.io
- uses: codecov/codecov-action@v4
- env:
- CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
- with:
- fail_ci_if_error: true
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/codeql-analysis.yml
new/oras-1.2.3/.github/workflows/codeql-analysis.yml
--- old/oras-1.2.1/.github/workflows/codeql-analysis.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/workflows/codeql-analysis.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,53 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: CodeQL
-
-on:
- push:
- branches:
- - main
- - release-*
- pull_request:
- branches:
- - main
- - release-*
- schedule:
- - cron: '43 12 * * 6'
-
-jobs:
- analyze:
- name: Analyze
- runs-on: ubuntu-latest
- permissions:
- actions: read
- contents: read
- security-events: write
- strategy:
- matrix:
- go-version: ['1.22']
- fail-fast: false
- steps:
- - name: Checkout repository
- uses: actions/checkout@v4
- - name: Set up Go ${{ matrix.go-version }} environment
- uses: actions/setup-go@v5
- with:
- go-version: ${{ matrix.go-version }}
- check-latest: true
- - name: Initialize CodeQL
- uses: github/codeql-action/init@v3
- with:
- languages: go
- - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v3
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/golangci-lint.yml
new/oras-1.2.3/.github/workflows/golangci-lint.yml
--- old/oras-1.2.1/.github/workflows/golangci-lint.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/workflows/golangci-lint.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,41 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: golangci-lint
-
-on:
- pull_request:
- paths-ignore:
- - 'docs/**'
-
-permissions:
- contents: read
-
-jobs:
- golangci:
- name: lint
- runs-on: ubuntu-latest
- strategy:
- matrix:
- go-version: ['1.22']
- fail-fast: true
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: Setup Go ${{ matrix.go-version }}
- uses: actions/setup-go@v5
- with:
- go-version: ${{ matrix.go-version }}
- check-latest: true
- - name: golangci-lint
- uses: golangci/golangci-lint-action@v6
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/license-checker.yml
new/oras-1.2.3/.github/workflows/license-checker.yml
--- old/oras-1.2.1/.github/workflows/license-checker.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/workflows/license-checker.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,44 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: License Checker
-
-on:
- push:
- branches:
- - main
- - release-*
- pull_request:
- branches:
- - main
- - release-*
-
-permissions:
- contents: write
- pull-requests: write
-
-jobs:
- check-license:
- runs-on: ubuntu-latest
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: Check license header
- uses: apache/skywalking-eyes/header@v0.6.0
- with:
- mode: check
- config: .github/licenserc.yml
- - name: Check dependencies license
- uses: apache/skywalking-eyes/dependency@v0.6.0
- with:
- config: .github/licenserc.yml
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/release-ghcr.yml
new/oras-1.2.3/.github/workflows/release-ghcr.yml
--- old/oras-1.2.1/.github/workflows/release-ghcr.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/workflows/release-ghcr.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,48 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: release-ghcr
-
-on:
- push:
- tags: [v*]
- branches: [main]
-
-jobs:
- build:
- runs-on: ubuntu-latest
- permissions:
- contents: read
- packages: write
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: prepare
- id: prepare
- run: |
- TAG=${GITHUB_REF#refs/*/} # get branch or tag as image tag
- echo "ref=ghcr.io/${{ github.repository }}:${TAG}" >> $GITHUB_OUTPUT
- - name: docker login
- uses: docker/login-action@v3
- with:
- registry: ghcr.io
- username: ${{ github.actor }}
- password: ${{ secrets.GITHUB_TOKEN }}
- - name: docker build
- run: |
- docker buildx create --use
- docker buildx build --platform
linux/amd64,linux/arm64,linux/arm/v7,linux/s390x,linux/ppc64le -t ${{
steps.prepare.outputs.ref }} --push .
- - name: clear
- if: always()
- run: |
- rm -f ${HOME}/.docker/config.json
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/release-github.yml
new/oras-1.2.3/.github/workflows/release-github.yml
--- old/oras-1.2.1/.github/workflows/release-github.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/workflows/release-github.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,39 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: release-github
-
-on:
- push:
- tags:
- - v*
-
-jobs:
- build:
- runs-on: ubuntu-latest
- permissions:
- contents: write
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: setup go environment
- uses: actions/setup-go@v5
- with:
- go-version: '1.23.4'
- - name: run goreleaser
- uses: goreleaser/goreleaser-action@v6
- with:
- version: '~> v2'
- args: release --clean
- env:
- GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/release-snap.yml
new/oras-1.2.3/.github/workflows/release-snap.yml
--- old/oras-1.2.1/.github/workflows/release-snap.yml 2024-12-05
09:41:54.000000000 +0100
+++ new/oras-1.2.3/.github/workflows/release-snap.yml 1970-01-01
01:00:00.000000000 +0100
@@ -1,64 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: release-snap
-
-on:
- workflow_dispatch:
- inputs:
- version:
- description: 'release version, like v1.2.0-beta.1'
- required: true
- isStable:
- type: boolean
- description: 'check for stable release'
- default: false
-
-jobs:
- release-snap:
- strategy:
- matrix:
- arch:
- - 'amd64'
- - 'arm64'
- - 's390x'
- runs-on: ubuntu-latest
- permissions:
- contents: read
- steps:
- - name: Checkout
- uses: actions/checkout@v4
- - name: extract version
- id: version
- run: |
- if [[ "${{ github.event.inputs.isStable }}" == "true" ]]; then
- echo "release=stable" >> $GITHUB_OUTPUT
- else
- echo "release=candidate" >> $GITHUB_OUTPUT
- fi
- echo "version=${{ github.event.inputs.version }}" >> $GITHUB_OUTPUT
- - name: make snapcraft
- run: |
- sed -i 's/{VERSION}/${{ steps.version.outputs.version }}/g'
snapcraft.yaml
- sed -i 's/{ARCH}/${{ matrix.arch }}/g' snapcraft.yaml
- cat snapcraft.yaml
- - uses: snapcore/action-build@v1
- id: build
- - uses: snapcore/action-publish@v1
- name: publish
- env:
- SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS
}}
- with:
- snap: ${{ steps.build.outputs.snap }}
- release: ${{ steps.version.outputs.release }}
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.github/workflows/stale.yml
new/oras-1.2.3/.github/workflows/stale.yml
--- old/oras-1.2.1/.github/workflows/stale.yml 2024-12-05 09:41:54.000000000
+0100
+++ new/oras-1.2.3/.github/workflows/stale.yml 1970-01-01 01:00:00.000000000
+0100
@@ -1,33 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: "Close stale issues and PRs"
-on:
- schedule:
- - cron: "30 1 * * *"
-
-jobs:
- stale:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/stale@v9
- with:
- stale-issue-message: "This issue is stale because it has been open
60 days with no activity. Remove stale label or comment or this will be closed
in 30 days."
- stale-pr-message: "This PR is stale because it has been open 45 days
with no activity. Remove stale label or comment or this will be closed in 30
days."
- close-issue-message: "This issue was closed because it has been
stalled for 30 days with no activity."
- close-pr-message: "This PR was closed because it has been stalled
for 30 days with no activity."
- days-before-issue-stale: 60
- days-before-pr-stale: 45
- days-before-issue-close: 30
- days-before-pr-close: 30
- exempt-all-milestones: true
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/.gitignore new/oras-1.2.3/.gitignore
--- old/oras-1.2.1/.gitignore 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/.gitignore 1970-01-01 01:00:00.000000000 +0100
@@ -1,60 +0,0 @@
-# Copyright The ORAS Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Binaries for programs and plugins
-*.exe
-*.exe~
-*.dll
-*.so
-*.dylib
-
-# Test binary, build with `go test -c`
-*.test
-
-# Output of the go coverage tool, specifically when used with LiteIDE
-*.out
-
-# VS Code
-.vscode
-debug
-
-# Jetbrains
-.idea
-
-# vi
-*.sw*
-
-# Custom
-coverage.txt
-test/e2e/coverage.txt
-**/covcounters.*
-**/covmeta.*
-bin/
-dist/
-*.tar.gz
-vendor/
-_dist/
-.DS_Store
-
-# Distribution storage files for local E2E testing
-test/e2e/testdata/distribution/mount/docker/
-test/e2e/testdata/distribution/mount_fallback/docker/
-
-
-# OCI Layout Files ZOT storage files for local E2E testing
-test/e2e/testdata/zot/
-!test/e2e/testdata/zot/command/images/**/*
-!test/e2e/testdata/zot/command/artifacts/**/*
-!test/e2e/testdata/zot/command/blobs/**/*
-!test/e2e/testdata/zot/config.json
-!test/e2e/testdata/zot/passwd_bcrypt
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/Dockerfile new/oras-1.2.3/Dockerfile
--- old/oras-1.2.1/Dockerfile 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/Dockerfile 2025-04-25 12:41:53.000000000 +0200
@@ -11,7 +11,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.4-alpine as
builder
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.24.2-alpine as
builder
ARG TARGETPLATFORM
RUN apk add git make
ENV ORASPKG /oras
@@ -20,7 +20,7 @@
RUN make "build-$(echo $TARGETPLATFORM | tr / -)"
RUN mv ${ORASPKG}/bin/${TARGETPLATFORM}/oras /go/bin/oras
-FROM docker.io/library/alpine:3.17.1
+FROM docker.io/library/alpine:3.21.3
RUN apk --update add ca-certificates
COPY --from=builder /go/bin/oras /bin/oras
RUN mkdir /workspace
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/oras-1.2.1/cmd/oras/internal/display/status/progress/humanize/bytes.go
new/oras-1.2.3/cmd/oras/internal/display/status/progress/humanize/bytes.go
--- old/oras-1.2.1/cmd/oras/internal/display/status/progress/humanize/bytes.go
2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/cmd/oras/internal/display/status/progress/humanize/bytes.go
2025-04-25 12:41:53.000000000 +0200
@@ -22,7 +22,7 @@
const base = 1024.0
-var units = []string{"B", "kB", "MB", "GB", "TB"}
+var units = []string{"B", "KB", "MB", "GB", "TB"}
type Bytes struct {
Size float64
@@ -46,7 +46,7 @@
// String returns the string representation of Bytes.
func (b Bytes) String() string {
- return fmt.Sprintf("%v %2s", b.Size, b.Unit)
+ return fmt.Sprintf("%g %2s", b.Size, b.Unit)
}
// RoundTo makes length of the size string to less than or equal to 4.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/oras-1.2.1/cmd/oras/internal/display/status/progress/humanize/bytes_test.go
new/oras-1.2.3/cmd/oras/internal/display/status/progress/humanize/bytes_test.go
---
old/oras-1.2.1/cmd/oras/internal/display/status/progress/humanize/bytes_test.go
2024-12-05 09:41:54.000000000 +0100
+++
new/oras-1.2.3/cmd/oras/internal/display/status/progress/humanize/bytes_test.go
2025-04-25 12:41:53.000000000 +0200
@@ -54,10 +54,10 @@
}{
{"0 bytes", args{0}, Bytes{0, "B"}},
{"1023 bytes", args{1023}, Bytes{1023, "B"}},
- {"1 kB", args{1024}, Bytes{1, "kB"}},
- {"1.5 kB", args{1024 + 512}, Bytes{1.5, "kB"}},
- {"12.5 kB", args{1024 * 12.5}, Bytes{12.5, "kB"}},
- {"512.5 kB", args{1024 * 512.5}, Bytes{513, "kB"}},
+ {"1 KB", args{1024}, Bytes{1, "KB"}},
+ {"1.5 KB", args{1024 + 512}, Bytes{1.5, "KB"}},
+ {"12.5 KB", args{1024 * 12.5}, Bytes{12.5, "KB"}},
+ {"512.5 KB", args{1024 * 512.5}, Bytes{513, "KB"}},
{"1 MB", args{1024 * 1024}, Bytes{1, "MB"}},
{"1 GB", args{1024 * 1024 * 1024}, Bytes{1, "GB"}},
{"1 TB", args{1024 * 1024 * 1024 * 1024}, Bytes{1, "TB"}},
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/cmd/oras/root/push.go
new/oras-1.2.3/cmd/oras/root/push.go
--- old/oras-1.2.1/cmd/oras/root/push.go 2024-12-05 09:41:54.000000000
+0100
+++ new/oras-1.2.3/cmd/oras/root/push.go 2025-04-25 12:41:53.000000000
+0200
@@ -224,7 +224,7 @@
copy := func(root ocispec.Descriptor) error {
// add both pull and push scope hints for dst repository
// to save potential push-scope token requests during copy
- ctx = registryutil.WithScopeHint(ctx, dst, auth.ActionPull,
auth.ActionPush)
+ ctx = registryutil.WithScopeHint(ctx, originalDst,
auth.ActionPull, auth.ActionPush)
if tag := opts.Reference; tag == "" {
err = oras.CopyGraph(ctx, union, dst, root,
copyOptions.CopyGraphOptions)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/go.mod new/oras-1.2.3/go.mod
--- old/oras-1.2.1/go.mod 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/go.mod 2025-04-25 12:41:53.000000000 +0200
@@ -1,18 +1,18 @@
module oras.land/oras
-go 1.23.1
+go 1.24.2
require (
github.com/Masterminds/sprig/v3 v3.3.0
github.com/containerd/console v1.0.4
github.com/morikuni/aec v1.0.0
github.com/opencontainers/go-digest v1.0.0
- github.com/opencontainers/image-spec v1.1.0
+ github.com/opencontainers/image-spec v1.1.1
github.com/sirupsen/logrus v1.9.3
- github.com/spf13/cobra v1.8.1
- github.com/spf13/pflag v1.0.5
- golang.org/x/sync v0.10.0
- golang.org/x/term v0.27.0
+ github.com/spf13/cobra v1.9.1
+ github.com/spf13/pflag v1.0.6
+ golang.org/x/sync v0.13.0
+ golang.org/x/term v0.31.0
gopkg.in/yaml.v3 v3.0.1
oras.land/oras-go/v2 v2.5.0
)
@@ -20,14 +20,14 @@
require (
dario.cat/mergo v1.0.1 // indirect
github.com/Masterminds/goutils v1.1.1 // indirect
- github.com/Masterminds/semver/v3 v3.3.0 // indirect
+ github.com/Masterminds/semver/v3 v3.3.1 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/huandu/xstrings v1.5.0 // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
github.com/mitchellh/copystructure v1.2.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/shopspring/decimal v1.4.0 // indirect
- github.com/spf13/cast v1.7.0 // indirect
- golang.org/x/crypto v0.26.0 // indirect
- golang.org/x/sys v0.28.0 // indirect
+ github.com/spf13/cast v1.7.1 // indirect
+ golang.org/x/crypto v0.37.0 // indirect
+ golang.org/x/sys v0.32.0 // indirect
)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/go.sum new/oras-1.2.3/go.sum
--- old/oras-1.2.1/go.sum 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/go.sum 2025-04-25 12:41:53.000000000 +0200
@@ -2,13 +2,13 @@
dario.cat/mergo v1.0.1/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
github.com/Masterminds/goutils v1.1.1
h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI=
github.com/Masterminds/goutils v1.1.1/go.mod
h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=
-github.com/Masterminds/semver/v3 v3.3.0
h1:B8LGeaivUe71a5qox1ICM/JLl0NqZSW5CHyL+hmvYS0=
-github.com/Masterminds/semver/v3 v3.3.0/go.mod
h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
+github.com/Masterminds/semver/v3 v3.3.1
h1:QtNSWtVZ3nBfk8mAOu/B6v7FMJ+NHTIgUPi7rj+4nv4=
+github.com/Masterminds/semver/v3 v3.3.1/go.mod
h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
github.com/Masterminds/sprig/v3 v3.3.0
h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs=
github.com/Masterminds/sprig/v3 v3.3.0/go.mod
h1:Zy1iXRYNqNLUolqCpL4uhk6SHUMAOSCzdgBfDb35Lz0=
github.com/containerd/console v1.0.4
h1:F2g4+oChYvBTsASRTz8NP6iIAi97J3TtSAsLbIFn4ro=
github.com/containerd/console v1.0.4/go.mod
h1:YynlIjWYF8myEu6sdkwKIvGQq+cOckRm6So2avqoYAk=
-github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod
h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
+github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod
h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
github.com/davecgh/go-spew v1.1.0/go.mod
h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/davecgh/go-spew v1.1.1
h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
github.com/davecgh/go-spew v1.1.1/go.mod
h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -34,8 +34,8 @@
github.com/morikuni/aec v1.0.0/go.mod
h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc=
github.com/opencontainers/go-digest v1.0.0
h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
github.com/opencontainers/go-digest v1.0.0/go.mod
h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
-github.com/opencontainers/image-spec v1.1.0
h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug=
-github.com/opencontainers/image-spec v1.1.0/go.mod
h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM=
+github.com/opencontainers/image-spec v1.1.1
h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
+github.com/opencontainers/image-spec v1.1.1/go.mod
h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M=
github.com/pmezard/go-difflib v1.0.0
h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
github.com/pmezard/go-difflib v1.0.0/go.mod
h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/rogpeppe/go-internal v1.9.0
h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=
@@ -45,25 +45,25 @@
github.com/shopspring/decimal v1.4.0/go.mod
h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
github.com/sirupsen/logrus v1.9.3
h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
github.com/sirupsen/logrus v1.9.3/go.mod
h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
-github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w=
-github.com/spf13/cast v1.7.0/go.mod
h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
-github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
-github.com/spf13/cobra v1.8.1/go.mod
h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
-github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
-github.com/spf13/pflag v1.0.5/go.mod
h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/cast v1.7.1 h1:cuNEagBQEHWN1FnbGEjCXL2szYEXqfJPbP2HNUaca9Y=
+github.com/spf13/cast v1.7.1/go.mod
h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
+github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo=
+github.com/spf13/cobra v1.9.1/go.mod
h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wxYW0=
+github.com/spf13/pflag v1.0.6 h1:jFzHGLGAlb3ruxLB8MhbI6A8+AQX/2eW4qeyNZXNp2o=
+github.com/spf13/pflag v1.0.6/go.mod
h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
github.com/stretchr/objx v0.1.0/go.mod
h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/testify v1.7.0
h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
github.com/stretchr/testify v1.7.0/go.mod
h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-golang.org/x/crypto v0.26.0 h1:RrRspgV4mU+YwB4FYnuBoKsUapNIL5cohGAmSH3azsw=
-golang.org/x/crypto v0.26.0/go.mod
h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
-golang.org/x/sync v0.10.0/go.mod
h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
+golang.org/x/crypto v0.37.0/go.mod
h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
+golang.org/x/sync v0.13.0 h1:AauUjRAJ9OSnvULf/ARrrVywoJDy0YS2AwQ98I37610=
+golang.org/x/sync v0.13.0/go.mod
h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q=
-golang.org/x/term v0.27.0/go.mod
h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
+golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
+golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/term v0.31.0 h1:erwDkOK1Msy6offm1mOgvspSkslFnIGsFnxOKoufg3o=
+golang.org/x/term v0.31.0/go.mod
h1:R4BeIy7D95HzImkxGkTW1UQTtP54tio2RyHz7PwK0aw=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod
h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod
h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/internal/version/version.go
new/oras-1.2.3/internal/version/version.go
--- old/oras-1.2.1/internal/version/version.go 2024-12-05 09:41:54.000000000
+0100
+++ new/oras-1.2.3/internal/version/version.go 2025-04-25 12:41:53.000000000
+0200
@@ -17,7 +17,7 @@
var (
// Version is the current version of the oras.
- Version = "1.2.1"
+ Version = "1.2.3"
// BuildMetadata is the extra build time data
BuildMetadata = "unreleased"
// GitCommit is the git sha1
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/snapcraft.yaml
new/oras-1.2.3/snapcraft.yaml
--- old/oras-1.2.1/snapcraft.yaml 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/snapcraft.yaml 2025-04-25 12:41:53.000000000 +0200
@@ -34,7 +34,7 @@
- on amd64 to {ARCH}:
- TARGET_ARCH: "{ARCH}"
build-snaps:
- - go/1.23/stable
+ - go/1.24/stable
build-packages:
- make
stage-packages:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/test/e2e/go.mod
new/oras-1.2.3/test/e2e/go.mod
--- old/oras-1.2.1/test/e2e/go.mod 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/test/e2e/go.mod 2025-04-25 12:41:53.000000000 +0200
@@ -1,12 +1,12 @@
module oras.land/oras/test/e2e
-go 1.23.1
+go 1.24.2
require (
- github.com/onsi/ginkgo/v2 v2.22.0
- github.com/onsi/gomega v1.36.0
+ github.com/onsi/ginkgo/v2 v2.23.4
+ github.com/onsi/gomega v1.37.0
github.com/opencontainers/go-digest v1.0.0
- github.com/opencontainers/image-spec v1.1.0
+ github.com/opencontainers/image-spec v1.1.1
gopkg.in/yaml.v2 v2.4.0
oras.land/oras-go/v2 v2.5.0
)
@@ -14,12 +14,13 @@
require (
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
- github.com/google/go-cmp v0.6.0 // indirect
- github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db // indirect
- golang.org/x/net v0.30.0 // indirect
- golang.org/x/sync v0.8.0 // indirect
- golang.org/x/sys v0.26.0 // indirect
- golang.org/x/text v0.19.0 // indirect
- golang.org/x/tools v0.26.0 // indirect
+ github.com/google/go-cmp v0.7.0 // indirect
+ github.com/google/pprof v0.0.0-20250423184734-337e5dd93bb4 // indirect
+ go.uber.org/automaxprocs v1.6.0 // indirect
+ golang.org/x/net v0.39.0 // indirect
+ golang.org/x/sync v0.13.0 // indirect
+ golang.org/x/sys v0.32.0 // indirect
+ golang.org/x/text v0.24.0 // indirect
+ golang.org/x/tools v0.32.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/test/e2e/go.sum
new/oras-1.2.3/test/e2e/go.sum
--- old/oras-1.2.1/test/e2e/go.sum 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/test/e2e/go.sum 2025-04-25 12:41:53.000000000 +0200
@@ -4,36 +4,45 @@
github.com/go-logr/logr v1.4.2/go.mod
h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
github.com/go-task/slim-sprig/v3 v3.0.0
h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
github.com/go-task/slim-sprig/v3 v3.0.0/go.mod
h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod
h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db
h1:097atOisP2aRj7vFgYQBbFN4U4JNXUNYpxael3UzMyo=
-github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db/go.mod
h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
-github.com/onsi/ginkgo/v2 v2.22.0
h1:Yed107/8DjTr0lKCNt7Dn8yQ6ybuDRQoMGrNFKzMfHg=
-github.com/onsi/ginkgo/v2 v2.22.0/go.mod
h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
-github.com/onsi/gomega v1.36.0 h1:Pb12RlruUtj4XUuPUqeEWc6j5DkVVVA49Uf6YLfC95Y=
-github.com/onsi/gomega v1.36.0/go.mod
h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod
h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/pprof v0.0.0-20250423184734-337e5dd93bb4
h1:gD0vax+4I+mAj+jEChEf25Ia07Jq7kYOFO5PPhAxFl4=
+github.com/google/pprof v0.0.0-20250423184734-337e5dd93bb4/go.mod
h1:5hDyRhoBCxViHszMt12TnOpEI4VVi+U8Gm9iphldiMA=
+github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
+github.com/kr/pretty v0.1.0/go.mod
h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod
h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/onsi/ginkgo/v2 v2.23.4
h1:ktYTpKJAVZnDT4VjxSbiBenUjmlL/5QkBEocaWXiQus=
+github.com/onsi/ginkgo/v2 v2.23.4/go.mod
h1:Bt66ApGPBFzHyR+JO10Zbt0Gsp4uWxu5mIOTusL46e8=
+github.com/onsi/gomega v1.37.0 h1:CdEG8g0S133B4OswTDC/5XPSzE1OeP29QOioj2PID2Y=
+github.com/onsi/gomega v1.37.0/go.mod
h1:8D9+Txp43QWKhM24yyOBEdpkzN8FvJyAwecBgsU4KU0=
github.com/opencontainers/go-digest v1.0.0
h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
github.com/opencontainers/go-digest v1.0.0/go.mod
h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
-github.com/opencontainers/image-spec v1.1.0
h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug=
-github.com/opencontainers/image-spec v1.1.0/go.mod
h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM=
+github.com/opencontainers/image-spec v1.1.1
h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
+github.com/opencontainers/image-spec v1.1.1/go.mod
h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M=
github.com/pmezard/go-difflib v1.0.0
h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
github.com/pmezard/go-difflib v1.0.0/go.mod
h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/prashantv/gostub v1.1.0
h1:BTyx3RfQjRHnUWaGF9oQos79AlQ5k8WNktv7VGvVH4g=
+github.com/prashantv/gostub v1.1.0/go.mod
h1:A5zLQHz7ieHGG7is6LLXLz7I8+3LZzsrV0P1IAHhP5U=
github.com/stretchr/testify v1.8.4
h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
github.com/stretchr/testify v1.8.4/go.mod
h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4=
-golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU=
-golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
-golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo=
-golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM=
-golang.org/x/text v0.19.0/go.mod
h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
-golang.org/x/tools v0.26.0 h1:v/60pFQmzmT9ExmjDv2gGIfi3OqfKoEP6I5+umXlbnQ=
-golang.org/x/tools v0.26.0/go.mod
h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0=
-google.golang.org/protobuf v1.35.1
h1:m3LfL6/Ca+fqnjnlqQXNpFPABW1UD7mjh8KO2mKFytA=
-google.golang.org/protobuf v1.35.1/go.mod
h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
-gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+go.uber.org/automaxprocs v1.6.0 h1:O3y2/QNTOdbF+e/dpXNNW7Rx2hZ4sTIPyybbxyNqTUs=
+go.uber.org/automaxprocs v1.6.0/go.mod
h1:ifeIMSnPZuznNm6jmdzmU3/bfk01Fe2fotchwEFJ8r8=
+golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
+golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
+golang.org/x/sync v0.13.0 h1:AauUjRAJ9OSnvULf/ARrrVywoJDy0YS2AwQ98I37610=
+golang.org/x/sync v0.13.0/go.mod
h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
+golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
+golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
+golang.org/x/text v0.24.0/go.mod
h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
+golang.org/x/tools v0.32.0 h1:Q7N1vhpkQv7ybVzLFtTjvQya2ewbwNDZzUgfXGqtMWU=
+golang.org/x/tools v0.32.0/go.mod
h1:ZxrU41P/wAbZD8EDa6dDCa6XfpkhJ7HFMjHJXfBDu8s=
+google.golang.org/protobuf v1.36.5
h1:tPhr+woSbjfYvY6/GPufUoYizxw1cF/yFoxJ2fmpwlM=
+google.golang.org/protobuf v1.36.5/go.mod
h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod
h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127
h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
+gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod
h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/oras-1.2.1/test/e2e/go.work
new/oras-1.2.3/test/e2e/go.work
--- old/oras-1.2.1/test/e2e/go.work 2024-12-05 09:41:54.000000000 +0100
+++ new/oras-1.2.3/test/e2e/go.work 2025-04-25 12:41:53.000000000 +0200
@@ -1,4 +1,4 @@
-go 1.23.1
+go 1.24.2
use (
.
++++++ oras.obsinfo ++++++
--- /var/tmp/diff_new_pack.6lY1bZ/_old 2025-04-29 16:42:18.907065822 +0200
+++ /var/tmp/diff_new_pack.6lY1bZ/_new 2025-04-29 16:42:18.911065990 +0200
@@ -1,5 +1,5 @@
name: oras
-version: 1.2.2
-mtime: 1734429080
-commit: 677529b4e7c38e3295e0883a2ee8a536e3a860f4
+version: 1.2.3
+mtime: 1745577713
+commit: 10fb4e54ba99e8df2ec29a0f14eb12e4058bb500
++++++ vendor.tar.gz ++++++
++++ 3428 lines of diff (skipped)
