Skip to content

Releases: open-component-model/ocm

v0.16.0

16 Oct 09:04
Compare
Choose a tag to compare

Release v0.16.0

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see open-component-model/ocm-project#293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue.

  • Support standard object types for command plugins + options for templater types (#958)
  • feat: add function to satisfy accessMethodView interface (#955)
  • CLI: fix recursive mode for ocm hash component (#954)
  • OCI: prefer digest over tag (#953)
  • fix: docker registry returning internal server error on blobs not found (#950)
  • fix + doc for VerifyResourceDigest (#946)
  • Adjust verify digest again (#945)
  • Add a simpler digest verify function (#943)
  • [chore] fix: publish release (#940)
  • Fix/publish release (#939)
  • feat: replace docker with oras (#904)
  • feat: add gav matching and overwritable mediatype for file types (#932)
  • fix: some weird maven repositories do return bad index-of listings (#938)
  • Release process documentation (#931)
  • some fixes and alignments (#934)
  • Update CODEOWNERS (#933)
  • fix busy text file during plugin installation (#929)
  • Custom Unmarshaler for Consumer Identity (#927)
  • Documentation: `If the option ...` (#928)
  • feat: automatically label all issues with ipcei (#923)

🐛 Bug Fixes

  • [chore]: release-notes-url isn't supported by wingetcreate v1.6.1.0 (#948)
  • [chore]: Install wingetcreate (#942)

⬆️ Dependencies

5 changes
  • chore(deps): bump the ci group across 1 directory with 3 updates (#957)
  • Bump the go group with 7 updates (#941)
  • Bump the go group with 9 updates (#936)
  • Bump the go group with 13 updates (#925)
  • Bump DeterminateSystems/nix-installer-action from 13 to 14 in the ci group (#926)

v0.15.0

13 Sep 15:04
Compare
Choose a tag to compare

Release v0.15.0

  • Update check_diff_action.yaml (#924)
  • fix: default component download link (#920)
  • extend signing list component descriptors (#922)
  • small change to test github actions (#921)
  • feat: remove deprecated code - v2 (#919)
  • move identity packages into tech packages (#914)
  • mega fix for new selector handling + accessor interface alignment + tests (#918)
  • chore: fixup validate usage context passage (#912)
  • fix: runner caching code that it uses (#917)
  • Revert "feat: remove deprecated functions" (#916)
  • feat: remove deprecated functions (#915)
  • chore: nightly build (#903)
  • docu: remove some command crosslinks (#895)
  • Add cv parameter to walking step function (#909)
  • release branch creation workflow (#899)
  • Add utilities for ocm controllers (#898)
  • Chore: setup-go@v4 does caching automatically (#908)
  • chore: publish latest release to different package registries (#897)
  • fix npm input (#900)
  • feedback from migrating a project (#907)
  • access method ocm (#896)
  • annotate oci layers with component information (#882)
  • align package names with folder names (#906)
  • add extended description and remove archlinux (#901)
  • chore: always create a new release branch and delete all old ones during new release action (#894)
  • chore: change release notes template, auto label PRs, ... (#893)

🚀 Features

  • Resource resolution on CD set (#865)

⬆️ Dependencies

4 changes
  • Bump the go group with 10 updates (#910)
  • Bump the go group with 11 updates (#905)
  • Bump the go group with 7 updates (#892)
  • Bump anchore/sbom-action from 0.17.1 to 0.17.2 in the ci group (#891)

v0.14.0

23 Aug 12:22
Compare
Choose a tag to compare

Release v0.14.0

  • move migrate tooling to 'hack' folder (#889)
  • feat: add npm input type (#886)
  • Validate method for oci/ocm repository specs (#866)
  • add public GPG key that can be used for signing (#884)
  • disable manual/secondary caching (#885)
  • Add linux packages to goreleaser (#888)
  • raise alpine version (#883)
  • fix: typo + missing bin directory (#880)
  • Verify/markdown (#871)
  • Bump the go group with 16 updates (#878)
  • more path mappings (#877)
  • ignore status error for reading pubsub config (#873)
  • introduce optional repository interface for resolvers (#867)
  • Bump anchore/sbom-action from 0.17.0 to 0.17.1 in the ci group (#875)
  • fix cli docu generation (#876)
  • Adjust workflow: check diff (#874)
  • Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 in the ci group (#868)
  • Bump the go group with 15 updates (#870)
  • Package restructuring (#784)

v0.13.0

05 Aug 13:17
Compare
Choose a tag to compare

Release v0.13.0

  • fix goreleaser (#863)
  • feat: add check for diffs after go mod tidy and generate (#861)
  • Typo (#860)
  • Bump the go group across 1 directory with 26 updates (#854)
  • feat: remove GetInexpensiveContentVersionIdentity (#845)
  • Bump the ci group across 1 directory with 5 updates (#853)
  • add changes for multi-arch (#851)
  • Bump github.com/docker/docker from 27.0.1+incompatible to 27.1.0+incompatible in the go_modules group (#857)
  • Improve errors (#850)
  • rework selectors (#858)
  • Rework adding elements to a component version (#844)
  • Add AUR as installation option for OCM-CLI (#855)
  • extension point for pub/sub support (#832)
  • cleanup json schemes (#840)
  • Exchange Algorithm constant in polymorphic handler method (#852)
  • forward error message from OCI registry (#848)

This is the last release using the module name github.com/open-component-model/ocm. The next releases
will use the new module name ocm.software/ocm. Additionally the package structure of the new module will change.
You can use the migration script provided by the next release to migrate your project to the new module and structure.

v0.12.0

19 Jul 14:38
Compare
Choose a tag to compare

Release v0.12.0

  • Extend version regexp to support semver (#834)
  • fix broken links (#837)
  • fix duplicate command argument for plugin command execution (#831)
  • fix plugin error propagation (#830)
  • rework source info access for plugin clients (#829)
  • Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in the go_modules group (#827)
  • Support for CLI Extensions by OCM Plugins (#815)
  • Bump github.com/docker/docker from 26.1.4+incompatible to 27.0.0+incompatible (#817)
  • cleanup unused (#828)
  • close() writer, before trying to rename (#824)
  • enhance the auto update of the flake vendor hash (#826)
  • Bump the go group with 7 updates (#825)
  • Update README.md (#822)
  • fix open-component-model/ocm-project#196 (#819)
  • Bump the go group with 8 updates (#816)
  • Fix make cmds (#810)
  • Adjust action (#813)
  • adjust github action definition (#811)
  • restruct blobaccess (#804)
  • auto update `flake.nix` vendor hash incl. singed commit (#809)
  • Simplify Pull Request Template (#808)

v0.11.0

10 Jun 10:49
Compare
Choose a tag to compare

Changelog

  • 72f033b (redo)Only re-encode subst value if it smells like json and target doc is yaml (#796)
  • 0c499cf Bump anchore/sbom-action from 0.15.11 to 0.16.0 in the ci group (#777)
  • 165edcc Bump github.com/cloudflare/cfssl from 0.0.0-20180223231731-4e2dcbde5004 to 1.6.5 (#787)
  • 89b6e96 Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 in the go group (#786)
  • 87aa342 Bump goreleaser/goreleaser-action from 5 to 6 in the ci group (#802)
  • b835e96 Bump the go group with 11 updates (#778)
  • 9b01bca Bump the go group with 14 updates (#805)
  • de16944 Bump the go group with 15 updates (#770)
  • ee356cd Flake.nix (#795)
  • 509ba89 Follow Up To Maven Access (#781)
  • 93412ff Maven/access2 (#731)
  • c02802f Release v0.11.0
  • d1ab90d ReleaseNotes for v0.11.0
  • 01f0e6f Revert "Bump goreleaser/goreleaser-action from 5 to 6 in the ci group… (#806)
  • 70f1588 Update version file to 0.11.0-dev
  • 93c6bad Vault tests (#749)
  • 2f02322 add workflow for updateVendorHash of flake (#789)
  • 5d36b1e early CD validation for AddVersion (#779)
  • 84b9231 extract optionutils + fix new usages of moved packages (#775)
  • e76ec98 finally at least be able to sign commits (#800)
  • 4f6c9eb fix maven issues (#790)
  • 6fa92aa fix maven uploader and rename mavenArtifact to mavenPackage (#799)
  • 075c42e fix pss signing server signing (#774)
  • a8a2781 fix update-vendor-hash (#791)
  • 1ba6e56 fix updateVendorHash (#793)
  • 55c022c fix: make sure that format of replacement matches file format (#773)
  • ab463b2 fix: only have yaml out put on stdout if dryrun is enabled (#780)
  • c29184f fix: use sync.OnceFunc instead of the struct package local value (#772)
  • d16f64b goutils refactoring (#803)
  • 7f814d5 let's create PRs instead of direct commits (#792)
  • edaf5ea remove SPDX Header (#776)
  • 862458c sonatype nexus - quirks modes (#782)
  • 49a79ea update github.com/mandelsoft/logging
  • 16f5552 update release notes (#807)
  • ba23b9f utility function to get module name (#783)
  • 7a913dc various fixes/improvements for tests and paths to prepare migration (#788)

v0.10.0

17 May 14:09
Compare
Choose a tag to compare

Release v0.10.0

  • externalize general go utilities in packages pkg{errors,exceptions,generics,finalizer} (#761)
  • Bump the go group with 12 updates (#768)
  • feat: add silent flag and fix dry run with prerequisites (#767)
  • let's get rid of reuse PendingDeprecationWarning (#765)
  • fix: stop ignoring most of the errors (#745)
  • feat: add uninstall command to the controller (#766)
  • Create codeql.yml (#764)
  • Npm/auth access (#757)
  • Bump the go group with 7 updates (#763)
  • Bump the ci group with 2 updates (#762)
  • Fix ocm issue 179, block in config yields invalid yaml (#734)
  • add cleanup to action for self hosted runner (#760)
  • add negative test for non-semver version (#759)
  • Don't Panik! (#758)
  • Bump the go group with 3 updates (#751)
  • Bump github.com/fluxcd/cli-utils from 0.36.0-flux.6 to 0.36.0-flux.7 (#752)

v0.9.0

26 Apr 14:35
Compare
Choose a tag to compare

Release v0.9.0

  • normalize order of used component lister results (#750)
  • eliminate dep from demo plugin to cli (#746)
  • Bump the go group across 1 directory with 3 updates (#748)
  • Bump github.com/fluxcd/cli-utils from 0.36.0-flux.5 to 0.36.0-flux.6 (#737)
  • change wording (#747)
  • Bump github.com/docker/cli from 25.0.5+incompatible to 26.1.0+incompatible (#743)
  • Bump github.com/docker/docker from 25.0.5+incompatible to 26.1.0+incompatible (#744)
  • eliminate lib to cli dependencies (#741)
  • enable http registries as ocm repositories (#676)
  • Rework object finalization (#703)
  • fix: do not create a new resource manager client (#742)
  • fix: remove all personal information from tests (#740)
  • incorporate VERSION file if built without make (#732)
  • Wget doc (#739)
  • add documentation for wget access (#733)
  • Bump the go group with 27 updates (#729)
  • Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 (#722)
  • Bump the ci group with 2 updates (#723)
  • fast version list command (#728)
  • fix issue with create tempfile on MS Windows (#726)
  • modify add sources doc (#727)
  • align ca-cert opts + remove relation constraints for inputs (#725)
  • add metadata for hyperspace (#719)
  • readonly mode configurable for CVs (#711)
  • spec normalization for OCI based OCM repository spec (#710)
  • Bump the go_modules group group with 3 updates (#707)
  • Bump the ci group with 3 updates (#713)
  • remove docs that are available in the spec (#715)
  • change to compopnent constrcutor file name (#712)
  • Fix repository cache (#705)
  • let's add a `user` within Docker (#704)
  • follow Docker official images recommendation (#699)
  • support for github enterprise urls (#698)

v0.8.0

08 Mar 16:10
Compare
Choose a tag to compare

Release v0.8.0

  • use app token in release (#692)
  • Bump the ci group with 1 update (#686)
  • Bump the go_modules group group with 2 updates (#689)
  • Bump helm.sh/helm/v3 from 3.12.2 to 3.14.1 (#659)
  • MIT LICENSE for npm publish gist (#684)
  • cli: verify digests (#681)
  • fix transfer OCI index (#683)
  • Bump the ci group with 1 update (#678)
  • remove second trigger and just keep pull_request_target (#682)
  • Bump the go group with 35 updates (#679)
  • component version check as lib function (#675)
  • Wget access method (#630)

v0.7.0

23 Feb 17:40
Compare
Choose a tag to compare

Release v0.7.0

  • parse and validate some input parameters as filesystem-paths (#669)
  • Reference Hint Check fixed + alignment of configure function (#672)
  • Npm/config (#653)
  • fix cd copy + rsa-pss-signingserver (#670)
  • let's run only, where we have API key available (#667)
  • Bump the ci group with 2 updates (#663)
  • Bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.19 (#635)
  • make use of windows-driver-letter fix (#666)
  • fix field name for srcRefs (#651)
  • Check Command to check completeness of a component version graph (#644)
  • signing support for rsa-pss (#640)
  • default config handlers (#660)
  • add epic (#654)
  • Bump the ci group with 6 updates (#641)
  • Fix/npm publish (#650)
  • publish npm packages (#636)
  • switch to preferred new $defs (#536)
  • Make ocm flake.nix ready (#625)
  • Bump the ci group with 2 updates (#631)
  • Filter Option for Transferring OCI Index Artifacts (#620)
  • Bump github.com/cloudflare/circl from 1.3.5 to 1.3.7 (#622)
  • fix tour01 docu (#623)
  • add PR target (#624)
  • Extended Tour Documentation (#614)