0.5.1

• fixes:
  • check for gcr.io as domain, as well as for .gcr.io as domain suffix (PR #110)
  • corrected logic for setting GCR refresher, to allow using public GCR without authentication (PR #109)
• upgrades:
  • Go 1.21.6
  • latest Ubuntu 22.04 and Alpine 3.18
  • Skopeo 1.14.1
  • misc. lib upgrades for remediation of CVEs in dependencies
• pre-built binaries for a few architectures are now also provided with each release; however, except for linux_amd64 provided as untested! (#101)

0.5.0

• changed behavior: tag pruning no longer removes verbatim tags
• support public ECR repos (issue #60)
• allow digests in tags (issue #86)
• use provided credentials with GCR (PR #92)
• support latest count limit for tag sets (issue #96)
• restart on config file change and receiving SIGHUP (issue #98)
• upgrades:
  • Go 1.20.2
  • latest Ubuntu 22.04 and Alpine 3.17
  • Skopeo 1.11.2

0.4.5

• upgrades:
  • Go 1.20.1
  • latest Ubuntu 22.04 and Alpine 3.17
  • Skopeo 1.11.1
  • misc. lib upgrades for CVE remediation

0.4.4

• use Metadata-Flavor header when checking for Google metadata server (pr #82)
• upgrades:
  • Go 1.18.8
  • latest Ubuntu 22.04 (remediates CVE-2022-3602 and CVE-2022-3786)
  • Alpine 3.16
  • Skopeo 1.9.3

0.4.3

• support for pruning filtered tag sets (issue #72, alpha feature)
• added -run option for filtering tasks to run (issue #59)
• support for platform selection when syncing from multi-platform images (issue #43, alpha feature)
• raised default Docker API version to 1.41
• adjusted build to also work on MacOS+M1
• remediation of CVEs in dependencies:
  • Improper Input Validation in GoGo Protobuf
  • containerd CRI plugin: Insecure handling of image volumes
  • containerd CRI plugin: Host memory exhaustion through ExecSync
• upgrades:
  • Go 1.18
  • Ubuntu 22.04 and Alpine 3.15
  • Skopeo 1.8.0 (own build)

0.4.2

• CVE remediations:
  • OCI Manifest Type Confusion Issue
  • Ambiguous OCI manifest parsing
  • Clarify mediaType handling
  • Insufficiently restricted permissions on plugin directories
• upgrades:
  • switched to Go 1.17
  • Ubuntu 20.04 and Alpine 3.14 to latest container images
• fixes:
  • building on non-Linux platforms (issue #61)

0.4.1

• CVE remediations:
  • CVE-2020-26160, github.com/dgrijalva/jwt-go
  • GHSA-c72p-9xmj-rx3w, github.com/containerd/containerd
• upgrades:
  • Skopeo to 1.3.1 (Alpine) & 1.3.0 (Ubuntu)
  • Alpine to 3.14.0
  • Ubuntu 20.04 to latest container image

0.4.0

• support for image matching (issue #16, alpha feature)
• tag filtering with semver and regex (issue #22, alpha feature)
• support token based authentication for Google Artifact Registry (issue #51)
• doc updates & corrections

0.3.6

• added container image based on Ubuntu 20.04 (issue #47)

0.3.5

• upgraded to Alpine 3.13.1 & Skopeo 1.2.1 (issue #29)