Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.31%. Comparing base (307c21e) to head (40530fe).
⚠️ Report is 4 commits behind head on main.

@@           Coverage Diff           @@
##             main    #1839   +/-   ##
=======================================
  Coverage   85.31%   85.31%           
=======================================
  Files         143      143           
  Lines        6742     6742           
=======================================
  Hits         5752     5752           
  Misses        703      703           
  Partials      287      287           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

We just need to keep the detailed commits since v1.3.0-rc.2.

Since this is a minor version update, we need the change log summary from v1.2.0 instead of v1.2.3.

We can put the Feature Stability Updates section after the Experimental Features section but before the Deprecations section.

Updated draft release notes:

Draft Release Notes

New Features

• Comply with OCI distribution-spec v1.1.1
• Show OS and architecture in oras version
• Add alias oras manifest get for oras manifest fetch

Preview Features

• Improve tree view in oras discover
  • Display annotations by default
  • Colorize tree view 🌈
• BREAKING CHANGE Remove the global --no-tty flag
  • The --no-tty flag remains available for TTY-capable commands

Experimental Features

• Introduce portable backup and restore of OCI artifacts, images, and repositories
  • oras backup: New command to back up artifacts from remote registries into local OCI image layouts, either as directories or tar archives.
  • oras restore: New command to restore artifacts from local OCI image layouts (directories or tar archives) back to remote registries.
• Introduce multi-arch image/artifact management
  • Add the oras manifest index command set to manage OCI image index manifests
    • oras manifest index create to create a new index from existing manifests
    • oras manifest index update to update an existing index manifest
  • Add --artifact-platform to oras push to push artifacts with platform information
• Refine the output of oras discover
  • BREAKING CHANGE Rename the manifests field to referrers
  • Add subject manifest details to the json format
  • Display referrers recursively by default; control maximum depth with --depth
• Add --format to oras repo ls and oras repo tags with text, json, and go-template
• Support fully qualified references for OCI image layout via --oci-layout-path

Feature Stability Updates

• Promote the following commands and flags from Preview to Stable:
  • oras attach
  • oras attach --platform
  • oras pull --include-subject
• Promote oras resolve from Experimental to Preview

Deprecations

• -v, --verbose is marked as deprecated for all commands; verbose output is enabled by default
• The table option for the --format flag in oras discover is marked as deprecated

Bug Fixes

• Fix oras tag should not create referrers tags #1436: oras tag creates referrers tags unexpectedly
• Fix When I execute an oras push, the scope that calls the get service token loses the push, only the pull #1599: Auth token scope not correctly added when using --debug or --no-tty with oras push
• Fix fix(ux): show KB in progress bar instead of kB #1623: Should show KB instead of kB in the progress bar
• Fix progress bar missing when copying artifact with zero-length layer from registry to OCI layout #1442: invalid progress bar shown for empty layers
• Fix reference in the formatted output of oras pull is invalid #1494: invalid reference in the formatted output of oras pull
• Fix Can't download an OCI package twice if package contains symbolic links #1593: unable to download an artifact twice if it contains symbolic links
• Fix Resursively copying a multi-plarform image might fail when the index manifest has no referrer #1728: oras cp now correctly copies the root index when the index has no referrers
• Fix Redundant blanks when pulling an image #1795, Redundant blanks when back up an image to local #1825: redundant blank lines in terminal output

Other Changes

• Add support for the loong64 architecture
• Upgrade to Go 1.25.0
• Enhance UX:
  • Improve diagnostic experience through --debug logs
  • Improve error messages
• Improve documentation
• Update dependencies
• Minor security enhancements

Detailed Commits

• bump: tag and release ORAS CLI v1.2.0 by @qweeah in bump: tag and release ORAS CLI v1.2.0 #1393
• build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 #1399
• chore: Remove deprecated Print method by @TerryHowe in chore: Remove deprecated Print method #1398
• chore: Remove unused file by @TerryHowe in chore: Remove unused file #1395
• chore: Update goreleaser to v6 and configuration to v2 by @TerryHowe in chore: Update goreleaser to v6 and configuration to v2 #1402
• refactor: Move printer to output package by @TerryHowe in refactor: Move printer to output package #1394
• Update links in README.md by @bcho in Update links in README.md #1408
• refactor: Clean up pull handlers by @TerryHowe in refactor: Clean up pull handlers #1407
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot[bot] in build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 #1410
• refactor: Move verbose into printer object by @TerryHowe in refactor: Move verbose into printer object #1406
• refactor: clean status prompts by @qweeah in refactor: clean status prompts #1409
• chore: Add format type text by @TerryHowe in chore: Add format type text #1397
• chore: Increase print test coverage by @TerryHowe in chore: Increase print test coverage #1411
• refactor: Move descriptor logic to descriptor by @TerryHowe in refactor: Move descriptor logic to descriptor #1413
• chore: Ignore e2e test go sum file by @TerryHowe in chore: Ignore e2e test go sum file #1416
• refactor: Move generate content key method to descriptor by @TerryHowe in refactor: Move generate content key method to descriptor #1415
• refactor: Move two output functions to the output package by @TerryHowe in refactor: Move two output functions to the output package #1417
• fix(doc): resolve example error for oras tag by @qweeah in fix(doc): resolve example error for oras tag #1419
• build(ci): set codecov CLI version to avoid tokenless upload failure by @qweeah in build(ci): set codecov CLI version to avoid tokenless upload failure #1421
• refactor: Pass printer to text handler by @TerryHowe in refactor: Pass printer to text handler #1420
• refactor: Use printer object for output by @TerryHowe in refactor: Use printer object for output #1426
• chore: Add json test coverage by @TerryHowe in chore: Add json test coverage #1425
• fix: Minor spelling error in test by @TerryHowe in fix: Minor spelling error in test #1429
• refactor: assembles printer in the common output option by @qweeah in refactor: assembles printer in the common output option #1428
• refactor: Handle stderr similar to stdout by @TerryHowe in refactor: Handle stderr similar to stdout #1427
• refactor: reduce printer instantiation & unify stdout/stderr usage by @qweeah in refactor: reduce printer instantiation & unify stdout/stderr usage #1433
• build(ci): unset codecov CLI version by @qweeah in build(ci): unset codecov CLI version #1434
• fix: disable oras tag fallback to tag schema when tagging a referrer by @njucjc in fix: disable oras tag fallback to tag schema when tagging a referrer #1435
• refactor: Create tag handlers by @TerryHowe in refactor: Create tag handlers #1437
• chore: Remove last deprecated method by @TerryHowe in chore: Remove last deprecated method #1438
• refactor: add display handler for cp, tag and manifest push by @qweeah in refactor: add display handler for cp, tag and manifest push #1439
• chore(ux): improve error message when attaching without subject artifact by @qweeah in chore(ux): improve error message when attaching without subject artifact  #1430
• build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 #1440
• refactor: Move channel write logic to manager by @TerryHowe in refactor: Move channel write logic to manager #1445
• fix: variable name conflicts with built in function by @TerryHowe in fix: variable name conflicts with built in function #1448
• refactor: Isolate progress channel in Messenger by @TerryHowe in refactor: Isolate progress channel in Messenger #1447
• refactor: Take private memory store out of test function by @TerryHowe in refactor: Take private memory store out of test function #1453
• chore: Bring back the print error by @TerryHowe in chore: Bring back the print error #1451
• fix: A couple small fixes to the descriptor test by @TerryHowe in fix: A couple small fixes to the descriptor test #1452
• refactor: Create text copy handler by @TerryHowe in refactor: Create text copy handler #1441
• refactor: replace error-ignored cobra output functions by @qweeah in refactor: replace error-ignored cobra output functions #1454
• build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.0 in /test/e2e #1458
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 in /test/e2e #1462
• feature: Add manifest fetch documentation for digest by @TerryHowe in feature: Add manifest fetch documentation for digest #1465
• fix: oras repo tags exlude-digest-tags documentation by @TerryHowe in fix: oras repo tags exlude-digest-tags documentation #1467
• fix: Mention the resolve command in manifest fetch help by @TerryHowe in fix: Mention the resolve command in manifest fetch help #1466
• refactor: increase test coverage for mac for tty tests by @TerryHowe in refactor: increase test coverage for mac for tty tests #1460
• refactor: Move testutils to general location by @TerryHowe in refactor: Move testutils to general location #1459
• refactor: Make mock fetcher generally available by @TerryHowe in refactor: Make mock fetcher generally available #1455
• build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 #1468
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 in /test/e2e #1471
• build(deps): bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.22.0 to 0.23.0 #1470
• refactor: Successor getting with separation of concerns by @TerryHowe in refactor: Successor getting with separation of concerns #1443
• refactor: DRY up text_test by @TerryHowe in refactor: DRY up text_test #1473
• docs: fix typo in help text of 'attach' command by @nmiyake in docs: fix typo in help text of 'attach' command #1477
• chore: lint fixes for new lint by @TerryHowe in chore: lint fixes for new lint #1478
• chore: reset test coverage package list by @qweeah in chore: reset test coverage package list #1482
• refactor: remove build constraint from testutils console by @TerryHowe in refactor: remove build constraint from testutils console #1480
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.1 in /test/e2e #1486
• fix: copy prompt skipped was missing by @TerryHowe in fix: copy prompt skipped was missing #1484
• build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2 in /test/e2e #1489
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 in /test/e2e #1488
• build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @dependabot[bot] in build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 #1491
• build: upgrade to Go 1.23.0 by @Wwwsylvia in build: upgrade to Go 1.23.0 #1493
• build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 #1495
• feat: create index from existing manifests (index create) by @wangxiaoxuan273 in feat: create index from existing manifests (index create) #1475
• fix: reference in the formatted output of oras pull is invalid by @wangxiaoxuan273 in fix: reference in the formatted output of oras pull is invalid #1496
• docs: add examples for --format by @wangxiaoxuan273 in docs: add examples for --format #1497
• docs: improve the description of cp by @wangxiaoxuan273 in docs: improve the description of cp #1498
• feat: --output for oras manifest index create by @wangxiaoxuan273 in feat: --output for oras manifest index create #1490
• feature: build binary for OS and arch by default by @TerryHowe in feature: build binary for OS and arch by default #1487
• feat: update existing index (index update) by @wangxiaoxuan273 in feat: update existing index (index update) #1476
• feat: --output for oras manifest index update by @wangxiaoxuan273 in feat: --output for oras manifest index update #1502
• feat: --annotation for index create by @wangxiaoxuan273 in feat: --annotation for index create #1499
• fix: Rename copy function to avoid built in collision by @TerryHowe in fix: Rename copy function to avoid built in collision #1510
• refactor: create an interface for status console by @TerryHowe in refactor: create an interface for status console #1481
• build(deps): bump golang.org/x/term from 0.24.0 to 0.25.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.24.0 to 0.25.0 #1512
• fix: document pushing files with colon in name by @TerryHowe in fix: document pushing files with colon in name #1508
• fix: update --add should add plain descriptor by @wangxiaoxuan273 in fix: update --add should add plain descriptor #1513
• feat: add platform option to push command by @TerryHowe in feat: add platform option to push command #1500
• chore: remove unneeded parse method by @TerryHowe in chore: remove unneeded parse method #1515
• fix: platform config type by @TerryHowe in fix: platform config type #1518
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0 in /test/e2e #1522
• build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.0 in /test/e2e #1521
• build(deps): bump github.com/onsi/gomega from 1.35.0 to 1.35.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.35.0 to 1.35.1 in /test/e2e #1523
• feat(cmd/cp): add oci-layout-path flag by @mauriciovasquezbernal in feat(cmd/cp): add oci-layout-path flag #1507
• fix: force config media type when setting platform by @qweeah in fix: force config media type when setting platform #1519
• chore: Add e2e test for platform push and pull by @TerryHowe in chore: Add e2e test for platform push and pull #1520
• build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 #1527
• build(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 #1526
• fix(cp): avoid showing empty descriptor in progress bar by @qweeah in fix(cp): avoid showing empty descriptor in progress bar #1528
• refactor: status, metadata and content handlers for manifest index commands by @wangxiaoxuan273 in refactor: status, metadata and content handlers for manifest index commands #1509
• chore(e2e): set go bin path by @qweeah in chore(e2e): set go bin path #1530
• docs: Improve ORAS diagnose experience by @FeynmanZhou in docs: Improve ORAS diagnose experience #1483
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 in /test/e2e #1532
• build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0 in /test/e2e #1546
• fix(ut,windows): exclude pty build in Windows tests by @qweeah in fix(ut,windows): exclude pty build in Windows tests #1541
• fix(ut): fix flaky console tests by @qweeah in fix(ut): fix flaky console tests #1544
• fix!: downgrade the global verbose flag by @Wwwsylvia in fix!: downgrade the global verbose flag #1553
• feat: add OS/Arch information into oras version by @wangxiaoxuan273 in feat: add OS/Arch information into oras version #1556
• chore: add Shiwei's GPG key by @shizhMSFT in chore: add Shiwei's GPG key #1561
• refactor: create tty copy handler by @TerryHowe in refactor: create tty copy handler #1485
• docs: add experimental mark for examples by @qweeah in docs: add experimental mark for examples #1569
• build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 #1566
• build(deps): bump golang.org/x/term from 0.26.0 to 0.27.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.26.0 to 0.27.0 #1565
• refactor: mark --verbose as deprecated by @Wwwsylvia in refactor: mark --verbose as deprecated #1558
• feat: improve the format of --debug logs by @Wwwsylvia in feat: improve the format of --debug logs #1559
• build(deps): bump golang and dependencies by @qweeah in build(deps): bump golang and dependencies #1572
• bump: tag and release ORAS CLI v1.3.0-beta.1 by @qweeah in bump: tag and release ORAS CLI v1.3.0-beta.1 #1577
• build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.1 in /test/e2e #1580
• fix: handle errors returned by Close() in write paths by @wangxiaoxuan273 in fix: handle errors returned by Close() in write paths #1581
• refactor: add metadata render interface and apply it to oras attach command by @wangxiaoxuan273 in refactor: add metadata render interface and apply it to oras attach command #1578
• build(deps): bump golang.org/x/crypto from 0.26.0 to 0.31.0 by @dependabot[bot] in build(deps): bump golang.org/x/crypto from 0.26.0 to 0.31.0 #1585
• chore: clean metadata handler for attach command by @qweeah in chore: clean metadata handler for attach command #1584
• refactor: apply metadata render interface to oras push command by @wangxiaoxuan273 in refactor: apply metadata render interface to oras push command #1583
• refactor: add handlers to manifest push commmand by @wangxiaoxuan273 in refactor: add handlers to manifest push commmand #1555
• chore: add lint make file target by @TerryHowe in chore: add lint make file target #1586
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 in /test/e2e #1596
• build(deps): bump github.com/onsi/gomega from 1.36.1 to 1.36.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.36.1 to 1.36.2 in /test/e2e #1598
• fix: add digest to fetched status output of manifest index create by @wangxiaoxuan273 in fix: add digest to fetched status output of manifest index create #1579
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 in /test/e2e #1601
• build(deps): bump golang.org/x/term from 0.27.0 to 0.28.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.27.0 to 0.28.0 #1603
• docs: add Sylvia Lei as a maintainer by @shizhMSFT in docs: add Sylvia Lei as a maintainer #1604
• fix: scope action only has pull when get service token in executing cmd org push by @Wwwsylvia in fix: scope action only has pull when get service token in executing cmd org push #1608
• fix: mark --oci-layout-path as experimental by @Horiodino in fix: mark --oci-layout-path as experimental #1607
• docs: update the help doc for --oci-layout-path by @Wwwsylvia in docs: update the help doc for --oci-layout-path #1609
• refactor: apply metadata render interface to oras discover command by @wangxiaoxuan273 in refactor: apply metadata render interface to oras discover command #1605
• refactor: apply metadata render interface to oras pull command by @wangxiaoxuan273 in refactor: apply metadata render interface to oras pull command #1587
• build(deps): bump golang.org/x/term from 0.28.0 to 0.29.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.28.0 to 0.29.0 #1615
• build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 #1614
• refactor: apply metadata render interface to index commands by @wangxiaoxuan273 in refactor: apply metadata render interface to index commands #1606
• build(deps): bump apache/skywalking-eyes from 0.6.0 to 0.7.0 by @dependabot[bot] in build(deps): bump apache/skywalking-eyes from 0.6.0 to 0.7.0 #1617
• chore: add SVG file to license checker ignoring list by @FeynmanZhou in chore: add SVG file to license checker ignoring list #1620
• fix(ux): show KB in progress bar instead of kB by @qweeah in fix(ux): show KB in progress bar instead of kB #1623
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot[bot] in build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 #1622
• refactor: improve metadata handler of oras cp by @wangxiaoxuan273 in refactor: improve metadata handler of oras cp #1624
• refactor(progress): generic progress tracking by @shizhMSFT in refactor(progress): generic progress tracking #1524
• docs: add an enhancement proposal doc template by @FeynmanZhou in docs: add an enhancement proposal doc template #1621
• build: upgrade to Go 1.24.0 by @Wwwsylvia in build: upgrade to Go 1.24.0 #1629
• fix: bump oras-go to the latest commit which fixes the symlink issue by @Wwwsylvia in fix: bump oras-go to the latest commit which fixes the symlink issue #1628
• refactor: use handlers for oras blob push command by @wangxiaoxuan273 in refactor: use handlers for oras blob push command #1618
• refactor: add resolve metadata handler by @wangxiaoxuan273 in refactor: add resolve metadata handler #1631
• refactor: add blob delete metadata handler by @wangxiaoxuan273 in refactor: add blob delete metadata handler #1632
• fix: fix errors in manifest index examples by @wangxiaoxuan273 in fix: fix errors in manifest index examples #1634
• refactor: add manifest delete metadata handler by @wangxiaoxuan273 in refactor: add manifest delete metadata handler #1633
• bump: tag and release ORAS CLI v1.3.0-beta.2 by @Wwwsylvia in bump: tag and release ORAS CLI v1.3.0-beta.2 #1635
• refactor: use iter for cleaner code by @shizhMSFT in refactor: use iter for cleaner code #1637
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 in /test/e2e #1643
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 by @dependabot[bot] in build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 #1642
• docs: add goreportcard to README by @TerryHowe in docs: add goreportcard to README #1641
• build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 #1645
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 in /test/e2e #1647
• build(deps): bump golang.org/x/term from 0.29.0 to 0.30.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.29.0 to 0.30.0 #1646
• feat: add alias for manifest fetch by @wangxiaoxuan273 in feat: add alias for manifest fetch #1644
• refactor: split a run and main function so defers Execute by @chrisguitarguy in refactor: split a run and main function so defers Execute #1658
• build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in /test/e2e by @dependabot[bot] in build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in /test/e2e #1655
• docs(spec): multi-arch image management by @FeynmanZhou in docs(spec): multi-arch image management #1514
• refactor: deprecate table format by @wangxiaoxuan273 in refactor: deprecate table format #1656
• fix: bring back --verbose flag by @wangxiaoxuan273 in fix: bring back --verbose flag #1660
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.1 in /test/e2e #1662
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.1 to 2.23.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.1 to 2.23.2 in /test/e2e #1663
• fix: target NewReadonlyTarget comment by @TerryHowe in fix: target NewReadonlyTarget comment #1665
• build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 in /test/e2e #1667
• docs: improve formatted output for oras discover by @FeynmanZhou in docs: improve formatted output for oras discover #1625
• feat!: refine oras discover JSON format by @wangxiaoxuan273 in feat!: refine oras discover JSON format #1649
• build(deps): upgrade go crypto module to v0.36.0 by @kysucix in build(deps): upgrade go crypto module to v0.36.0 #1671
• feat!: support showing indirect referrers for all formats of oras discover by @wangxiaoxuan273 in feat!: support showing indirect referrers for all formats of oras discover #1653
• fix: Change receiver name for target by @TerryHowe in fix: Change receiver name for target #1666
• fix: use test Setenv during tests by @TerryHowe in fix: use test Setenv during tests #1675
• fix: staticcheck fails for embedded member by @TerryHowe in fix: staticcheck fails for embedded member #1676
• fix: unneeded error check by @TerryHowe in fix: unneeded error check #1680
• fix: staticcheck lint failures of embedded member by @TerryHowe in fix: staticcheck lint failures of embedded member #1679
• build(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 in /test/e2e #1685
• fix: blob file close handling for lint by @TerryHowe in fix: blob file close handling for lint #1687
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 in /test/e2e #1690
• build(deps): bump golang.org/x/term from 0.30.0 to 0.31.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.30.0 to 0.31.0 #1692
• build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 #1691
• fix: explicitly ignore return for newest lint by @TerryHowe in fix: explicitly ignore return for newest lint #1683
• docs: update the help doc for oras manifest index create by @RohanMishra315 in docs: update the help doc for oras manifest index create #1650
• feat: show annotations in default discovery output by @Horiodino in feat: show annotations in default discovery output #1602
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /test/e2e by @dependabot[bot] in build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /test/e2e #1697
• docs: update help doc for oras manifest index update by @wangxiaoxuan273 in docs: update help doc for oras manifest index update #1698
• build(deps): bump oras-go to the latest commit which fixes the "compare and swap" error by @Wwwsylvia in build(deps): bump oras-go to the latest commit which fixes the "compare and swap" error #1702
• build(go): upgrade go version to 1.24.2 by @Wwwsylvia in build(go): upgrade go version to 1.24.2 #1703
• refactor: move --no-tty out of option.Common by @wangxiaoxuan273 in refactor: move --no-tty out of option.Common #1699
• bump: tag and release ORAS CLI v1.3.0-beta.3 by @Wwwsylvia in bump: tag and release ORAS CLI v1.3.0-beta.3 #1705
• build: use alpine 3.21.3 by @Wwwsylvia in build: use alpine 3.21.3 #1709
• Add test coverage for discover handler by @TerryHowe in Add test coverage for discover handler #1712
• build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 #1720
• build(deps): bump golang.org/x/term from 0.31.0 to 0.32.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.31.0 to 0.32.0 #1721
• fix: packer decode json lint failure by @TerryHowe in fix: packer decode json lint failure #1688
• build(deps): bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 in /test/e2e by @dependabot[bot] in build(deps): bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 in /test/e2e #1724
• build(deps): bump oras.land/oras-go/v2 from 2.5.1-0.20250417082913-f7a6126986d9 to 2.6.0 by @dependabot[bot] in build(deps): bump oras.land/oras-go/v2 from 2.5.1-0.20250417082913-f7a6126986d9 to 2.6.0 #1725
• fix: discover handler errors for lint by @TerryHowe in fix: discover handler errors for lint #1677
• fix: calls to close in tests unchecked for lint by @TerryHowe in fix: calls to close in tests unchecked for lint #1678
• refactor: move different targets to different files by @TerryHowe in refactor: move different targets to different files #1722
• fix: Change receiver name for Remote by @TerryHowe in fix: Change receiver name for Remote #1727
• refactor(perf): optimize cases with no child referrers in recursiveCopy by @qweeah in refactor(perf): optimize cases with no child referrers in recursiveCopy #1729
• fix: lint explicitly ignore various close errors by @TerryHowe in fix: lint explicitly ignore various close errors #1684
• fix: rename interfaces file by @TerryHowe in fix: rename interfaces file #1730
• refactor: rename Target AnnotatedReference method by @TerryHowe in refactor: rename Target AnnotatedReference method #1726
• fix(docs): remove a discover example with -v by @Wwwsylvia in fix(docs): remove a discover example with -v #1742
• fix(lint): ignore returns from test defer calls by @TerryHowe in fix(lint): ignore returns from test defer calls #1734
• fix: discover json format should show referrers field when no referrer is found by @wangxiaoxuan273 in fix: discover json format should show referrers field when no referrer is found #1731
• build(deps): bump github.com/containerd/console from 1.0.4 to 1.0.5 by @dependabot[bot] in build(deps): bump github.com/containerd/console from 1.0.4 to 1.0.5 #1743
• fix: replace slave var for child by @TerryHowe in fix: replace slave var for child #1736
• fix: rename slave to child for cp test by @TerryHowe in fix: rename slave to child for cp test #1738
• docs(spec): artifactType in multi-platform index manifests by @apparentlymart in docs(spec): artifactType in multi-platform index manifests #1696
• docs: add examples for oci-layout-path by @wangxiaoxuan273 in docs: add examples for oci-layout-path #1746
• build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 #1750
• feat: oras manifest index: artifactType for index and child manifest descriptors by @apparentlymart in feat: oras manifest index: artifactType for index and child manifest descriptors #1700
• feat: support --format for oras repo tags by @Wwwsylvia in feat: support --format for oras repo tags #1756
• fix: resolve golangci-lint issues with unchecked error returns and embedded field access by @copilot in fix: resolve golangci-lint issues with unchecked error returns and embedded field access #1755
• build(deps): bump golangci/golangci-lint-action from 6 to 8 by @dependabot[bot] in build(deps): bump golangci/golangci-lint-action from 6 to 8 #1717
• ci: add dependabot support for Dockerfile by @tanyabhatnagar in ci: add dependabot support for Dockerfile #1761
• build(deps): bump library/golang from 1.24.2-alpine to 1.24.4-alpine by @dependabot[bot] in build(deps): bump library/golang from 1.24.2-alpine to 1.24.4-alpine #1764
• build(deps): bump library/alpine from 3.21.3 to 3.22.0 by @dependabot[bot] in build(deps): bump library/alpine from 3.21.3 to 3.22.0 #1765
• docs: backup and restore specification by @TerryHowe in docs: backup and restore specification #1610
• docs(spec): define output formats for oras repo commands by @Wwwsylvia in docs(spec): define output formats for oras repo commands #1763
• feat: support --format for oras repo ls by @Wwwsylvia in feat: support --format for oras repo ls #1758
• fix(tests): fix packer test that failed on Windows by @Wwwsylvia in fix(tests): fix packer test that failed on Windows #1774
• docs: backup and restore to single OCI layout by @TerryHowe in docs: backup and restore to single OCI layout #1775
• test: exclude incompatible test Go OSes by @TerryHowe in test: exclude incompatible test Go OSes #1779
• refactor: ApplyFlags with prefix for Remote and Target by @TerryHowe in refactor: ApplyFlags with prefix for Remote and Target #1733
• build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 #1781
• build(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 #1780
• feat: show repo tags with --oci-layout-path in repo tags command by @wangxiaoxuan273 in feat: show repo tags with --oci-layout-path in repo tags command #1759
• chore(ux): improve copy error message by @Wwwsylvia in chore(ux): improve copy error message #1773
• build(deps): bump library/golang from 1.24.4-alpine to 1.24.5-alpine by @dependabot[bot] in build(deps): bump library/golang from 1.24.4-alpine to 1.24.5-alpine #1782
• fix: oras cp should copy root index when the index has no referrers by @wangxiaoxuan273 in fix: oras cp should copy root index when the index has no referrers #1749
• build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 #1785
• build(deps): bump library/alpine from 3.22.0 to 3.22.1 by @dependabot[bot] in build(deps): bump library/alpine from 3.22.0 to 3.22.1 #1786
• build: release loong64 by @amazingfate in build: release loong64 #1787
• docs: add scenario doc for Backup and Restore of OCI Artifacts and Images by @FeynmanZhou in docs: add scenario doc for Backup and Restore of OCI Artifacts and Images #1778
• docs: enrich the CLI design of oras backup and oras restore by @FeynmanZhou in docs: enrich the CLI design of oras backup and oras restore #1767
• feat: oras backup to backup artifacts to a directory or a tar by @Wwwsylvia in feat: oras backup to backup artifacts to a directory or a tar #1790
• build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 in /test/e2e #1789
• feat: add oras restore command by @Wwwsylvia in feat: add oras restore command #1792
• build(go): upgrade go version and dependencies by @Wwwsylvia in build(go): upgrade go version and dependencies #1796
• bump: tag and release ORAS CLI v1.3.0-beta.4 by @Wwwsylvia in bump: tag and release ORAS CLI v1.3.0-beta.4 #1799
• build(deps): bump library/golang from 1.24.5-alpine to 1.24.6-alpine by @dependabot[bot] in build(deps): bump library/golang from 1.24.5-alpine to 1.24.6-alpine #1804
• build(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 by @dependabot[bot] in build(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 #1800
• chore: add Sylvia's GPG key by @Wwwsylvia in chore: add Sylvia's GPG key #1806
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in build(deps): bump actions/checkout from 4 to 5 #1814
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.24.0 in /test/e2e #1816
• build(go): upgrade to Go 1.25.0 by @Wwwsylvia in build(go): upgrade to Go 1.25.0 #1817
• chore: mark --platform flag of oras attach from preview to stable by @wangxiaoxuan273 in chore: mark --platform flag of oras attach from preview to stable #1822
• chore: mark oras resolve from experimental to preview by @wangxiaoxuan273 in chore: mark oras resolve from experimental to preview #1823
• chore: remove [Preview] label on --include-subject for oras pull by @Wwwsylvia in chore: remove [Preview] label on --include-subject for oras pull #1821
• chore(ux): remove [Preview] label for oras attach by @Wwwsylvia in chore(ux): remove [Preview] label for oras attach #1824
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.24.0 to 2.25.0 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.24.0 to 2.25.0 in /test/e2e #1826
• fix: improve tty UX to avoid redundant blank by @wangxiaoxuan273 in fix: improve tty UX to avoid redundant blank #1827
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.0 to 2.25.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.0 to 2.25.1 in /test/e2e #1828
• build(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.1 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.1 in /test/e2e #1829
• bump: tag and release ORAS CLI v1.3.0-rc.1 by @Wwwsylvia in bump: tag and release ORAS CLI v1.3.0-rc.1 #1830
• chore(ux): update colors for oras discover tree view by @Wwwsylvia in chore(ux): update colors for oras discover tree view #1832
• chore(ux): improve oras backup error message by @Wwwsylvia in chore(ux): improve oras backup error message #1833
• bump: tag and release ORAS CLI v1.3.0-rc.2 by @Wwwsylvia in bump: tag and release ORAS CLI v1.3.0-rc.2 #1834
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.2 in /test/e2e #1836
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 #1837

New Contributors

• @bcho made their first contribution in Update links in README.md #1408
• @njucjc made their first contribution in fix: disable oras tag fallback to tag schema when tagging a referrer #1435
• @nmiyake made their first contribution in docs: fix typo in help text of 'attach' command #1477
• @mauriciovasquezbernal made their first contribution in feat(cmd/cp): add oci-layout-path flag #1507
• @Horiodino made their first contribution in fix: mark --oci-layout-path as experimental #1607
• @chrisguitarguy made their first contribution in refactor: split a run and main function so defers Execute #1658
• @kysucix made their first contribution in build(deps): upgrade go crypto module to v0.36.0 #1671
• @RohanMishra315 made their first contribution in docs: update the help doc for oras manifest index create #1650
• @apparentlymart made their first contribution in docs(spec): artifactType in multi-platform index manifests #1696
• @copilot made their first contribution in fix: resolve golangci-lint issues with unchecked error returns and embedded field access #1755
• @tanyabhatnagar made their first contribution in ci: add dependabot support for Dockerfile #1761
• @amazingfate made their first contribution in build: release loong64 #1787

Full Changelog: v1.2.0...v1.3.0

What's Changed Since RC.2

• bump: tag and release ORAS CLI v1.3.0-rc.2 by @Wwwsylvia in bump: tag and release ORAS CLI v1.3.0-rc.2 #1834
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.2 in /test/e2e by @dependabot[bot] in build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.2 in /test/e2e #1836
• build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 #1837

Full Changelog: v1.3.0-rc.2...v1.3.0