Quote various strings coming from untrusted sources#2408
Merged
rhatdan merged 1 commit intocontainers:mainfrom May 13, 2024
Merged
Quote various strings coming from untrusted sources#2408rhatdan merged 1 commit intocontainers:mainfrom
rhatdan merged 1 commit intocontainers:mainfrom
Conversation
Typically, use %q instead of %s (or instead of "%s"), to expose various control characters and the like without interpreting them. This is not really comprehensive; the codebase makes no _general_ guarantee that any returned string values are free of control characters or other malicious/misleading metadata. Not even in returned "error" values (which can legitimately contain newlines, if nothing else). Signed-off-by: Miloslav Trmač <mitr@redhat.com>
mtrmac
added a commit
to mtrmac/skopeo
that referenced
this pull request
May 9, 2024
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
Collaborator
Author
|
See containers/skopeo#2325 for updated Skopeo tests. |
mtrmac
added a commit
to mtrmac/skopeo
that referenced
this pull request
May 13, 2024
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
cgwalters
approved these changes
May 13, 2024
Contributor
cgwalters
left a comment
There was a problem hiding this comment.
I glanced through this and the changes I saw looked good, but I made no attempt to check or look for places that weren't changed.
Member
|
LGTM |
Member
|
Skopeo tests need to be updated. |
Collaborator
Author
|
There is a link to an updated version above. |
mtrmac
added a commit
to mtrmac/skopeo
that referenced
this pull request
May 13, 2024
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
mtrmac
added a commit
to containers/skopeo
that referenced
this pull request
May 13, 2024
Update tests for containers/image#2408
TechIsCool
pushed a commit
to TechIsCool/skopeo
that referenced
this pull request
May 15, 2024
Signed-off-by: Miloslav Trmač <mitr@redhat.com> Signed-off-by: David Beck <david.beck@invitae.com>
mtrmac
added a commit
to mtrmac/common
that referenced
this pull request
May 22, 2024
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
TomSweeneyRedHat
added a commit
to TomSweeneyRedHat/common
that referenced
this pull request
May 22, 2024
Update the libimage/pull_test.go file, changing quote in one line Based on containers/image#2408 from @mtrmac Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
Luap99
added a commit
to grisu48/podman
that referenced
this pull request
May 23, 2024
The new c/image version is returning a slightly new error message[1] so make tests use the new one. [1] containers/image#2408 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
TomSweeneyRedHat
pushed a commit
to TomSweeneyRedHat/podman
that referenced
this pull request
May 29, 2024
The new c/image version is returning a slightly new error message[1] so make tests use the new one. [1] containers/image#2408 Signed-off-by: Paul Holzinger <pholzing@redhat.com> Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
aknuds1
pushed a commit
to grafana/mimir
that referenced
this pull request
Feb 17, 2026
…14353) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [containers/skopeo](https://redirect.github.com/containers/skopeo) | minor | `v1.15.1` → `v1.22.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>containers/skopeo (containers/skopeo)</summary> ### [`v1.22.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.22.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.21.0...v1.22.0) #### What's Changed - \[release-1.22] Skopeo v1.22.0 by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2800](https://redirect.github.com/containers/skopeo/pull/2800) - \[release-1.21] Packit: use `post-modifications` hook to update downstream TMT plan by [@​lsm5](https://redirect.github.com/lsm5) in [#​2767](https://redirect.github.com/containers/skopeo/pull/2767) **Full Changelog**: <containers/skopeo@v1.21.0...v1.22.0> ### [`v1.21.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.21.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.20.0...v1.21.0) - New support for creating "simple signing" signatures using Sequoia-PGP, dependent on a build tag that enables it - New option `skopeo copy --force-compression-format` - New option `--user-agent-prefix` - TLS options on the command line of `skopeo sync` take precedence over options in YAML This is intended to match dependencies of Podman 5.7 as closely as possible. ### [`v1.20.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.20.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.19.0...v1.20.0) #### What's Changed - Bump to c/common 0.63.0, c/image 5.35.0, Skopeo to v1.19.0, v1.20.0-dev by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2604](https://redirect.github.com/containers/skopeo/pull/2604) - docs: Add a manpage for experimental-image-proxy by [@​cgwalters](https://redirect.github.com/cgwalters) in [#​2605](https://redirect.github.com/containers/skopeo/pull/2605) - unshare: Add CAP\_SYS\_ADMIN to needed capabilities by [@​giuseppe](https://redirect.github.com/giuseppe) in [#​2616](https://redirect.github.com/containers/skopeo/pull/2616) - Don't BuildRequires: ostree-devel by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2618](https://redirect.github.com/containers/skopeo/pull/2618) - \[skip-ci] RPM: fix gating.yaml by [@​lsm5](https://redirect.github.com/lsm5) in [#​2620](https://redirect.github.com/containers/skopeo/pull/2620) - fix(deps): update module github.com/containers/common to v0.63.1 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2621](https://redirect.github.com/containers/skopeo/pull/2621) - Add --retry to test operations that tend to fail by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2609](https://redirect.github.com/containers/skopeo/pull/2609) - Add Colin Walters as a reviewer by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2615](https://redirect.github.com/containers/skopeo/pull/2615) - Improve documentation of `--authfile` by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2614](https://redirect.github.com/containers/skopeo/pull/2614) - dynamically link sqlite3 by [@​Luap99](https://redirect.github.com/Luap99) in [#​2624](https://redirect.github.com/containers/skopeo/pull/2624) - Tweak Governance and Maintainers for alignment by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2628](https://redirect.github.com/containers/skopeo/pull/2628) - Packit: disable osh-diff-scan by [@​lsm5](https://redirect.github.com/lsm5) in [#​2632](https://redirect.github.com/containers/skopeo/pull/2632) - Add conditional release-checking system test by [@​cevich](https://redirect.github.com/cevich) in [#​2631](https://redirect.github.com/containers/skopeo/pull/2631) - RPM: make bats a weak dep by [@​lsm5](https://redirect.github.com/lsm5) in [#​2626](https://redirect.github.com/containers/skopeo/pull/2626) - Fix recognizing “tag not found” in `oci:`, and add that for `oci-archive:` by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2613](https://redirect.github.com/containers/skopeo/pull/2613) - Update Neil Smith's GitHub username in MAINTAINERS.md by [@​actionmancan](https://redirect.github.com/actionmancan) in [#​2635](https://redirect.github.com/containers/skopeo/pull/2635) - Packit: disable official CentOS Stream update job by [@​lsm5](https://redirect.github.com/lsm5) in [#​2636](https://redirect.github.com/containers/skopeo/pull/2636) - Update dependency golangci/golangci-lint to v2.2.1 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2638](https://redirect.github.com/containers/skopeo/pull/2638) - Update module github.com/Masterminds/semver/v3 to v3.4.0 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2637](https://redirect.github.com/containers/skopeo/pull/2637) - Update module golang.org/x/term to v0.33.0 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2649](https://redirect.github.com/containers/skopeo/pull/2649) - Update GPG keys not to use SHA-1 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2647](https://redirect.github.com/containers/skopeo/pull/2647) - Consolidate options shared between copy and sync to sharedCopyOptions by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2648](https://redirect.github.com/containers/skopeo/pull/2648) - Update dependency golangci/golangci-lint to v2.2.2 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2651](https://redirect.github.com/containers/skopeo/pull/2651) - Update module github.com/containers/image/v5 to v5.36.0 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2653](https://redirect.github.com/containers/skopeo/pull/2653) - Update opencontainers/image-spec after [opencontainers/image-spec#1253](https://redirect.github.com/opencontainers/image-spec/pull/1253) by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2659](https://redirect.github.com/containers/skopeo/pull/2659) - Update module github.com/containers/common to v0.64.0 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2658](https://redirect.github.com/containers/skopeo/pull/2658) - Update module github.com/spf13/pflag to v1.0.7 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2657](https://redirect.github.com/containers/skopeo/pull/2657) - Prepare for `--sign-by-sq-fingerprint` by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2650](https://redirect.github.com/containers/skopeo/pull/2650) - Update dependency golangci/golangci-lint to v2.3.0 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2662](https://redirect.github.com/containers/skopeo/pull/2662) - integration: rename registry binary by [@​lsm5](https://redirect.github.com/lsm5) in [#​2661](https://redirect.github.com/containers/skopeo/pull/2661) - fix(deps): update github.com/opencontainers/image-spec digest to [`2daaaaf`](https://redirect.github.com/containers/skopeo/commit/2daaaaf) by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2664](https://redirect.github.com/containers/skopeo/pull/2664) - chore(deps): update module github.com/docker/docker to v28.3.3+incompatible \[security] by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​2665](https://redirect.github.com/containers/skopeo/pull/2665) #### New Contributors - [@​actionmancan](https://redirect.github.com/actionmancan) made their first contribution in [#​2635](https://redirect.github.com/containers/skopeo/pull/2635) **Full Changelog**: <containers/skopeo@v1.19.0...v1.20.0> ### [`v1.19.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.19.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.18.0...v1.19.0) #### What's Changed - Bump Skopeo to v1.18.0, then to v1.19.0-dev by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2516](https://redirect.github.com/containers/skopeo/pull/2516) - chore(deps): update dependency golangci/golangci-lint to v1.64.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2515](https://redirect.github.com/containers/skopeo/pull/2515) - \[skip-ci] Packit/TMT: Run gating tests by [@​lsm5](https://redirect.github.com/lsm5) in [#​1960](https://redirect.github.com/containers/skopeo/pull/1960) - chore(deps): update dependency golangci/golangci-lint to v1.64.3 by [@​renovate](https://redirect.github.com/renovate) in [#​2517](https://redirect.github.com/containers/skopeo/pull/2517) - chore(deps): update dependency golangci/golangci-lint to v1.64.4 by [@​renovate](https://redirect.github.com/renovate) in [#​2518](https://redirect.github.com/containers/skopeo/pull/2518) - chore(deps): update dependency golangci/golangci-lint to v1.64.5 by [@​renovate](https://redirect.github.com/renovate) in [#​2521](https://redirect.github.com/containers/skopeo/pull/2521) - fix(deps): update module github.com/spf13/cobra to v1.9.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2523](https://redirect.github.com/containers/skopeo/pull/2523) - fix(deps): update module github.com/containers/image/v5 to v5.34.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2528](https://redirect.github.com/containers/skopeo/pull/2528) - fix(deps): update module github.com/containers/common to v0.62.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2534](https://redirect.github.com/containers/skopeo/pull/2534) - chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.4 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2532](https://redirect.github.com/containers/skopeo/pull/2532) - chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2533](https://redirect.github.com/containers/skopeo/pull/2533) - chore(deps): update dependency golangci/golangci-lint to v1.64.6 by [@​renovate](https://redirect.github.com/renovate) in [#​2530](https://redirect.github.com/containers/skopeo/pull/2530) - fix(deps): update module github.com/opencontainers/image-spec to v1.1.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2535](https://redirect.github.com/containers/skopeo/pull/2535) - .github: remove cirrus rerun action by [@​Luap99](https://redirect.github.com/Luap99) in [#​2539](https://redirect.github.com/containers/skopeo/pull/2539) - fix(deps): update module github.com/containers/storage to v1.57.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2538](https://redirect.github.com/containers/skopeo/pull/2538) - fix(deps): update module github.com/containers/image/v5 to v5.34.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2540](https://redirect.github.com/containers/skopeo/pull/2540) - chore(deps): update dependency golangci/golangci-lint to v1.64.7 by [@​renovate](https://redirect.github.com/renovate) in [#​2544](https://redirect.github.com/containers/skopeo/pull/2544) - fix(deps): update module github.com/containers/common to v0.62.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2546](https://redirect.github.com/containers/skopeo/pull/2546) - Update to Go 1.23 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2547](https://redirect.github.com/containers/skopeo/pull/2547) - chore(deps): update module golang.org/x/net to v0.36.0 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2548](https://redirect.github.com/containers/skopeo/pull/2548) - ROADMAP: new file by [@​giuseppe](https://redirect.github.com/giuseppe) in [#​2545](https://redirect.github.com/containers/skopeo/pull/2545) - chore(deps): update dependency golangci/golangci-lint to v1.64.8 by [@​renovate](https://redirect.github.com/renovate) in [#​2550](https://redirect.github.com/containers/skopeo/pull/2550) - fix(deps): update module golang.org/x/term to v0.30.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2553](https://redirect.github.com/containers/skopeo/pull/2553) - Enforce manifest and blob digests in (skopeo inspect) and (skopeo layers) by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2527](https://redirect.github.com/containers/skopeo/pull/2527) - Transport completions by [@​yedayak](https://redirect.github.com/yedayak) in [#​2524](https://redirect.github.com/containers/skopeo/pull/2524) - Update old indirect dependencies by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2552](https://redirect.github.com/containers/skopeo/pull/2552) - Update to benefit from Go 1.23 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2551](https://redirect.github.com/containers/skopeo/pull/2551) - proxy: Add GetLayerInfoPiped by [@​cgwalters](https://redirect.github.com/cgwalters) in [#​2554](https://redirect.github.com/containers/skopeo/pull/2554) - chore(deps): update dependency containers/automation\_images to v20250324 by [@​renovate](https://redirect.github.com/renovate) in [#​2555](https://redirect.github.com/containers/skopeo/pull/2555) - chore(deps): update dependency golangci/golangci-lint to v2 by [@​renovate](https://redirect.github.com/renovate) in [#​2556](https://redirect.github.com/containers/skopeo/pull/2556) - \[skip-ci] TMT: keep PR-label independent tests by [@​lsm5](https://redirect.github.com/lsm5) in [#​2558](https://redirect.github.com/containers/skopeo/pull/2558) - chore(deps): update dependency golangci/golangci-lint to v2.0.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2557](https://redirect.github.com/containers/skopeo/pull/2557) - fix(deps): update module github.com/containers/common to v0.62.3 by [@​renovate](https://redirect.github.com/renovate) in [#​2560](https://redirect.github.com/containers/skopeo/pull/2560) - chore: fix some function names in comment by [@​luozexuan](https://redirect.github.com/luozexuan) in [#​2562](https://redirect.github.com/containers/skopeo/pull/2562) - fix(deps): update module golang.org/x/term to v0.31.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2569](https://redirect.github.com/containers/skopeo/pull/2569) - Add MAINTAINERS.md and Governance, update OWNERS by [@​mheon](https://redirect.github.com/mheon) in [#​2570](https://redirect.github.com/containers/skopeo/pull/2570) - .golangci.yml: simplify by [@​kolyshkin](https://redirect.github.com/kolyshkin) in [#​2566](https://redirect.github.com/containers/skopeo/pull/2566) - GHA: remove .github/labeler.yaml by [@​lsm5](https://redirect.github.com/lsm5) in [#​2572](https://redirect.github.com/containers/skopeo/pull/2572) - .github: check\_cirrus\_cron work around github bug by [@​Luap99](https://redirect.github.com/Luap99) in [#​2574](https://redirect.github.com/containers/skopeo/pull/2574) - chore(deps): update dependency golangci/golangci-lint to v2.1.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2578](https://redirect.github.com/containers/skopeo/pull/2578) - Add golangci-lint run --tests=false, fix found issues by [@​kolyshkin](https://redirect.github.com/kolyshkin) in [#​2565](https://redirect.github.com/containers/skopeo/pull/2565) - chore(deps): update dependency golangci/golangci-lint to v2.1.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2579](https://redirect.github.com/containers/skopeo/pull/2579) - fix(deps): update module github.com/containers/storage to v1.58.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2580](https://redirect.github.com/containers/skopeo/pull/2580) - Stop setting unused build tags by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2581](https://redirect.github.com/containers/skopeo/pull/2581) - chore(deps): update module golang.org/x/net to v0.38.0 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2583](https://redirect.github.com/containers/skopeo/pull/2583) - chore(deps): update dependency containers/automation\_images to v20250422 by [@​renovate](https://redirect.github.com/renovate) in [#​2587](https://redirect.github.com/containers/skopeo/pull/2587) - chore(deps): update dependency golangci/golangci-lint to v2.1.5 by [@​renovate](https://redirect.github.com/renovate) in [#​2588](https://redirect.github.com/containers/skopeo/pull/2588) - chore(deps): update dependency golangci/golangci-lint to v2.1.6 by [@​renovate](https://redirect.github.com/renovate) in [#​2591](https://redirect.github.com/containers/skopeo/pull/2591) - fix(deps): update module golang.org/x/term to v0.32.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2593](https://redirect.github.com/containers/skopeo/pull/2593) - \[CI:DOCS] CONTRIBUTING.md: Update communication channels by [@​lsm5](https://redirect.github.com/lsm5) in [#​2597](https://redirect.github.com/containers/skopeo/pull/2597) - \[CI:DOCS] README.md: Add badges by [@​lsm5](https://redirect.github.com/lsm5) in [#​2596](https://redirect.github.com/containers/skopeo/pull/2596) - proxy: Add GetRawBlob by [@​cgwalters](https://redirect.github.com/cgwalters) in [#​2601](https://redirect.github.com/containers/skopeo/pull/2601) - \[CI:DOCS] README.md: Add openssf passing badge by [@​lsm5](https://redirect.github.com/lsm5) in [#​2598](https://redirect.github.com/containers/skopeo/pull/2598) - \[skip-ci] Packit: set fedora-all after F40 EOL by [@​lsm5](https://redirect.github.com/lsm5) in [#​2606](https://redirect.github.com/containers/skopeo/pull/2606) - fix(deps): update module github.com/containers/image/v5 to v5.35.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2607](https://redirect.github.com/containers/skopeo/pull/2607) - fix(deps): update module github.com/containers/common to v0.63.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2608](https://redirect.github.com/containers/skopeo/pull/2608) #### New Contributors - [@​yedayak](https://redirect.github.com/yedayak) made their first contribution in [#​2524](https://redirect.github.com/containers/skopeo/pull/2524) - [@​luozexuan](https://redirect.github.com/luozexuan) made their first contribution in [#​2562](https://redirect.github.com/containers/skopeo/pull/2562) **Full Changelog**: <containers/skopeo@v1.18.0...v1.19.0> ### [`v1.18.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.18.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.17.0...v1.18.0) #### What's Changed - Bump Skopeo to v1.17.0, c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0 by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2458](https://redirect.github.com/containers/skopeo/pull/2458) - fix(deps): update module github.com/moby/sys/capability to v0.4.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2457](https://redirect.github.com/containers/skopeo/pull/2457) - chore(deps): update dependency golangci/golangci-lint to v1.62.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2454](https://redirect.github.com/containers/skopeo/pull/2454) - fix(deps): update module github.com/masterminds/semver/v3 to v3.3.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2462](https://redirect.github.com/containers/skopeo/pull/2462) - Update an expected error message by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2442](https://redirect.github.com/containers/skopeo/pull/2442) - chore(deps): update dependency golangci/golangci-lint to v1.62.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2465](https://redirect.github.com/containers/skopeo/pull/2465) - fix(deps): update module github.com/stretchr/testify to v1.10.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2464](https://redirect.github.com/containers/skopeo/pull/2464) - Packit f39 and rhel cleanups by [@​lsm5](https://redirect.github.com/lsm5) in [#​2466](https://redirect.github.com/containers/skopeo/pull/2466) - fix(deps): update golang.org/x/exp digest to [`2d47ceb`](https://redirect.github.com/containers/skopeo/commit/2d47ceb) by [@​renovate](https://redirect.github.com/renovate) in [#​2467](https://redirect.github.com/containers/skopeo/pull/2467) - Fix handling of errorShouldDisplayUsage by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2469](https://redirect.github.com/containers/skopeo/pull/2469) - fix(deps): update module golang.org/x/term to v0.27.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2471](https://redirect.github.com/containers/skopeo/pull/2471) - fix(deps): update module github.com/containers/ocicrypt to v1.2.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2475](https://redirect.github.com/containers/skopeo/pull/2475) - chore(deps): update module golang.org/x/net to v0.33.0 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2478](https://redirect.github.com/containers/skopeo/pull/2478) - fix(deps): update golang.org/x/exp digest to [`b2144cd`](https://redirect.github.com/containers/skopeo/commit/b2144cd) by [@​renovate](https://redirect.github.com/renovate) in [#​2482](https://redirect.github.com/containers/skopeo/pull/2482) - chore(deps): update dependency golangci/golangci-lint to v1.63.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2483](https://redirect.github.com/containers/skopeo/pull/2483) - chore(deps): update dependency golangci/golangci-lint to v1.63.3 by [@​renovate](https://redirect.github.com/renovate) in [#​2485](https://redirect.github.com/containers/skopeo/pull/2485) - chore(deps): update dependency golangci/golangci-lint to v1.63.4 by [@​renovate](https://redirect.github.com/renovate) in [#​2486](https://redirect.github.com/containers/skopeo/pull/2486) - fix(deps): update module golang.org/x/term to v0.28.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2487](https://redirect.github.com/containers/skopeo/pull/2487) - chore(deps): update dependency containers/automation\_images to v20250107 by [@​renovate](https://redirect.github.com/renovate) in [#​2488](https://redirect.github.com/containers/skopeo/pull/2488) - systemtest: update quay.io registry image by [@​Luap99](https://redirect.github.com/Luap99) in [#​2493](https://redirect.github.com/containers/skopeo/pull/2493) - fix(deps): update module github.com/containers/storage to v1.56.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2494](https://redirect.github.com/containers/skopeo/pull/2494) - fix(deps): update module github.com/containers/image/v5 to v5.33.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2495](https://redirect.github.com/containers/skopeo/pull/2495) - fix(deps): update module github.com/containers/common to v0.61.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2498](https://redirect.github.com/containers/skopeo/pull/2498) - feat: Add `--retry-delay` Option by [@​adambkaplan](https://redirect.github.com/adambkaplan) in [#​2500](https://redirect.github.com/containers/skopeo/pull/2500) - fix(deps): update module github.com/containers/storage to v1.57.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2506](https://redirect.github.com/containers/skopeo/pull/2506) - fix(deps): update module github.com/containers/storage to v1.57.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2507](https://redirect.github.com/containers/skopeo/pull/2507) - RPM: cleanup gobuild macro for CentOS Stream by [@​lsm5](https://redirect.github.com/lsm5) in [#​2501](https://redirect.github.com/containers/skopeo/pull/2501) - fix(deps): update module github.com/containers/image/v5 to v5.34.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2508](https://redirect.github.com/containers/skopeo/pull/2508) - fix(deps): update module github.com/spf13/pflag to v1.0.6 by [@​renovate](https://redirect.github.com/renovate) in [#​2505](https://redirect.github.com/containers/skopeo/pull/2505) - chore(deps): update dependency containers/automation\_images to v20250131 by [@​renovate](https://redirect.github.com/renovate) in [#​2510](https://redirect.github.com/containers/skopeo/pull/2510) - fix(deps): update module github.com/containers/common to v0.62.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2509](https://redirect.github.com/containers/skopeo/pull/2509) - fix(deps): update module golang.org/x/term to v0.29.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2511](https://redirect.github.com/containers/skopeo/pull/2511) - Switch to the CNCF Code of Conduct by [@​mheon](https://redirect.github.com/mheon) in [#​2513](https://redirect.github.com/containers/skopeo/pull/2513) #### New Contributors - [@​adambkaplan](https://redirect.github.com/adambkaplan) made their first contribution in [#​2500](https://redirect.github.com/containers/skopeo/pull/2500) - [@​mheon](https://redirect.github.com/mheon) made their first contribution in [#​2513](https://redirect.github.com/containers/skopeo/pull/2513) **Full Changelog**: <containers/skopeo@v1.17.0...v1.18.0> ### [`v1.17.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.17.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.16.1...v1.17.0) #### What's Changed - Bump to Skopeo v1.16.0 by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2385](https://redirect.github.com/containers/skopeo/pull/2385) - The fakeroot package doesn't exist in RHEL. by [@​jnovy](https://redirect.github.com/jnovy) in [#​2388](https://redirect.github.com/containers/skopeo/pull/2388) - fix(deps): update module golang.org/x/term to v0.23.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2390](https://redirect.github.com/containers/skopeo/pull/2390) - fix(deps): update module github.com/containers/image/v5 to v5.32.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2394](https://redirect.github.com/containers/skopeo/pull/2394) - fix(deps): update module github.com/containers/common to v0.60.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2396](https://redirect.github.com/containers/skopeo/pull/2396) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.60.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2398](https://redirect.github.com/containers/skopeo/pull/2398) - Replace egrep with grep -E by [@​lsm5](https://redirect.github.com/lsm5) in [#​2401](https://redirect.github.com/containers/skopeo/pull/2401) - fix(deps): update module github.com/containers/image/v5 to v5.32.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2403](https://redirect.github.com/containers/skopeo/pull/2403) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2404](https://redirect.github.com/containers/skopeo/pull/2404) - fix(deps): update module github.com/containers/common to v0.60.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2405](https://redirect.github.com/containers/skopeo/pull/2405) - fix(deps): update module github.com/masterminds/semver/v3 to v3.3.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2410](https://redirect.github.com/containers/skopeo/pull/2410) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 by [@​renovate](https://redirect.github.com/renovate) in [#​2407](https://redirect.github.com/containers/skopeo/pull/2407) - Update skopeo-generate-sigstore-key.1.md by [@​codespill](https://redirect.github.com/codespill) in [#​2411](https://redirect.github.com/containers/skopeo/pull/2411) - chore(deps): update dependency containers/automation\_images to v20240821 by [@​renovate](https://redirect.github.com/renovate) in [#​2412](https://redirect.github.com/containers/skopeo/pull/2412) - fix(deps): update golang.org/x/exp digest to [`9b4947d`](https://redirect.github.com/containers/skopeo/commit/9b4947d) by [@​renovate](https://redirect.github.com/renovate) in [#​2415](https://redirect.github.com/containers/skopeo/pull/2415) - Update to Go 1.22 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2417](https://redirect.github.com/containers/skopeo/pull/2417) - fix(deps): update module golang.org/x/term to v0.24.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2418](https://redirect.github.com/containers/skopeo/pull/2418) - chore(deps): update dependency golangci/golangci-lint to v1.61.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2420](https://redirect.github.com/containers/skopeo/pull/2420) - \[skip-ci] Packit: Enable sidetags for bodhi updates by [@​lsm5](https://redirect.github.com/lsm5) in [#​2421](https://redirect.github.com/containers/skopeo/pull/2421) - fix(deps): update module github.com/containers/common to v0.60.3 by [@​renovate](https://redirect.github.com/renovate) in [#​2425](https://redirect.github.com/containers/skopeo/pull/2425) - Document that zstd:chunked is downgraded to zstd when encrypting by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2427](https://redirect.github.com/containers/skopeo/pull/2427) - vendor: switch to moby/sys/capability by [@​kolyshkin](https://redirect.github.com/kolyshkin) in [#​2428](https://redirect.github.com/containers/skopeo/pull/2428) - fix(deps): update golang.org/x/exp digest to [`701f63a`](https://redirect.github.com/containers/skopeo/commit/701f63a) by [@​renovate](https://redirect.github.com/renovate) in [#​2429](https://redirect.github.com/containers/skopeo/pull/2429) - fix(deps): update module github.com/containers/common to v0.60.4 by [@​renovate](https://redirect.github.com/renovate) in [#​2430](https://redirect.github.com/containers/skopeo/pull/2430) - fix(deps): update module golang.org/x/term to v0.25.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2431](https://redirect.github.com/containers/skopeo/pull/2431) - Add support for `--digestfile` for skopeo `sync` by [@​ankitforcode](https://redirect.github.com/ankitforcode) in [#​2402](https://redirect.github.com/containers/skopeo/pull/2402) - Packit: constrain downstream koji job to fedora package by [@​lsm5](https://redirect.github.com/lsm5) in [#​2432](https://redirect.github.com/containers/skopeo/pull/2432) - chore(deps): update dependency containers/automation\_images to v20241010 by [@​renovate](https://redirect.github.com/renovate) in [#​2438](https://redirect.github.com/containers/skopeo/pull/2438) - Fix format string inconsistency causing a build failure by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2440](https://redirect.github.com/containers/skopeo/pull/2440) - fix(deps): update module github.com/containers/storage to v1.55.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2444](https://redirect.github.com/containers/skopeo/pull/2444) - fix(deps): update golang.org/x/exp digest to [`f66d83c`](https://redirect.github.com/containers/skopeo/commit/f66d83c) by [@​renovate](https://redirect.github.com/renovate) in [#​2447](https://redirect.github.com/containers/skopeo/pull/2447) - update CI images to f41 by [@​Luap99](https://redirect.github.com/Luap99) in [#​2459](https://redirect.github.com/containers/skopeo/pull/2459) - fix(deps): update module github.com/containers/image/v5 to v5.33.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2453](https://redirect.github.com/containers/skopeo/pull/2453) #### New Contributors - [@​jnovy](https://redirect.github.com/jnovy) made their first contribution in [#​2388](https://redirect.github.com/containers/skopeo/pull/2388) - [@​codespill](https://redirect.github.com/codespill) made their first contribution in [#​2411](https://redirect.github.com/containers/skopeo/pull/2411) - [@​kolyshkin](https://redirect.github.com/kolyshkin) made their first contribution in [#​2428](https://redirect.github.com/containers/skopeo/pull/2428) - [@​ankitforcode](https://redirect.github.com/ankitforcode) made their first contribution in [#​2402](https://redirect.github.com/containers/skopeo/pull/2402) **Full Changelog**: <containers/skopeo@v1.16.0...v1.17.0> ### [`v1.16.1`](https://redirect.github.com/containers/skopeo/releases/tag/v1.16.1) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.16.0...v1.16.1) - \[release-1.16] Bump Skopeo to v1.16.1, c/common to v0.60.2, c/image to v5.32.2 by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2406](https://redirect.github.com/containers/skopeo/pull/2406) **Full Changelog**: <containers/skopeo@v1.16.0...v1.16.1> ### [`v1.16.0`](https://redirect.github.com/containers/skopeo/releases/tag/v1.16.0) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.15.2...v1.16.0) #### What's Changed - Bump to v1.15.0 and then to v1.16.0-dev by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2257](https://redirect.github.com/containers/skopeo/pull/2257) - \[skip-ci] rpm: use macro supported vendoring by [@​lsm5](https://redirect.github.com/lsm5) in [#​2262](https://redirect.github.com/containers/skopeo/pull/2262) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2266](https://redirect.github.com/containers/skopeo/pull/2266) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2268](https://redirect.github.com/containers/skopeo/pull/2268) - chore(deps): update module github.com/docker/docker to v25.0.5+incompatible \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2269](https://redirect.github.com/containers/skopeo/pull/2269) - main: return different exit code when an input is not found by [@​mvo5](https://redirect.github.com/mvo5) in [#​2236](https://redirect.github.com/containers/skopeo/pull/2236) - chore(deps): update dependency containers/automation\_images to v20240320 by [@​renovate](https://redirect.github.com/renovate) in [#​2271](https://redirect.github.com/containers/skopeo/pull/2271) - \[CI:DOCS] Add golang 1.21 update warning by [@​cevich](https://redirect.github.com/cevich) in [#​2273](https://redirect.github.com/containers/skopeo/pull/2273) - fix(deps): update module github.com/containers/common to v0.58.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2275](https://redirect.github.com/containers/skopeo/pull/2275) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2276](https://redirect.github.com/containers/skopeo/pull/2276) - Freeze the fedora-minimal image reference at Fedora 38 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2280](https://redirect.github.com/containers/skopeo/pull/2280) - fix(deps): update module golang.org/x/term to v0.19.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2281](https://redirect.github.com/containers/skopeo/pull/2281) - Update to Go 1.20 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2252](https://redirect.github.com/containers/skopeo/pull/2252) - feat: add `--image-parallel-copies` flag by [@​Atry](https://redirect.github.com/Atry) in [#​2277](https://redirect.github.com/containers/skopeo/pull/2277) - \[skip-ci] Fix issue/pr lock workflow by [@​cevich](https://redirect.github.com/cevich) in [#​2289](https://redirect.github.com/containers/skopeo/pull/2289) - Hard-code the device-mapper graph driver to disabled by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2283](https://redirect.github.com/containers/skopeo/pull/2283) - fix(deps): update module github.com/containers/common to v0.58.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2300](https://redirect.github.com/containers/skopeo/pull/2300) - chore: fix function names by [@​writegr](https://redirect.github.com/writegr) in [#​2304](https://redirect.github.com/containers/skopeo/pull/2304) - Update to Go 1.21 by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2297](https://redirect.github.com/containers/skopeo/pull/2297) - chore(deps): update module golang.org/x/net to v0.23.0 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2306](https://redirect.github.com/containers/skopeo/pull/2306) - Center logo in README.md by [@​tur11ng](https://redirect.github.com/tur11ng) in [#​2302](https://redirect.github.com/containers/skopeo/pull/2302) - CI VMs: bump to new versions with tmpfs /tmp by [@​edsantiago](https://redirect.github.com/edsantiago) in [#​2308](https://redirect.github.com/containers/skopeo/pull/2308) - fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f by [@​renovate](https://redirect.github.com/renovate) in [#​2313](https://redirect.github.com/containers/skopeo/pull/2313) - fix summaries for `standalone-sign` and `standalone-verify` by [@​ktdreyer](https://redirect.github.com/ktdreyer) in [#​2315](https://redirect.github.com/containers/skopeo/pull/2315) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.58.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2316](https://redirect.github.com/containers/skopeo/pull/2316) - fix(deps): update module golang.org/x/term to v0.20.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2318](https://redirect.github.com/containers/skopeo/pull/2318) - Packit c10s by [@​lsm5](https://redirect.github.com/lsm5) in [#​2312](https://redirect.github.com/containers/skopeo/pull/2312) - Add info on Skopeo image to README.md by [@​TomSweeneyRedHat](https://redirect.github.com/TomSweeneyRedHat) in [#​2317](https://redirect.github.com/containers/skopeo/pull/2317) - fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842 by [@​renovate](https://redirect.github.com/renovate) in [#​2319](https://redirect.github.com/containers/skopeo/pull/2319) - \[skip-ci] RPM: bats requirement only on Fedora by [@​lsm5](https://redirect.github.com/lsm5) in [#​2320](https://redirect.github.com/containers/skopeo/pull/2320) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2321](https://redirect.github.com/containers/skopeo/pull/2321) - hack: Support picking cc and cpp via environment variables. by [@​graywolf](https://redirect.github.com/graywolf) in [#​2322](https://redirect.github.com/containers/skopeo/pull/2322) - fix(deps): update module github.com/containers/common to v0.58.3 by [@​renovate](https://redirect.github.com/renovate) in [#​2324](https://redirect.github.com/containers/skopeo/pull/2324) - Update tests for [containers/image#2408](https://redirect.github.com/containers/image/pull/2408) by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2325](https://redirect.github.com/containers/skopeo/pull/2325) - fix(deps): update module github.com/containers/image/v5 to v5.31.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2334](https://redirect.github.com/containers/skopeo/pull/2334) - Stop using the exclude\_graphdriver\_devicemapper build tag by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2335](https://redirect.github.com/containers/skopeo/pull/2335) - fix(deps): update module github.com/containers/common to v0.59.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2336](https://redirect.github.com/containers/skopeo/pull/2336) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.59.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2333](https://redirect.github.com/containers/skopeo/pull/2333) - \[skip-ci] Packit: `packages: [skopeo-fedora]` for podman-next jobs by [@​lsm5](https://redirect.github.com/lsm5) in [#​2327](https://redirect.github.com/containers/skopeo/pull/2327) - Don't offer the tarball: transport in completions by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2339](https://redirect.github.com/containers/skopeo/pull/2339) - CI: bump VMs by [@​edsantiago](https://redirect.github.com/edsantiago) in [#​2342](https://redirect.github.com/containers/skopeo/pull/2342) - fix(deps): update golang.org/x/exp digest to [`fd00a4e`](https://redirect.github.com/containers/skopeo/commit/fd00a4e) by [@​renovate](https://redirect.github.com/renovate) in [#​2345](https://redirect.github.com/containers/skopeo/pull/2345) - Execute cross-build task using PW pool by [@​cevich](https://redirect.github.com/cevich) in [#​2344](https://redirect.github.com/containers/skopeo/pull/2344) - fix(deps): update module github.com/containers/common to v0.59.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2347](https://redirect.github.com/containers/skopeo/pull/2347) - fix(deps): update module golang.org/x/term to v0.21.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2348](https://redirect.github.com/containers/skopeo/pull/2348) - \[CI:DOCS] Update dependency golangci/golangci-lint to v1.59.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2352](https://redirect.github.com/containers/skopeo/pull/2352) - Refer to registry.k8s.io instead of k8s.gcr.io by [@​mtrmac](https://redirect.github.com/mtrmac) in [#​2356](https://redirect.github.com/containers/skopeo/pull/2356) - fix(deps): update module github.com/spf13/cobra to v1.8.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2355](https://redirect.github.com/containers/skopeo/pull/2355) - fix(deps): update module github.com/containers/image/v5 to v5.31.1 by [@​renovate](https://redirect.github.com/renovate) in [#​2363](https://redirect.github.com/containers/skopeo/pull/2363) - Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 by [@​dependabot](https://redirect.github.com/dependabot) in [#​2366](https://redirect.github.com/containers/skopeo/pull/2366) - fix(deps): update golang.org/x/exp digest to [`7f521ea`](https://redirect.github.com/containers/skopeo/commit/7f521ea) by [@​renovate](https://redirect.github.com/renovate) in [#​2372](https://redirect.github.com/containers/skopeo/pull/2372) - fix(deps): update module github.com/containers/ocicrypt to v1.2.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2373](https://redirect.github.com/containers/skopeo/pull/2373) - fix(deps): update module golang.org/x/term to v0.22.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2374](https://redirect.github.com/containers/skopeo/pull/2374) - \[skip-ci] RPM: spec file cleanup by [@​lsm5](https://redirect.github.com/lsm5) in [#​2375](https://redirect.github.com/containers/skopeo/pull/2375) - fix(deps): update module github.com/containers/common to v0.59.2 by [@​renovate](https://redirect.github.com/renovate) in [#​2379](https://redirect.github.com/containers/skopeo/pull/2379) - chore(deps): update module google.golang.org/grpc to v1.64.1 \[security] by [@​renovate](https://redirect.github.com/renovate) in [#​2382](https://redirect.github.com/containers/skopeo/pull/2382) - fix(deps): update module github.com/containers/storage to v1.55.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2384](https://redirect.github.com/containers/skopeo/pull/2384) - fix(deps): update module github.com/containers/image/v5 to v5.32.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2383](https://redirect.github.com/containers/skopeo/pull/2383) - fix(deps): update module github.com/containers/common to v0.60.0 by [@​renovate](https://redirect.github.com/renovate) in [#​2386](https://redirect.github.com/containers/skopeo/pull/2386) #### New Contributors - [@​mvo5](https://redirect.github.com/mvo5) made their first contribution in [#​2236](https://redirect.github.com/containers/skopeo/pull/2236) - [@​Atry](https://redirect.github.com/Atry) made their first contribution in [#​2277](https://redirect.github.com/containers/skopeo/pull/2277) - [@​writegr](https://redirect.github.com/writegr) made their first contribution in [#​2304](https://redirect.github.com/containers/skopeo/pull/2304) - [@​tur11ng](https://redirect.github.com/tur11ng) made their first contribution in [#​2302](https://redirect.github.com/containers/skopeo/pull/2302) - [@​ktdreyer](https://redirect.github.com/ktdreyer) made their first contribution in [#​2315](https://redirect.github.com/containers/skopeo/pull/2315) - [@​graywolf](https://redirect.github.com/graywolf) made their first contribution in [#​2322](https://redirect.github.com/containers/skopeo/pull/2322) **Full Changelog**: <containers/skopeo@v1.15.0...v1.16.0> ### [`v1.15.2`](https://redirect.github.com/containers/skopeo/releases/tag/v1.15.2) [Compare Source](https://redirect.github.com/containers/skopeo/compare/v1.15.1...v1.15.2) Fixes an interoperability issue while listing tags from JFrog Artifactory. </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- ## Need help? You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section. <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My45LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInVwZGF0ZS1taW5vciJdfQ==--> <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Low Risk** > Simple dependency version bump in the build image; risk is limited to potential changes in `skopeo` behavior affecting image build/publish workflows. > > **Overview** > Updates the `mimir-build-image` Docker build tooling by bumping the embedded `containers/skopeo` version used in the image from `v1.15.1` to `v1.22.0` (via the `SKOPEO_VERSION` env var and git-clone build step). > > <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit e1188ca. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup> <!-- /CURSOR_SUMMARY --> Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com> Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Typically, use
%qinstead of%s(or instead of"%s"), to expose various control characters and the like without interpreting them.This is not really comprehensive; the codebase makes no general guarantee that any returned string values are free of control characters or other malicious/misleading metadata. Not even in returned "error" values (which can legitimately contain newlines, if nothing else).
A side effect of the code audit required by CVE-2024-3727 .