v2.20.0

What's Changed

• build(deps): bump github.com/ProtonMail/go-crypto from 1.0.0 to 1.1.2 by @dependabot in #391

Full Changelog: v2.19.2...v2.20.0

v2.19.2

What's Changed

• build(deps): bump github.com/sigstore/sigstore from 1.8.8 to 1.8.9 by @dependabot in #385
• ci: bump golangci-lint to v1.61 by @tri-adam in #386
• build(deps): bump github.com/sigstore/sigstore from 1.8.9 to 1.8.10 by @dependabot in #387

Full Changelog: v2.19.1...v2.19.2

v2.19.1

What's Changed

• chore: bump golangci-lint to v1.60 by @tri-adam in #383
• fix: correct the range check for descriptor IDs by @tri-adam in #384

Full Changelog: v2.19.0...v2.19.1

v2.19.0

This release drops support for Go 1.21.

What's Changed

• build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #378
• build(deps): bump github.com/sebdah/goldie/v2 from 2.5.3 to 2.5.5 by @dependabot in #379
• build(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #380
• chore: bump module to Go 1.22 by @tri-adam in #382
• build(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.8 by @dependabot in #381

Full Changelog: v2.18.0...v2.19.0

v2.18.0

What's Changed

• docs: update links to Go docs by @tri-adam in #375
• refactor: improve compaction logic by @tri-adam in #373
• build(deps): bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in #376
• feat: add DeleteObjects by @tri-adam in #374

Full Changelog: v2.17.1...v2.18.0

v2.17.1

What's Changed

• refactor: use DSSE wrappers from sigstore by @tri-adam in #366
• ci: add testing against Go 1.23 RC by @tri-adam in #368

Full Changelog: v2.17.0...v2.17.1

v2.17.0

This release adds support for updating the digest of an OCI blob within a SIF.

Specifically, the following API has been added:

• func (*FileImage) SetOCIBlobDigest: updates the digest of the OCI blob object with id to h, according to opts.

What's Changed

• chore: bump golangci-lint to v1.57 by @tri-adam in #357
• build(deps): bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3 by @dependabot in #358
• build(deps): bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 by @dependabot in #359
• ci: bump golangci-lint to v1.59 by @tri-adam in #360
• ci: update to use goreleaser v2 by @tri-adam in #361
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #362
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #363
• refactor: split add/del/set code into files by @tri-adam in #364
• feat: add SetOCIBlobDigest by @tri-adam in #365

Full Changelog: v2.16.0...v2.17.0

v2.16.0

This release drops support for Go 1.20.

What's Changed

• build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in #355
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #356
• chore: bump module Go version to 1.21 by @tri-adam in #351

Full Changelog: v2.15.2...v2.16.0

v2.15.2

What's Changed

• ci: start testing against Go 1.22-rc by @tri-adam in #340
• build(deps): bump github.com/sigstore/sigstore from 1.7.6 to 1.8.0 by @dependabot in #342
• build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in #343
• build(deps): bump github.com/sigstore/sigstore from 1.8.0 to 1.8.1 by @dependabot in #344
• build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #348
• build(deps): bump github.com/google/go-containerregistry from 0.17.0 to 0.19.0 by @dependabot in #349
• build(deps): bump github.com/ProtonMail/go-crypto from 0.0.0-20230923063757-afb1ddc0824c to 1.0.0 by @dependabot in #345
• ci: bump golangci-lint to v1.56 by @tri-adam in #350
• fix: remove unused params in function literals by @tri-adam in #352
• ci: test against Go 1.22 by @tri-adam in #353
• build(deps): bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 by @dependabot in #354

Full Changelog: v2.15.1...v2.15.2

v2.15.1

What's Changed

• build(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 by @dependabot in #329
• build(deps): bump github.com/sigstore/sigstore from 1.7.3 to 1.7.4 by @dependabot in #330
• build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 by @dependabot in #331
• build(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in #332
• build(deps): bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 by @dependabot in #333
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #334
• build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #335
• build(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 by @dependabot in #336
• build(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #337
• build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0 by @dependabot in #338
• build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.7.0 to 0.8.0 by @dependabot in #339
• build(deps): bump github.com/ProtonMail/go-crypto by @tri-adam in #341

Full Changelog: v2.15.0...v2.15.1