v0.14

What's Changed

• chore(deps): bump step-security/harden-runner from 2.9.1 to 2.10.1 by @dependabot in #351
• chore(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @dependabot in #352
• chore(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @dependabot in #359
• chore(deps): bump github/codeql-action from 3.26.7 to 3.26.9 by @dependabot in #358
• chore(deps): bump github.com/docker/cli from 27.2.1+incompatible to 27.3.1+incompatible by @dependabot in #357
• chore(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #366
• chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 by @dependabot in #364
• chore(deps): bump github/codeql-action from 3.26.9 to 3.26.12 by @dependabot in #363
• Make the number of repository fetched at once configurable to handle large registries by @JRBANCEL in #353
• chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #370
• chore(deps): bump github/codeql-action from 3.26.12 to 3.27.0 by @dependabot in #369
• chore(deps): bump actions/dependency-review-action from 4.3.4 to 4.3.5 by @dependabot in #368
• CSSC - Defaulting tag-convention to incremental by @Ruchii-27 in #373

New Contributors

• @JRBANCEL made their first contribution in #353

Full Changelog: v0.13...v0.14

v0.13

What's Changed

• chore(deps): bump github/codeql-action from 3.25.13 to 3.26.0 by @dependabot in #335
• chore(deps): bump actions/upload-artifact from 4.3.4 to 4.3.6 by @dependabot in #334
• chore(deps): bump step-security/harden-runner from 2.9.0 to 2.9.1 by @dependabot in #333
• chore(deps): bump github.com/dlclark/regexp2 from 1.11.2 to 1.11.4 by @dependabot in #332
• chore(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #327
• chore(deps): bump github/codeql-action from 3.26.0 to 3.26.1 by @dependabot in #337
• Change filtertimeout var from uint64 to int64 by @estebanreyl in #348
• Add @Ruchii-27 to Codeowners by @estebanreyl in #349
• chore(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #346
• chore(deps): bump github/codeql-action from 3.26.1 to 3.26.6 by @dependabot in #345
• chore(deps): bump github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible by @dependabot in #330
• chore(deps): bump github.com/docker/cli from 26.1.4+incompatible to 27.2.1+incompatible by @dependabot in #350
• feat: cssc patch command enhanced to support incremental patch tags by @Ruchii-27 in #347

New Contributors

• @estebanreyl made their first contribution in #348

Full Changelog: v0.12...v0.13

v0.12

What's Changed

• chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #311
• chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #308
• chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #310
• chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #314
• chore(deps): bump github.com/dlclark/regexp2 from 1.11.0 to 1.11.1 by @dependabot in #317
• chore(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #316
• Add annotate command by @radhadpatel22 in #266
• chore(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 by @dependabot in #322
• chore(deps): bump github.com/dlclark/regexp2 from 1.11.1 to 1.11.2 by @dependabot in #321
• chore(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #320
• chore(deps): bump actions/dependency-review-action from 4.3.3 to 4.3.4 by @dependabot in #319
• chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #318
• chore(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #323

New Contributors

• @radhadpatel22 made their first contribution in #266

Full Changelog: v0.11...v0.12

v0.11

What's Changed

• chore(deps): bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #306
• chore(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @dependabot in #305
• chore(deps): bump github.com/docker/cli from 26.1.3+incompatible to 26.1.4+incompatible by @dependabot in #304
• feat: Updated cssc patch command by @Ruchii-27 in #307

Full Changelog: v0.10...v0.11

v0.10

What's Changed

• Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #216
• Bump actions/dependency-review-action from 3.1.2 to 3.1.3 by @dependabot in #225
• Bump step-security/harden-runner from 2.6.0 to 2.6.1 by @dependabot in #226
• chore: update to golang 1.21 by @northtyphoon in #223
• chore(deps): bump actions/dependency-review-action from 3.1.3 to 3.1.4 by @dependabot in #227
• chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #228
• chore(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #229
• chore(deps): bump golang.org/x/crypto from 0.6.0 to 0.17.0 by @dependabot in #231
• chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in #230
• chore(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @dependabot in #233
• chore(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @dependabot in #237
• chore(deps): bump actions/upload-artifact from 4.0.0 to 4.2.0 by @dependabot in #236
• chore(deps): bump actions/upload-artifact from 4.2.0 to 4.3.1 by @dependabot in #246
• chore(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #240
• chore(deps): bump step-security/harden-runner from 2.6.1 to 2.7.0 by @dependabot in #243
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.4 by @dependabot in #274
• chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #265
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 by @dependabot in #272
• chore(deps): bump oss/go/microsoft/golang from 1.21-fips-cbl-mariner2.0 to 1.22-fips-cbl-mariner2.0 by @dependabot in #248
• chore(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0 by @dependabot in #250
• chore: update go version for azure pipelines by @sajayantony in #275
• chore(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #278
• chore(deps): bump actions/dependency-review-action from 4.0.0 to 4.3.1 by @dependabot in #277
• chore(deps): bump github.com/dlclark/regexp2 from 1.10.0 to 1.11.0 by @dependabot in #276
• chore(deps): bump github.com/docker/cli from 20.10.16+incompatible to 26.1.1+incompatible by @dependabot in #279
• chore(deps): bump github.com/docker/docker from 20.10.24+incompatible to 24.0.9+incompatible by @dependabot in #258
• chore(deps): bump oras.land/oras-go/v2 from 2.3.1 to 2.5.0 by @dependabot in #262
• Update oras and go version for windows pipelines by @sajayantony in #280
• chore(deps): bump actions/dependency-review-action from 4.3.1 to 4.3.2 by @dependabot in #281
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #282
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #286
• chore(deps): bump github.com/docker/cli from 26.1.1+incompatible to 26.1.2+incompatible by @dependabot in #285
• chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #283
• chore(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 by @dependabot in #287
• chore(deps): bump github.com/docker/cli from 26.1.2+incompatible to 26.1.3+incompatible by @dependabot in #290
• chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #291
• chore(deps): bump github/codeql-action from 2.13.4 to 3.25.6 by @dependabot in #294
• chore(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #297
• chore(deps): bump github.com/Azure/go-autorest/autorest/adal from 0.9.23 to 0.9.24 by @dependabot in #296
• chore(deps): bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in #295
• fix: docker build with golang 1.22 + FIPS enabled by @northtyphoon in #298
• chore: move non cmd files to internal by @sajayantony in #288
• feat: cssc patch command to enable continuous patching by @Ruchii-27 in #292
• chore: upgrade go version from 1.18.1 to 1.21 in releaser action by @wju-MSFT in #301
• chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #302
• chore(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 by @dependabot in #303

New Contributors

• @sajayantony made their first contribution in #275
• @Ruchii-27 made their first contribution in #292

Full Changelog: v0.9...v0.10

What's Changed

• Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #216
• Bump actions/dependency-review-action from 3.1.2 to 3.1.3 by @dependabot in #225
• Bump step-security/harden-runner from 2.6.0 to 2.6.1 by @dependabot in #226
• chore: update to golang 1.21 by @northtyphoon in #223
• chore(deps): bump actions/dependency-review-action from 3.1.3 to 3.1.4 by @dependabot in #227
• chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #228
• chore(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #229
• chore(deps): bump golang.org/x/crypto from 0.6.0 to 0.17.0 by @dependabot in #231
• chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in #230
• chore(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @dependabot in #233
• chore(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @dependabot in #237
• chore(deps): bump actions/upload-artifact from 4.0.0 to 4.2.0 by @dependabot in #236
• chore(deps): bump actions/upload-artifact from 4.2.0 to 4.3.1 by @dependabot in #246
• chore(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #240
• chore(deps): bump step-security/harden-runner from 2.6.1 to 2.7.0 by @dependabot in #243
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.4 by @dependabot in #274
• chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #265
• chore(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 by @dependabot in #272
• chore(deps): bump oss/go/microsoft/golang from 1.21-fips-cbl-mariner2.0 to 1.22-fips-cbl-mariner2.0 by @dependabot in #248
• chore(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0 by @dependabot in #250
• chore: update go version for azure pipelines by @sajayantony in #275
• chore(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #278
• chore(deps): bump actions/dependency-review-action from 4.0.0 to 4.3.1 by @dependabot in #277
• chore(deps): bump github.com/dlclark/regexp2 from 1.10.0 to 1.11.0 by @dependabot in #276
• chore(deps): bump github.com/docker/cli from 20.10.16+incompatible to 26.1.1+incompatible by @dependabot in #279
• chore(deps): bump github.com/docker/docker from 20.10.24+incompatible to 24.0.9+incompatible by @dependabot in #258
• chore(deps): bump oras.land/oras-go/v2 from 2.3.1 to 2.5.0 by @dependabot in #262
• Update oras and go version for windows pipelines by @sajayantony in #280
• chore(deps): bump actions/dependency-review-action from 4.3.1 to 4.3.2 by @dependabot in #281
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #282
• chore(deps): bump ossf/sc...

acr-cli v0.9

What's Changed

• Bump github.com/opencontainers/image-spec from 1.1.0-rc4 to 1.1.0-rc5 by @dependabot in #205
• Bump actions/dependency-review-action from 3.1.0 to 3.1.1 by @dependabot in #217
• Bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in #214
• Bump oras.land/oras-go/v2 from 2.3.0 to 2.3.1 by @dependabot in #211
• Bump ossf/scorecard-action from 2.2.0 to 2.3.1 by @dependabot in #212
• Bump step-security/harden-runner from 2.5.1 to 2.6.0 by @dependabot in #208
• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #206
• Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #219
• Bump actions/dependency-review-action from 3.1.1 to 3.1.2 by @dependabot in #218
• fix: purge dry-run does not handle looping manifests correctly. by @wju-MSFT in #220
• chore: update mariner base image by @northtyphoon in #222

Full Changelog: v0.8...v0.9

v0.8

Changelog

• 3e79786 fix: update deprecated fields in goreleaser (#204)

What's Changed

• test: add unit tests for GetAcrCLIClientWithAuth by @wangxiaoxuan273 in #138
• Bump github.com/docker/docker from 20.10.16+incompatible to 20.10.24+incompatible by @dependabot in #139
• [StepSecurity] Apply security best practices by @step-security-bot in #140
• Bump actions/setup-go from 3.5.0 to 4.0.1 by @dependabot in #141
• Bump goreleaser/goreleaser-action from 2.9.1 to 4.2.0 by @dependabot in #142
• Bump actions/dependency-review-action from 2.5.1 to 3.0.4 by @dependabot in #144
• Bump ossf/scorecard-action from 2.0.6 to 2.1.3 by @dependabot in #145
• Bump oras.land/oras-go/v2 from 2.0.0-20220524144344-23cb9e0960a5 to 2.1.0 by @dependabot in #149
• Bump github.com/Azure/go-autorest/autorest/adal from 0.9.20 to 0.9.23 by @dependabot in #147
• Bump github.com/spf13/cobra from 1.4.0 to 1.7.0 by @dependabot in #143
• Bump github.com/dlclark/regexp2 from 1.4.0 to 1.10.0 by @dependabot in #150
• Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in #155
• Bump github/codeql-action from 2.3.3 to 2.3.6 by @dependabot in #162
• Bump actions/dependency-review-action from 3.0.4 to 3.0.6 by @dependabot in #161
• Bump cbl-mariner/base/core from 4a2f15c to d0818dc by @dependabot in #157
• Bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 by @dependabot in #156
• Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.2 by @dependabot in #153
• Bump github.com/moby/term from 0.0.0-20210619224110-3f7ff695adc6 to 0.5.0 by @dependabot in #151
• Bump github.com/Azure/go-autorest/autorest from 0.11.27 to 0.11.29 by @dependabot in #152
• Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #167
• Bump github/codeql-action from 2.3.6 to 2.13.4 by @dependabot in #166
• Bump cbl-mariner/base/core from d0818dc to 5c3832f by @dependabot in #165
• Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in #164
• Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in #163
• Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 by @dependabot in #168
• Bump step-security/harden-runner from 2.4.0 to 2.4.1 by @dependabot in #170
• Bump cbl-mariner/base/core from 5c3832f to c159685 by @dependabot in #169
• Bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #171
• Bump cbl-mariner/base/core from c159685 to 2bdd8e1 by @dependabot in #172
• Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @dependabot in #180
• Bump oras.land/oras-go/v2 from 2.2.0 to 2.2.1 by @dependabot in #176
• Bump cbl-mariner/base/core from 2bdd8e1 to 799d8ab by @dependabot in #173
• Bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #184
• Bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0 by @dependabot in #186
• Bump actions/dependency-review-action from 3.0.6 to 3.0.7 by @dependabot in #185
• Bump step-security/harden-runner from 2.5.0 to 2.5.1 by @dependabot in #183
• Bump cbl-mariner/base/core from 799d8ab to 612a4ef by @dependabot in #187
• Bump cbl-mariner/base/core from 612a4ef to e43bbd4 by @dependabot in #189
• Bump actions/dependency-review-action from 3.0.7 to 3.0.8 by @dependabot in #190
• Bump actions/dependency-review-action from 3.0.8 to 3.1.0 by @dependabot in #199
• Bump goreleaser/goreleaser-action from 4.4.0 to 4.6.0 by @dependabot in #197
• Bump github.com/google/uuid from 1.3.0 to 1.3.1 by @dependabot in #192
• Bump actions/checkout from 3.5.3 to 4.0.0 by @dependabot in #195
• Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #198
• Bump cbl-mariner/base/core from e43bbd4 to af3f115 by @dependabot in #191
• Bump cbl-mariner/base/core from af3f115 to 6694d2f by @dependabot in #201
• Bump goreleaser/goreleaser-action from 4.6.0 to 5.0.0 by @dependabot in #202
• Bump cbl-mariner/base/core from 6694d2f to ab3a661 by @dependabot in #203
• Bump oras.land/oras-go/v2 from 2.2.1 to 2.3.0 by @dependabot in #194
• fix: support OCI media types for purge by @wju-MSFT in #188
• fix: update deprecated fields in goreleaser by @wju-MSFT in #204

New Contributors

• @dependabot made their first contribution in #139
• @step-security-bot made their first contribution in #140

Full Changelog: v0.7...v0.8

v0.7

What's Changed

• purge: do not delete contents of oci indexes by @jedevc in #130
• chore: update owner by @northtyphoon in #136
• fix(purge): skip tag/manifest with false writeEnabled attribute by @northtyphoon in #135
• fix: support oci image index by @northtyphoon in #132

New Contributors

• @jedevc made their first contribution in #130

Full Changelog: v0.6...v0.7

What's Changed

• purge: do not delete contents of oci indexes by @jedevc in #130
• chore: update owner by @northtyphoon in #136
• fix(purge): skip tag/manifest with false writeEnabled attribute by @northtyphoon in #135
• fix: support oci image index by @northtyphoon in #132

New Contributors

• @jedevc made their first contribution in #130

Full Changelog: v0.6...v0.7

v0.6

What's Changed

• Maint. Adding more test coverage by @juliusl in #113
• updated auth module to oras-go v2 by @wangxiaoxuan273 in #114
• added uuid generation for acr-cli client by @wangxiaoxuan273 in #115
• added automated GitHub release by @wangxiaoxuan273 in #116
• Change confusing dry-run message by @mherda64 in #123
• Adding Microsoft SECURITY.MD by @microsoft-github-policy-service in #117
• migrate acr cli image to mariner by @wju-MSFT in #126
• fix: fallback to refresh token when loading from docker config file by @wangxiaoxuan273 in #128

New Contributors

• @mherda64 made their first contribution in #123
• @microsoft-github-policy-service made their first contribution in #117
• @wju-MSFT made their first contribution in #126

Full Changelog: v0.5...v0.6

acr-cli v0.5

Changelog

• 6fb5fa8 FIX: loop to get all the repository names (#94)
• b13c70d Feat. Upgraded regexp to regexp2 (#91)
• 57b9e96 Feature: Repository name filter (#88)
• fd7833d Fix build badge link (#100)
• 514baa4 Update containerd and go-autorest (#85)
• 055b867 Update owner to prepare merge policy enforcement
• 9492e80 Upgrade from dgrijalva/jwt-go to golang-jwt/jwt/v4 (#84)
• 5c58deb added one message at the beginning of dryRunPurge (#106)
• ab89b46 fix build failure on Mac M1 machine by running 'go get -u golang.org/x/sys' (#105)
• 61e8c9c fix vm image version (#90)
• 6baf7f8 ran 'go mod vendor' to make up what last commit missed (#103)
• 3afc225 update dependencies (#101)
• e143e1c update github.com/docker/distribution to v2.8.1 (#111)
• 0272b60 update owner (#110)