0.4.1

🚀 New features and improvements

• Add utility method on ManifestDescriptor to construct manifest descriptor with Platform and Annotation from Manifest (#591) @jonesbusy
• Better support for Index artifact type (#594) @jonesbusy
• Add withArtifactType for Index (#590) @jonesbusy
• Support hierarchical credentials on AuthStore (per namespace, per repository etc) (#588) @copilot-swe-agent[bot]

🐛 Bug fixes

• Fix invalid scope on push blob (#595) @jonesbusy
• Layer annotations where not added on files during pushArtifact (#583) @jonesbusy
• Do not pull layer without title on pull artifact (#582) @jonesbusy

🚦 Tests

• Update ContainerRef.shouldDetermineEffectiveRegistry test to not be machine dependent (#596) @jonesbusy
• Add utility method on ManifestDescriptor to construct manifest descriptor with Platform and Annotation from Manifest (#591) @jonesbusy
• One more demo/test to push Jenkins library (#581) @jonesbusy
• Update demo/tests for Harbor and different Artifacts (#579) @jonesbusy
• Add test for Nexus (#578) @jonesbusy
• Add few more tests (#577) @jonesbusy
• Add test to package a standard Flux Artifact (#576) @jonesbusy

✍ Other changes

• Missing @OrasModel for reflection access (#573) @jonesbusy

📦 Dependency updates

• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 (#585) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 (#586) @dependabot[bot]
• Bump github/codeql-action from 4.32.3 to 4.32.4 (#584) @dependabot[bot]

0.4.0

🚀 New features and improvements

• Allow setting short-name-mode and set mode to enforcing by default (like podman / CRI-IO) (#560) @jonesbusy
• Store resolve registry when probing descriptor and use it for copy operation (#557) @jonesbusy
• Optimize copy by passing stream with known size and digest (#552) @jonesbusy
• Rewrite any prefix subdomain like *.example.com (#545) @jonesbusy
• Add support for registry table prefix and location rewrite (without *, tag or digest yet) (#542) @jonesbusy
• Support for registry (insecure / blocked) from registries.conf (#541) @jonesbusy
• Support for alias in registries.conf (#540) @jonesbusy
• Support of unqualified-search-registries in registries.conf (#434) @jonesbusy

🐛 Bug fixes

• Ensure to use computed reference on copy (#572) @jonesbusy
• Fix copy with alias (#571) @jonesbusy
• Fix push artifact for alias (#570) @jonesbusy
• Fix getEffectiveRegistry to return registry only (#569) @jonesbusy
• Do not send Authorization header when redirecting after auth (#561) @jonesbusy
• When copy ensure to push all manifests before index (#554) @jonesbusy

📝 Documentation updates

• Add some documentation about registries.conf (#564) @jonesbusy

👻 Maintenance

• Ensure to pass resolved target registries for pushArtifact (#566) @jonesbusy
• Use streaming copy for config during copy and ensure to set target (2) and extract to copy method (#559) @jonesbusy
• Use streaming copy for config during copy and ensure to set target (#558) @jonesbusy
• Only try to parse Error if we get JSON content type (#555) @jonesbusy
• Ensure HTTP status code is not lost when catching exception (#550) @jonesbusy

🚦 Tests

• Ensure HTTP status code is not lost when catching exception (#550) @jonesbusy
• Add test for Helm chart extraction (Issue COMPRESS-705) (#538) @jonesbusy
• Migrate to testcontainers v2 (#536) @jonesbusy

📦 Dependency updates

• Bump ch.qos.logback:logback-classic from 1.5.31 to 1.5.32 (#553) @dependabot[bot]
• Bump github/codeql-action from 4.32.2 to 4.32.3 (#549) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.31 (#547) @dependabot[bot]
• Bump junit.version from 6.0.2 to 6.0.3 (#546) @dependabot[bot]
• Migrate to testcontainers v2 (#536) @jonesbusy
• Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 (#530) @dependabot[bot]

0.3.3

🚀 New features and improvements

• Add Platform model and some filtering utils for Index (#527) @jonesbusy

🐛 Bug fixes

• Do not rely on Docker-Content-Digest when getting manifests (#526) @jonesbusy
• Avoid HEAD request before getting blobs (#525) @jonesbusy

👻 Maintenance

• Avoid log binary response (#524) @jonesbusy

📦 Dependency updates

• Bump github/codeql-action from 4.32.1 to 4.32.2 (#528) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28 (#529) @dependabot[bot]

0.3.2

🐛 Bug fixes

• Support for access_token and reduce call to auth store (#517) @jonesbusy
• Compute digest index and avoid Docker-Content-Digest when missing (#516) @jonesbusy
• Implement test for ECR multi-arch image and fix possible content length missing (#515) @jonesbusy

👻 Maintenance

• Overly permissive regular expression range for artifact type validation (#466) @jonesbusy

🚦 Tests

• Add test for Azure CR (#520) @jonesbusy
• Implement test for ECR multi-arch image and fix possible content length missing (#515) @jonesbusy
• Bump zot v2.1.14 (#502) @github-actions[bot]
• Bump zot v2.1.13 (#490) @github-actions[bot]
• Bump zot v2.1.12 (#485) @github-actions[bot]
• Bump zot v2.1.11 (#465) @github-actions[bot]

📦 Dependency updates

52 changes

• Bump github/codeql-action from 4.32.0 to 4.32.1 (#519) @dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-6 to 1.5.7-7 (#518) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 (#512) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27 (#513) @dependabot[bot]
• Bump github/codeql-action from 4.31.11 to 4.32.0 (#511) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.0 to 3.2.1 (#510) @dependabot[bot]
• Bump actions/checkout from 6.0.1 to 6.0.2 (#505) @dependabot[bot]
• Bump github/codeql-action from 4.31.10 to 4.31.11 (#507) @dependabot[bot]
• Bump actions/setup-python from 6.1.0 to 6.2.0 (#506) @dependabot[bot]
• Bump release-drafter/release-drafter from 6.1.0 to 6.2.0 (#504) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26 (#503) @dependabot[bot]
• Bump zot v2.1.14 (#502) @github-actions[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.1.0 to 3.2.0 (#501) @dependabot[bot]
• Bump tools.jackson:jackson-bom from 3.0.3 to 3.0.4 (#500) @dependabot[bot]
• Bump github/codeql-action from 4.31.9 to 4.31.10 (#497) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.98.0 to 2.99.0 (#496) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25 (#495) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24 (#493) @dependabot[bot]
• Bump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0 (#494) @dependabot[bot]
• Bump junit.version from 6.0.1 to 6.0.2 (#492) @dependabot[bot]
• Bump org.codehaus.mojo:license-maven-plugin from 2.7.0 to 2.7.1 (#491) @dependabot[bot]
• Bump zot v2.1.13 (#490) @github-actions[bot]
• Bump testcontainer.version from 1.21.3 to 1.21.4 (#486) @dependabot[bot]
• Bump Maven 3.9.12 (#484) @github-actions[bot]
• Bump zot v2.1.12 (#485) @github-actions[bot]
• Bump github/codeql-action from 4.31.8 to 4.31.9 (#488) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.97.0 to 2.98.0 (#487) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23 (#489) @dependabot[bot]
• Bump github/codeql-action from 4.31.7 to 4.31.8 (#481) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-release-plugin from 3.3.0 to 3.3.1 (#483) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22 (#482) @dependabot[bot]
• Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#478) @dependabot[bot]
• Bump codecov/codecov-action from 5.5.1 to 5.5.2 (#479) @dependabot[bot]
• Bump mockito.version from 5.20.0 to 5.21.0 (#480) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.0 (#475) @dependabot[bot]
• Bump github/codeql-action from 4.31.5 to 4.31.7 (#476) @dependabot[bot]
• Bump actions/checkout from 6.0.0 to 6.0.1 (#477) @dependabot[bot]
• Bump actions/setup-python from 6.0.0 to 6.1.0 (#468) @dependabot[bot]
• Bump github/codeql-action from 4.31.4 to 4.31.5 (#469) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.96.0 to 2.97.0 (#470) @dependabot[bot]
• Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83 (#472) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0 (#471) @dependabot[bot]
• Bump tools.jackson:jackson-bom from 3.0.2 to 3.0.3 (#474) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to 3.4.0 (#473) @dependabot[bot]
• Bump zot v2.1.11 (#465) @github-actions[bot]
• Bump org.wiremock:wiremock-standalone from 3.13.1 to 3.13.2 (#464) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.0.0 to 3.1.0 (#463) @dependabot[bot]
• Bump dev.sigstore:sigstore-maven-plugin from 1.3.0 to 2.0.0 (#461) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0 (#459) @dependabot[bot]
• Bump actions/checkout from 5.0.0 to 6.0.0 (#462) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.95.0 to 2.96.0 (#460) @dependabot[bot]
• Bump github/codeql-action from 4.31.2 to 4.31.4 (#458) @dependabot[bot]

0.3.1

🐛 Bug fixes

• Fix wrong credStore format (#456) @jonesbusy

🚦 Tests

• Bump zot v2.1.10 (#436) @github-actions[bot]
• Bump zot v2.1.9 (#435) @github-actions[bot]

📦 Dependency updates

• Bump updatecli/updatecli-action from 2.94.0 to 2.95.0 (#454) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21 (#455) @dependabot[bot]
• Bump tools.jackson:jackson-bom from 3.0.1 to 3.0.2 (#451) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0 (#452) @dependabot[bot]
• Bump junit.version from 6.0.0 to 6.0.1 (#450) @dependabot[bot]
• Bump github/codeql-action from 4.31.0 to 4.31.2 (#449) @dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-5 to 1.5.7-6 (#445) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.93.0 to 2.94.0 (#446) @dependabot[bot]
• Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#447) @dependabot[bot]
• Bump github/codeql-action from 4.30.9 to 4.31.0 (#448) @dependabot[bot]
• Bump tools.jackson:jackson-bom from 3.0.0 to 3.0.1 (#444) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 (#437) @dependabot[bot]
• Bump github/codeql-action from 4.30.8 to 4.30.9 (#438) @dependabot[bot]
• Bump zot v2.1.10 (#436) @github-actions[bot]
• Bump zot v2.1.9 (#435) @github-actions[bot]

0.3.0

💥 Breaking changes

• GSON to Jackson 3 migration (#418) @jonesbusy

🚀 New features and improvements

• Support for credential helper (#421) @jonesbusy

📝 Documentation updates

• Update docs for snapshots setup (#427) @jonesbusy

👻 Maintenance

• Add backport configuration (#423) @jonesbusy
• GSON to Jackson 3 migration (#418) @jonesbusy
• Publish SNAPSHOTS to maven central (#420) @jonesbusy

📦 Dependency updates

• Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 (#426) @dependabot[bot]
• Bump github/codeql-action from 4.30.7 to 4.30.8 (#425) @dependabot[bot]
• Bump io.github.classgraph:classgraph from 4.8.181 to 4.8.184 (#422) @dependabot[bot]
• GSON to Jackson 3 migration (#418) @jonesbusy

0.2.16

📝 Documentation updates

• Update badges (#357) @jonesbusy

👻 Maintenance

• Don't use EA anymore for Java 25 (#405) @jonesbusy
• Add unqualified flag on container ref (#397) @jonesbusy
• Test build on Java 21 and Java 25 (#396) @jonesbusy
• Fix maven maven on deploy-javadoc (#362) @jonesbusy
• Ensure to checkout before reading the maven version (#361) @jonesbusy

🚦 Tests

• Bump zot v2.1.8 (#383) @github-actions[bot]
• Bump zot v2.1.7 (#370) @github-actions[bot]
• Bump zot v2.1.6 (#364) @github-actions[bot]

📦 Dependency updates

50 changes

• Bump github/codeql-action from 3.30.6 to 4.30.7 (#416) @dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-4 to 1.5.7-5 (#414) @dependabot[bot]
• Bump github/codeql-action from 3.30.5 to 3.30.6 (#413) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2 (#412) @dependabot[bot]
• Bump s4u/setup-maven-action from 1.18.0 to 1.19.0 (#415) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19 (#411) @dependabot[bot]
• Bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#409) @dependabot[bot]
• Bump junit.version from 5.13.4 to 6.0.0 (#410) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.92.0 to 2.93.0 (#408) @dependabot[bot]
• Bump github/codeql-action from 3.30.4 to 3.30.5 (#407) @dependabot[bot]
• Bump org.codehaus.mojo:license-maven-plugin from 2.6.0 to 2.7.0 (#403) @dependabot[bot]
• Bump org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.9.0 (#404) @dependabot[bot]
• Bump github/codeql-action from 3.30.3 to 3.30.4 (#401) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.46.1 to 3.0.0 (#402) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1 (#399) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 (#400) @dependabot[bot]
• Bump mockito.version from 5.19.0 to 5.20.0 (#398) @dependabot[bot]
• Bump org.bouncycastle:bcprov-jdk18on from 1.81 to 1.82 (#395) @dependabot[bot]
• Bump github/codeql-action from 3.30.1 to 3.30.3 (#394) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4 (#391) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4 (#390) @dependabot[bot]
• Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 (#389) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.91.0 to 2.92.0 (#386) @dependabot[bot]
• Bump actions/setup-python from 5.6.0 to 6.0.0 (#388) @dependabot[bot]
• Bump codecov/codecov-action from 5.5.0 to 5.5.1 (#387) @dependabot[bot]
• Bump github/codeql-action from 3.29.11 to 3.30.1 (#385) @dependabot[bot]
• Bump zot v2.1.8 (#383) @github-actions[bot]
• Bump updatecli/updatecli-action from 2.90.0 to 2.91.0 (#382) @dependabot[bot]
• Bump codecov/codecov-action from 5.4.3 to 5.5.0 (#380) @dependabot[bot]
• Bump github/codeql-action from 3.29.9 to 3.29.11 (#381) @dependabot[bot]
• Bump mockito.version from 5.18.0 to 5.19.0 (#379) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 (#378) @dependabot[bot]
• Bump actions/checkout from 4.2.2 to 5.0.0 (#377) @dependabot[bot]
• Bump github/codeql-action from 3.29.8 to 3.29.9 (#376) @dependabot[bot]
• Bump actions/upload-pages-artifact from 3.0.1 to 4.0.0 (#375) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.89.0 to 2.90.0 (#374) @dependabot[bot]
• Bump github/codeql-action from 3.29.7 to 3.29.8 (#373) @dependabot[bot]
• Bump github/codeql-action from 3.29.4 to 3.29.5 (#372) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.88.0 to 2.89.0 (#371) @dependabot[bot]
• Bump zot v2.1.7 (#370) @github-actions[bot]
• Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#369) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.46.0 to 2.46.1 (#367) @dependabot[bot]
• Bump github/codeql-action from 3.29.2 to 3.29.4 (#368) @dependabot[bot]
• Bump org.spdx:spdx-maven-plugin from 1.0.2 to 1.0.3 (#366) @dependabot[bot]
• Bump junit.version from 5.13.3 to 5.13.4 (#365) @dependabot[bot]
• Bump zot v2.1.6 (#364) @github-actions[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.45.0 to 2.46.0 (#363) @dependabot[bot]
• Bump Maven 3.9.11 (#360) @github-actions[bot]
• Bump io.github.classgraph:classgraph from 4.8.180 to 4.8.181 (#358) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1 (#359) @dependabot[bot]

0.2.15

🐛 Bug fixes

• Ensure to include parent folder into archive (#356) @jonesbusy

📝 Documentation updates

• Update reproducible badge (#337) @jonesbusy

👻 Maintenance

• Add updatecli manifest to update zot container for testcontainers (#338) @jonesbusy

🚦 Tests

• Add zot unsecure container (#353) @jonesbusy
• Bump zot v2.1.5 (#340) @github-actions[bot]

📦 Dependency updates

• Bump updatecli/updatecli-action from 2.87.1 to 2.88.0 (#354) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.87.0 to 2.87.1 (#351) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.45.0 (#352) @dependabot[bot]
• Bump github/codeql-action from 3.29.1 to 3.29.2 (#350) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.86.0 to 2.87.0 (#349) @dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-3 to 1.5.7-4 (#348) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0 (#347) @dependabot[bot]
• Bump junit.version from 5.13.2 to 5.13.3 (#346) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 (#345) @dependabot[bot]
• Bump testcontainer.version from 1.21.2 to 1.21.3 (#344) @dependabot[bot]
• Bump github/codeql-action from 3.29.0 to 3.29.1 (#343) @dependabot[bot]
• Bump io.github.classgraph:classgraph from 4.8.179 to 4.8.180 (#342) @dependabot[bot]
• Bump junit.version from 5.13.1 to 5.13.2 (#341) @dependabot[bot]
• Bump zot v2.1.5 (#340) @github-actions[bot]

0.2.14

🐛 Bug fixes

• Fix possible Nullpointer on digest validation (#335) @jonesbusy

0.2.13

🐛 Bug fixes

• Do not include auth header when redirecting to other domain or when switching to insecure protocol (#334) @jonesbusy

📦 Dependency updates

• Bump org.codehaus.mojo:license-maven-plugin from 2.5.0 to 2.6.0 (#333) @dependabot[bot]
• Bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.8.0 (#332) @dependabot[bot]
• Bump testcontainer.version from 1.21.1 to 1.21.2 (#331) @dependabot[bot]