Releases: oras-project/oras-java
Releases Β· oras-project/oras-java
0.2.15
π Bug fixes
- Ensure to include parent folder into archive (#356) @jonesbusy
π Documentation updates
- Update reproducible badge (#337) @jonesbusy
π» Maintenance
- Add updatecli manifest to update zot container for testcontainers (#338) @jonesbusy
π¦ Tests
- Add zot unsecure container (#353) @jonesbusy
- Bump zot v2.1.5 (#340) @github-actions[bot]
π¦ Dependency updates
- Bump updatecli/updatecli-action from 2.87.1 to 2.88.0 (#354) @dependabot[bot]
- Bump updatecli/updatecli-action from 2.87.0 to 2.87.1 (#351) @dependabot[bot]
- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.45.0 (#352) @dependabot[bot]
- Bump github/codeql-action from 3.29.1 to 3.29.2 (#350) @dependabot[bot]
- Bump updatecli/updatecli-action from 2.86.0 to 2.87.0 (#349) @dependabot[bot]
- Bump com.github.luben:zstd-jni from 1.5.7-3 to 1.5.7-4 (#348) @dependabot[bot]
- Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0 (#347) @dependabot[bot]
- Bump junit.version from 5.13.2 to 5.13.3 (#346) @dependabot[bot]
- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 (#345) @dependabot[bot]
- Bump testcontainer.version from 1.21.2 to 1.21.3 (#344) @dependabot[bot]
- Bump github/codeql-action from 3.29.0 to 3.29.1 (#343) @dependabot[bot]
- Bump io.github.classgraph:classgraph from 4.8.179 to 4.8.180 (#342) @dependabot[bot]
- Bump junit.version from 5.13.1 to 5.13.2 (#341) @dependabot[bot]
- Bump zot v2.1.5 (#340) @github-actions[bot]
0.2.14
π Bug fixes
- Fix possible Nullpointer on digest validation (#335) @jonesbusy
0.2.13
π Bug fixes
- Do not include auth header when redirecting to other domain or when switching to insecure protocol (#334) @jonesbusy
π¦ Dependency updates
- Bump org.codehaus.mojo:license-maven-plugin from 2.5.0 to 2.6.0 (#333) @dependabot[bot]
- Bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.8.0 (#332) @dependabot[bot]
- Bump testcontainer.version from 1.21.1 to 1.21.2 (#331) @dependabot[bot]
0.2.12
π Bug fixes
π» Maintenance
- Updatecli configuration (#321) @jonesbusy
π¦ Dependency updates
- Bump Maven 3.9.10 (#327) @github-actions[bot]
- Bump github/codeql-action from 3.28.19 to 3.29.0 (#318) @dependabot[bot]
0.2.11
π New features and improvements
- Equality for most model entities (#317) @jonesbusy
- Partial validate of
Docker-Content-Digest
when downloading or getting blob (#299) @jonesbusy
π Bug fixes
- Only send a single 'Authorization' header after getting a token (#302) @tom-seqera
π¦ Tests
- add NetworkConnectivity and CorruptedResponses Tests using Wiremock (#295) @kartiksharma-git
π¦ Dependency updates
18 changes
- Bump org.wiremock:wiremock-standalone from 3.13.0 to 3.13.1 (#316) @dependabot[bot]
- Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 (#313) @dependabot[bot]
- Bump junit.version from 5.13.0 to 5.13.1 (#314) @dependabot[bot]
- Bump github/codeql-action from 3.28.18 to 3.28.19 (#312) @dependabot[bot]
- Bump org.bouncycastle:bcprov-jdk18on from 1.80 to 1.81 (#315) @dependabot[bot]
- Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.1 to 3.5.0 (#311) @dependabot[bot]
- Bump junit.version from 5.12.2 to 5.13.0 (#310) @dependabot[bot]
- Bump testcontainer.version from 1.21.0 to 1.21.1 (#309) @dependabot[bot]
- Bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#308) @dependabot[bot]
- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 (#307) @dependabot[bot]
- Bump mockito.version from 5.17.0 to 5.18.0 (#305) @dependabot[bot]
- Bump codecov/codecov-action from 5.4.2 to 5.4.3 (#304) @dependabot[bot]
- Bump github/codeql-action from 3.28.17 to 3.28.18 (#303) @dependabot[bot]
- Bump github/codeql-action from 3.28.16 to 3.28.17 (#300) @dependabot[bot]
- Bump com.github.luben:zstd-jni from 1.5.7-2 to 1.5.7-3 (#301) @dependabot[bot]
- Bump org.spdx:spdx-maven-plugin from 1.0.0 to 1.0.2 (#298) @dependabot[bot]
- Bump github/codeql-action from 3.28.15 to 3.28.16 (#294) @dependabot[bot]
- Bump actions/setup-python from 5.5.0 to 5.6.0 (#293) @dependabot[bot]
0.2.10
π New features and improvements
- Add more convenience methods on registry (#289) @jonesbusy
π Bug fixes
- Missing redirect after getting auth token (#292) @jonesbusy
π Documentation updates
- Mention Quarkus ORAS (#288) @jonesbusy
π» Maintenance
- Add some convenience methods on archive utils (#291) @jonesbusy
- Convenience methods for layout ref (#287) @jonesbusy
0.2.9
π Bug fixes
- Fix tar/untar to never add current dir entry and avoid traversal attacks (#283) @jonesbusy
π» Maintenance
- Add two annotation constants (#285) @jonesbusy
- Add SHA1 utils (#284) @jonesbusy
π¦ Dependency updates
- Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0 (#282) @dependabot[bot]
- Bump com.google.code.gson:gson from 2.13.0 to 2.13.1 (#281) @dependabot[bot]
- Bump testcontainer.version from 1.20.6 to 1.21.0 (#280) @dependabot[bot]
0.2.8
π» Maintenance
- Fix javadoc build (#278) @jonesbusy
- Add OrasModel for better Quarkus reflective support (#277) @jonesbusy
- Remove resource for better Quarkus support (#276) @jonesbusy
π¦ Dependency updates
- Bump io.github.classgraph:classgraph from 4.8.177 to 4.8.179 (#279) @dependabot[bot]
0.2.7
π New features and improvements
- List repositories (#275) @jonesbusy
- Add utils for scopes management (#271) @jonesbusy
π Bug fixes
- Add support for integration tests and fix some issue with docker.io and GHCR (#270) @jonesbusy
π» Maintenance
- Pass scopes to HTTP client (#273) @jonesbusy
π¦ Tests
- Add test for JFrog Artifactory and Quay.io (#272) @jonesbusy
- Add support for integration tests and fix some issue with docker.io and GHCR (#270) @jonesbusy
0.2.6
π Bug fixes
- Fix default library namespace when changing registry (#266) @jonesbusy
π» Maintenance
- Pass each time auth provider and handle token refresh on client instead of registry (#264) @jonesbusy
π¦ Tests
- add RateLimitng and Concurrency Tests in RegistryWireMockTest (#268) @kartiksharma-git
π¦ Dependency updates
- Bump org.spdx:spdx-maven-plugin from 1.0.0-RC2 to 1.0.0 (#269) @dependabot[bot]
- Bump codecov/codecov-action from 5.4.0 to 5.4.2 (#265) @dependabot[bot]