v1.1.0-rc.1

New Features

• Add a new flag --skip-delete-referrers to allow oras commands to skip referrers index clean up

Bug Fixes

• Fix #995: oras push and oras attach generates unwanted manifest file
• Fix #983, #980, #973: Flag --disable-path-validation not working for oras attach and oras push
• Fix #897: Wrong error log when --distribution-spec is provided with invalid value
• Fix #1003: Tree view output of oras discover prints unexpected nodes

Other Changes

• Improve UX
  • oras pull prints better error logs when path traversal is needed
  • Add OCI image layout support in help doc
  • Mark filtered tag listing as experimental
• Improve documentation
  • Fix broken links in contribution document
• Update dependencies
  • Remove dependencies on docker CLI
  • Update dependency from github.com/moby/term to golang.org/x/term
• Update to Golang 1.20.5
• Improve tests
  • Generate code coverage for E2E tests
  • Better test coverage

Detailed Commits

• refactor: Logger initializes logging by @TerryHowe in #867
• test(cov): make unit tests cover more by @qweeah in #905
• refactor: add root package for Cobra commands by @qweeah in #825
• build(deps): bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible by @dependabot in #909
• refactor: unify command contexts by @qweeah in #899
• test: generate coverage profile during e2e tests by @qweeah in #903
• build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #919
• refactor: replace terminal package used by oras login by @qweeah in #910
• test(e2e): OCI layout specs for oras tag by @qweeah in #902
• build(deps): bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible by @dependabot in #918
• Add make target for e2e by @sajayantony in #924
• test: make e2e coverage data in action by @qweeah in #926
• build(deps): bump github.com/docker/cli from 23.0.3+incompatible to 23.0.4+incompatible by @dependabot in #929
• feat: use oras-credential-go to do auth by @qweeah in #932
• doc: fix broken logo link by @FeynmanZhou in #935
• docs: fix broken links in README by @wangxiaoxuan273 in #937
• build: using cross compilation in docker build by @northtyphoon in #938
• build(deps): bump golang.org/x/term from 0.7.0 to 0.8.0 by @dependabot in #942
• build(deps): bump oras-go and oras-credentials-go by @qweeah in #946
• fixed the link in the file : oras/CONTRIBUTING.md by @yash7raut in #951
• build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in #953
• build: add dependabot for e2e module by @qweeah in #958
• build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 by @dependabot in #955
• build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.0 to 0.1.1 by @dependabot in #956
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc2 to 1.1.0-rc.3 in /test/e2e by @dependabot in #961
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.5 in /test/e2e by @dependabot in #962
• build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.7 in /test/e2e by @dependabot in #959
• build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 in /test/e2e by @dependabot in #960
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 in /test/e2e by @dependabot in #963
• fix: correct spec flag description by @qweeah in #964
• build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in #966
• chore: add snap for ubuntu by @SamirPS in #965
• build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 in /test/e2e by @dependabot in #970
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 in /test/e2e by @dependabot in #969
• chore: simplify e2e scripts and github action by @qweeah in #967
• Revert "Add help to make file" by @TerryHowe in #974
• Add help to make file by @TerryHowe in #975
• build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 by @dependabot in #971
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 in /test/e2e by @dependabot in #976
• test: add unit-tests for internal/version.go by @enraiha0307 in #977
• build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.1 to 0.2.0 by @qweeah in #990
• fix: enforce path validation for push/attach and improve path traversal failure message for pull by @suganyas in #988
• chore: add experimental mark to filtered tag listing by @qweeah in #994
• test(e2e): add test for pushing via absolute path by @qweeah in #991
• test(e2e): update spec-related constants to string literal by @qweeah in #992
• chore: update help doc with OCI layout support by @qweeah in #997
• feat: add flag to skip deleting obsolete referrers index by @qweeah in #957
• fix: pushing based on temporary file store path by @qweeah in #996
• chore: update minor version by @qweeah in #1000
• fix: properly print tree for oras discover by @shizhMSFT in #1005
• build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 by @dependabot in #1008
• build(deps): bump oras-go to main branch by @qweeah in #1004
• revert: "chore: update minor version (#1000)" by @qweeah in #1014
• bump: update golang from 1.20.2 to 1.20.5 by @qweeah in #1015

New Contributors

• @northtyphoon made their first contribution in #938
• @yash7raut made their first contribution in #951
• @SamirPS made their first contribution in #965
• @enraiha0307 made their first contribution in #977
• @suganyas made their first contribution in #988

Full Changelog: v1.0.0...v1.1.0-rc.1

Notes

This release was signed with BE6F A8DD A48D 4C23 0091 A0A9 276D 8A72 4CE1 C704 (@qweeah's GPG key) which can be found here.