Update dependency google/go-containerregistry to v0.21.3 #1

Merged

Doridian merged 1 commit from renovate/google-go-containerregistry-0.x into main

2026-04-12 14:50:26 -07:00

MaidFox commented

2026-04-12 14:39:24 -07:00

Member

This PR contains the following updates:

Package	Update	Change	Pending
google/go-containerregistry	minor	`v0.20.7` → `v0.21.3`	`v0.21.5` (+1)

Release Notes

google/go-containerregistry (google/go-containerregistry)

`v0.21.3`

Compare Source

What's Changed

Adds local file support to the crane index subcommand by @edwardthiele in #2223
migrate to github.com/moby/moby modules by @thaJeztah in #2228
Bump the go-deps group across 4 directories with 7 updates by @dependabot[bot] in #2233
Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by @dependabot[bot] in #2220
mutate: reject path traversal and symlink escape in Extract by @KevinZhao in #2227
tarball: detect symlink cycles in extractFileFromTar by @vnykmshr in #2232
bump golang to 1.25.7 by @Subserial in #2236

New Contributors

@edwardthiele made their first contribution in #2223
@thaJeztah made their first contribution in #2228
@KevinZhao made their first contribution in #2227
@vnykmshr made their first contribution in #2232

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3

`v0.21.2`

Compare Source

What's Changed

Better handle redirects to https in ping by @jonjohnsonjr in #2225

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2

`v0.21.1`

Compare Source

This release fixes a regression in crane introduced in the previous release.

What's Changed

Add WithFileBufferedOpener for file-backed daemon image buffering by @twdamhore in #2214
crane: fix case in auth response json by @aelindeman in #2218

New Contributors

@twdamhore made their first contribution in #2214
@aelindeman made their first contribution in #2218

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1

`v0.21.0`

Compare Source

This release updates the minimum Go version to 1.25.6.

What's Changed

fix(mutate): don't skip dir replacements via whiteout in export by @r4f4 in #2191
Improve performance of v1.NewHash by @bmoylan in #2194
Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #2207
Bump the root-deps group across 1 directory with 7 updates by @dependabot[bot] in #2195
Fix error messages in crane_test.go by @jammie-jelly in #2189
Bump go version across packages to 1.25.6 by @Subserial in #2211
Join go.mod dependency updates by @Subserial in #2212
Bump the go-deps group across 3 directories with 3 updates by @dependabot[bot] in #2213
Disable taint gosec lints by @Subserial in #2215
Update go version used in goreleaser by @Subserial in #2216

New Contributors

@r4f4 made their first contribution in #2191
@jammie-jelly made their first contribution in #2189

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | Pending | |---|---|---|---| | [google/go-containerregistry](https://github.com/google/go-containerregistry) | minor | `v0.20.7` → `v0.21.3` | `v0.21.5` (+1) | --- ### Release Notes <details> <summary>google/go-containerregistry (google/go-containerregistry)</summary> ### [`v0.21.3`](https://github.com/google/go-containerregistry/releases/tag/v0.21.3) [Compare Source](https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3) #### What's Changed - Adds local file support to the `crane index` subcommand by [@edwardthiele](https://github.com/edwardthiele) in [#2223](https://github.com/google/go-containerregistry/pull/2223) - migrate to github.com/moby/moby modules by [@thaJeztah](https://github.com/thaJeztah) in [#2228](https://github.com/google/go-containerregistry/pull/2228) - Bump the go-deps group across 4 directories with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2233](https://github.com/google/go-containerregistry/pull/2233) - Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#2220](https://github.com/google/go-containerregistry/pull/2220) - mutate: reject path traversal and symlink escape in Extract by [@KevinZhao](https://github.com/KevinZhao) in [#2227](https://github.com/google/go-containerregistry/pull/2227) - tarball: detect symlink cycles in extractFileFromTar by [@vnykmshr](https://github.com/vnykmshr) in [#2232](https://github.com/google/go-containerregistry/pull/2232) - bump golang to 1.25.7 by [@Subserial](https://github.com/Subserial) in [#2236](https://github.com/google/go-containerregistry/pull/2236) #### New Contributors - [@edwardthiele](https://github.com/edwardthiele) made their first contribution in [#2223](https://github.com/google/go-containerregistry/pull/2223) - [@thaJeztah](https://github.com/thaJeztah) made their first contribution in [#2228](https://github.com/google/go-containerregistry/pull/2228) - [@KevinZhao](https://github.com/KevinZhao) made their first contribution in [#2227](https://github.com/google/go-containerregistry/pull/2227) - [@vnykmshr](https://github.com/vnykmshr) made their first contribution in [#2232](https://github.com/google/go-containerregistry/pull/2232) **Full Changelog**: <https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3> ### [`v0.21.2`](https://github.com/google/go-containerregistry/releases/tag/v0.21.2) [Compare Source](https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2) #### What's Changed - Better handle redirects to https in ping by [@jonjohnsonjr](https://github.com/jonjohnsonjr) in [#2225](https://github.com/google/go-containerregistry/pull/2225) **Full Changelog**: <https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2> ### [`v0.21.1`](https://github.com/google/go-containerregistry/releases/tag/v0.21.1) [Compare Source](https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1) This release fixes a regression in `crane` introduced in the previous release. #### What's Changed - Add WithFileBufferedOpener for file-backed daemon image buffering by [@twdamhore](https://github.com/twdamhore) in [#2214](https://github.com/google/go-containerregistry/pull/2214) - crane: fix case in auth response json by [@aelindeman](https://github.com/aelindeman) in [#2218](https://github.com/google/go-containerregistry/pull/2218) #### New Contributors - [@twdamhore](https://github.com/twdamhore) made their first contribution in [#2214](https://github.com/google/go-containerregistry/pull/2214) - [@aelindeman](https://github.com/aelindeman) made their first contribution in [#2218](https://github.com/google/go-containerregistry/pull/2218) **Full Changelog**: <https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1> ### [`v0.21.0`](https://github.com/google/go-containerregistry/releases/tag/v0.21.0) [Compare Source](https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0) This release updates the minimum Go version to `1.25.6`. #### What's Changed - fix(mutate): don't skip dir replacements via whiteout in export by [@r4f4](https://github.com/r4f4) in [#2191](https://github.com/google/go-containerregistry/pull/2191) - Improve performance of v1.NewHash by [@bmoylan](https://github.com/bmoylan) in [#2194](https://github.com/google/go-containerregistry/pull/2194) - Bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2207](https://github.com/google/go-containerregistry/pull/2207) - Bump the root-deps group across 1 directory with 7 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2195](https://github.com/google/go-containerregistry/pull/2195) - Fix error messages in crane\_test.go by [@jammie-jelly](https://github.com/jammie-jelly) in [#2189](https://github.com/google/go-containerregistry/pull/2189) - Bump go version across packages to 1.25.6 by [@Subserial](https://github.com/Subserial) in [#2211](https://github.com/google/go-containerregistry/pull/2211) - Join go.mod dependency updates by [@Subserial](https://github.com/Subserial) in [#2212](https://github.com/google/go-containerregistry/pull/2212) - Bump the go-deps group across 3 directories with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2213](https://github.com/google/go-containerregistry/pull/2213) - Disable taint gosec lints by [@Subserial](https://github.com/Subserial) in [#2215](https://github.com/google/go-containerregistry/pull/2215) - Update go version used in goreleaser by [@Subserial](https://github.com/Subserial) in [#2216](https://github.com/google/go-containerregistry/pull/2216) #### New Contributors - [@r4f4](https://github.com/r4f4) made their first contribution in [#2191](https://github.com/google/go-containerregistry/pull/2191) - [@jammie-jelly](https://github.com/jammie-jelly) made their first contribution in [#2189](https://github.com/google/go-containerregistry/pull/2189) **Full Changelog**: <https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

MaidFox added 1 commit

2026-04-12 14:39:24 -07:00

Update dependency google/go-containerregistry to v0.21.3

renovate/stability-days Updates have met minimum release age requirement

Details

92c23078dd