bump: tag and release ORAS CLI v1.2.0-rc.1 #1381

qweeah · 2024-05-14T14:03:03Z

What this PR does / why we need it:
This PR proposes to tag v1.2.0-rc.1 based on ed8d791 and release. At least 3 approvals are needed from the 5 owners.

Below is a summary of change notes since v1.2.0-beta.1:

New Features

x509 mTLS authentication with OCI registries: X509 Authentication with OCI registry #491
new token auth experience via --identity-token: Make --identity-token an alias of --password #742

Experimental Features

Better multi-arch image attaching experience: allow adding referrer artifact to a specific sub-platform: Add platform flag to attach command #813
BREAKING CHANGE oras discover by default shows tree view output
Apply --format output control to oras pull, oras manifest fetch and oras discover
New go templating experience:
- BREAKING CHANGE Requires explicit type assertion, e.g. --format go-template=TEMPLATE
- Template can also be specified by --template
- BREAKING CHANGE Field selectors changed from uppercased to lowercased
- BREAKING CHANGE Rename digested reference selector to reference

Deprecated Features

For oras discover, --output has been covered by --format, thus marked as deprecated

Bug Fixes

Fix oras blob fetch failed to output to stdout in TTY mode #1268: blob fetch failed to output to stdout in terminal mode
Fix pushing with multiple tags will corrupt --format xxx output #1300: pushing with multiple tags will corrupt --format output
Fix Using ORAS from snap can't authenticate with gcloud credential helper #1079: snap build cannot read default credentials file
Minor fixes

Other Changes

Bump all GHA to Node 20
UX improvement
- Improve error message: Need to improve error message when basic auth flags are used with identity token flags #1340
- Show placeholder when artifactType is not presented in an index referrer: oras discover should show a placeholder of artifactType if it's not presented in an index referrer #1108
- Show artifact type when pushing files: Show artifact type when pushing files #1061
Improved live progress output for terminal: feat: add color to progress mark and bar #1344
- Colored output
- Smooth download speed display to reduce fluctuation

Detailed Commits

bump: tag and release ORAS CLI v1.2.0-beta.1 by @qweeah in bump: tag and release ORAS CLI v1.2.0-beta.1 #1266
doc (spec): add error message guideline by @FeynmanZhou in doc (spec): add error message guideline #1163
build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 by @dependabot in build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 #1269
build(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 by @dependabot in build(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 #1270
build(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 in /test/e2e #1278
build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 #1272
build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 in /test/e2e by @dependabot in build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 in /test/e2e #1271
fix(e2e): update ZOT image by @qweeah in fix(e2e): update ZOT image #1284
build(deps): bump golang.org/x/term from 0.17.0 to 0.18.0 by @dependabot in build(deps): bump golang.org/x/term from 0.17.0 to 0.18.0 #1279
test(unit): exclude darwin from go build constraint by @wangxiaoxuan273 in test(unit): exclude darwin from go build constraint #1289
refactor: pass cobra.Command to all cmd exec functions by @TerryHowe in refactor: pass cobra.Command to all cmd exec functions #1285
fix: make --output - implies --no-tty by @wangxiaoxuan273 in fix: make --output - implies --no-tty #1286
build(actions): update github actions for Node 20 by @TerryHowe in build(actions): update github actions for Node 20 #1287
fix: Revert github actions coverage until fixed by @TerryHowe in fix: Revert github actions coverage until fixed #1290
feat: Use cobra.Command.OutOrStdout method for output by @TerryHowe in feat: Use cobra.Command.OutOrStdout method for output #1288
build(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 in /test/e2e #1296
build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 in /test/e2e #1297
build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 in /test/e2e #1305
refactor: add stdout to metadata handlers by @qweeah in refactor: add stdout to metadata handlers #1312
bump: bump oras-go to 2.5.0 by @wangxiaoxuan273 in bump: bump oras-go to 2.5.0 #1303
refactor: use command output in status output by @qweeah in refactor: use command output in status output #1314
chore: using const to replace string by @LinuxSuRen in chore: using const to replace string #1316
refactor: make command accessible in option parser by @wangxiaoxuan273 in refactor: make command accessible in option parser #1315
bump: update golang to 1.22 by @TerryHowe in bump: update golang to 1.22 #1282
build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 #1323
build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 by @dependabot in build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 #1322
bump(ci): update codecov gha to v4 by @qweeah in bump(ci): update codecov gha to v4 #1324
bump(ci): update golangci-lint to v4 by @qweeah in bump(ci): update golangci-lint to v4 #1325
feat: support --format for oras pull by @qweeah in feat: support --format for oras pull #1293
feat: support --platform for oras attach by @qweeah in feat: support --platform for oras attach #1309
feat: show artifact type when pushing files by @wangxiaoxuan273 in feat: show artifact type when pushing files #1320
fix: oras push should return error when artifacttype is empty for spec 1.1 by @wangxiaoxuan273 in fix: oras push should return error when artifacttype is empty for spec 1.1 #1317
build(ci): add dependabot to update ci version automatically by @qweeah in build(ci): add dependabot to update ci version automatically #1326
build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 by @dependabot in build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 #1328
build(deps): bump goreleaser/goreleaser-action from 2 to 5 by @dependabot in build(deps): bump goreleaser/goreleaser-action from 2 to 5 #1329
build(deps): bump actions/setup-go from 4 to 5 by @dependabot in build(deps): bump actions/setup-go from 4 to 5 #1331
build(deps): bump actions/stale from 8 to 9 by @dependabot in build(deps): bump actions/stale from 8 to 9 #1330
build(deps): bump github/codeql-action from 2 to 3 by @dependabot in build(deps): bump github/codeql-action from 2 to 3 #1332
feat: support --format in manifest fetch command by @qweeah in feat: support --format in manifest fetch command #1295
ux: improve the usage doc of --image-spec by @wangxiaoxuan273 in ux: improve the usage doc of --image-spec #1334
feat: support --format in oras discover by @qweeah in feat: support --format in oras discover #1299
chore: add preview feature mark to platform-specific attaching by @qweeah in chore: add preview feature mark to platform-specific attaching #1337
feat: oras discover should show a placeholder of artifactType if it's not presented by @wangxiaoxuan273 in feat: oras discover should show a placeholder of artifactType if it's not presented #1336
feat: make image spec preview by @wangxiaoxuan273 in feat: make image spec preview #1338
feat: make --identity-token an alias of --password by @wangxiaoxuan273 in feat: make --identity-token an alias of --password #1294
fix: discard tagging output when pushing with formatted output by @qweeah in fix: discard tagging output when pushing with formatted output #1302
feat: add color to progress mark and bar by @qweeah in feat: add color to progress mark and bar #1344
feat: make all go-template key lower-cased by @qweeah in feat: make all go-template key lower-cased #1343
feat: improve error message when detecting conflicting flags by @wangxiaoxuan273 in feat: improve error message when detecting conflicting flags #1345
feat: add mTLS options by @sabre1041 in feat: add mTLS options #1319
chore: set go version to 1.22.0 in go.mod by @Amulyam24 in chore: set go version to 1.22.0 in go.mod #1351
fix: fix failed Windows unit test by @wangxiaoxuan273 in fix: fix failed Windows unit test #1352
chore(ux): optimize progress bar by @qweeah in chore(ux): optimize progress bar #1349
fix: fix error message when output is used before format for oras discover by @wangxiaoxuan273 in fix: fix error message when output is used before format for oras discover #1354
fix: return error when --format and --pretty are both used by @wangxiaoxuan273 in fix: return error when --format and --pretty are both used #1359
fix: ignore --pretty when --output is used for oras manifest fetch by @wangxiaoxuan273 in fix: ignore --pretty when --output is used for oras manifest fetch #1363
build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 in /test/e2e #1364
build(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in build(deps): bump golangci/golangci-lint-action from 4 to 5 #1370
build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 in /test/e2e #1369
feat: improve error message of when a set of flags is required to use together by @wangxiaoxuan273 in feat: improve error message of when a set of flags is required to use together #1358
build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 in /test/e2e #1371
refactor: move logger method to command by @TerryHowe in refactor: move logger method to command #1355
refactor: Move ShortDigest out of display package by @TerryHowe in refactor: Move ShortDigest out of display package #1373
build(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 by @dependabot in build(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 #1374
fix: Replace obsolete html element by @TerryHowe in fix: Replace obsolete html element #1372
chore: project selected fields from OCI descriptor by @qweeah in chore: project selected fields from OCI descriptor #1362
refactor: No error return for print by @TerryHowe in refactor: No error return for print #1375
build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 in /test/e2e #1376
feat: add pushed tags to metadata by @qweeah in feat: add pushed tags to metadata #1346
doc(spec): formatted ORAS CLI output by @FeynmanZhou in doc(spec): formatted ORAS CLI output #1199
build(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in build(deps): bump golangci/golangci-lint-action from 5 to 6 #1379
feat: add --template and support --format go-template=TEMPLATE experience by @qweeah in feat: add --template and support --format go-template=TEMPLATE experience #1377
bump: update Golang to v1.22.3 by @qweeah in bump: update Golang to v1.22.3 #1380
ci(release): add dispatch GHA for snapcraft classic release by @qweeah in ci(release): add dispatch GHA for snapcraft classic release #1256

Signed-off-by: Billy Zha <jinzha1@microsoft.com>

codecov · 2024-05-14T14:23:49Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 85.02%. Comparing base (b1cb8ea) to head (ed8d791).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1381   +/-   ##
=======================================
  Coverage   85.02%   85.02%           
=======================================
  Files         107      107           
  Lines        3806     3806           
=======================================
  Hits         3236     3236           
  Misses        341      341           
  Partials      229      229

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

TerryHowe

/lgtm

shizhMSFT

LGTM

sabre1041

LGTM

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [oras-project/oras](https://togithub.com/oras-project/oras) | minor | `v1.1.0` -> `v1.2.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>oras-project/oras (oras-project/oras)</summary> ### [`v1.2.0`](https://togithub.com/oras-project/oras/releases/tag/v1.2.0) [Compare Source](https://togithub.com/oras-project/oras/compare/v1.1.0...v1.2.0) #### New Features - `oras` is compliant with OCI [image-spec v1.1.0](https://togithub.com/opencontainers/image-spec/blob/v1.1.0) and [distribution-spec v1.1.0](https://togithub.com/opencontainers/distribution-spec/tree/v1.1.0) - Introduce brand-new default terminal experience - Show live progress for the following commands: - `oras copy` - `oras pull` - `oras push` - `oras attach` - `oras blob fetch` - `oras blob push` - The new terminal experience can be turned off via the preview flag `--no-tty` - Support deletion of manifests and blobs in OCI image layout - Support X.509 mTLS authentication with OCI registries #### Preview Features - **BREAKING CHANGE** Registries supporting `Referrers API` prior to [distribution-spec v1.1.0-rc4](https://togithub.com/opencontainers/distribution-spec/tree/v1.1.0-rc4) will fall back to `Referrers tag schema`, causing unexpected results of `oras attach` and `oras discover` commands - Introduce `--platform` to `oras attach` for better multi-arch attaching experience, which allows adding referrer artifact to a specific sub-platform - Re-purpose the flag `--recursive` of `oras cp` from [extended copy](https://oras.land/docs/client_libraries/overview#extended-copy) to copy an artifact or a multi-arch image and its referrers - Promote `--image-spec` to a preview flag from experimental #### Experimental Features - **BREAKING CHANGE** `oras discover` shows `tree` view output by default - Introduce formatted output via `--format` by implementing the [specification](https://togithub.com/oras-project/oras/blob/v1.2.0/docs/proposals/formatted-output.md) - Formatted output is available to the following commands: - `oras pull` - `oras push` - `oras attach` - `oras discover` - `oras manifest fetch` - Examples: - `--format json` to print operation result as a JSON object - `--format "go-template={{ .digest }}"` to print the digest of the manifest using [Go template](https://pkg.go.dev/text/template) - Template can also be specified by `--template` - Introduce `oras resolve` to get the digest of an artifact #### Deprecation - `oras discover`: `--output` is marked as deprecated and succeeded by `--format` #### Bug Fixes - Fix [#1079](https://togithub.com/oras-project/oras/issues/1079): Snaps build cannot read default credentials file - Fix [#1096](https://togithub.com/oras-project/oras/issues/1096): Mixed request number in the debug mode - Fix [#1106](https://togithub.com/oras-project/oras/issues/1106): Flag `--plain-http=false` does not work for local registries - Fix [#1129](https://togithub.com/oras-project/oras/issues/1129): `oras cp -r` fails if index has a child manifest as subject - Minor fixes #### Other Changes - Improve UX - `oras discover`: show placeholder when `artifactType` is not presented in an index referrer - `oras push`: show artifact type when pushing files - Improve error message based on [ORAS CLI error handling guildline](https://togithub.com/oras-project/oras/blob/v1.2.0/docs/proposals/error-handling-guideline.md) - Improve identity token input by a new flag `--identity-token` to replace `--password` without `--username` - Improve performance - Reduce authentication request count for`oras copy`, `oras manifest delete`, and `oras blob delete` - Support blob mounting across repositories in the same registry for `oras copy` - Update dependencies - Update to Golang `1.22.3` - Minor security enhancements *** ### What's Changed Since RC.1 #### Other Changes - Improve documentation - Update dependencies #### Detailed Commits - bump: tag and release ORAS CLI v1.2.0-rc.1 by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1381](https://togithub.com/oras-project/oras/pull/1381) - fix: remove non-classic snap plugins by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1383](https://togithub.com/oras-project/oras/pull/1383) - fix: oras cp documentation by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/1384](https://togithub.com/oras-project/oras/pull/1384) - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1385](https://togithub.com/oras-project/oras/pull/1385) - refactor: Get rid of deprecated PrintStatus method by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/1378](https://togithub.com/oras-project/oras/pull/1378) - build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.18.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1388](https://togithub.com/oras-project/oras/pull/1388) - build(deps): bump github.com/onsi/ginkgo/v2 from 2.18.0 to 2.19.0 in /test/e2e by [@dependabot](https://togithub.com/dependabot) in [https://github.com/oras-project/oras/pull/1390](https://togithub.com/oras-project/oras/pull/1390) - chore: Remove deprecated PrintStatus method by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/1389](https://togithub.com/oras-project/oras/pull/1389) - doc: verify local files by [@qweeah](https://togithub.com/qweeah) in [https://github.com/oras-project/oras/pull/1386](https://togithub.com/oras-project/oras/pull/1386) - fix: remove call to deprecated print by [@TerryHowe](https://togithub.com/TerryHowe) in [https://github.com/oras-project/oras/pull/1392](https://togithub.com/oras-project/oras/pull/1392) **Full Changelog**: oras-project/oras@v1.2.0-rc.1...v1.2.0 #### Notes This release was signed with `46D3 369B 393F 6F82 71FD 1CE8 F86E C70D 2B0C 404F` ([@qweeah](https://togithub.com/qweeah)'s GPG key) which can be found [here](https://togithub.com/qweeah.gpg). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/PingCAP-QE/artifacts).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

bump: tag and release ORAS CLI v1.2.0-rc.1

ed8d791

Signed-off-by: Billy Zha <jinzha1@microsoft.com>

qweeah marked this pull request as ready for review May 14, 2024 14:24

qweeah requested review from sajayantony, shizhMSFT, SteveLasker and TerryHowe as code owners May 14, 2024 14:24

TerryHowe approved these changes May 14, 2024

View reviewed changes

sajayantony approved these changes May 14, 2024

View reviewed changes

shizhMSFT approved these changes May 15, 2024

View reviewed changes

LinuxSuRen approved these changes May 15, 2024

View reviewed changes

sabre1041 approved these changes May 15, 2024

View reviewed changes

qweeah merged commit d6f0ed8 into oras-project:main May 17, 2024

qweeah mentioned this pull request May 28, 2024

bump: tag and release ORAS CLI v1.2.0 #1393

Merged

BrewTestBot mentioned this pull request May 30, 2024

oras 1.2.0 Homebrew/homebrew-core#173214

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

bump: tag and release ORAS CLI v1.2.0-rc.1 #1381

bump: tag and release ORAS CLI v1.2.0-rc.1 #1381

Uh oh!

qweeah commented May 14, 2024 •

edited

Loading

Uh oh!

codecov bot commented May 14, 2024

Uh oh!

TerryHowe left a comment

Uh oh!

shizhMSFT left a comment

Uh oh!

sabre1041 left a comment

Uh oh!

Uh oh!

bump: tag and release ORAS CLI v1.2.0-rc.1 #1381

bump: tag and release ORAS CLI v1.2.0-rc.1 #1381

Uh oh!

Conversation

qweeah commented May 14, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

New Features

Experimental Features

Deprecated Features

Bug Fixes

Other Changes

Detailed Commits

Uh oh!

codecov bot commented May 14, 2024

Codecov Report

Uh oh!

TerryHowe left a comment

Choose a reason for hiding this comment

Uh oh!

shizhMSFT left a comment

Choose a reason for hiding this comment

Uh oh!

sabre1041 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

qweeah commented May 14, 2024 •

edited

Loading