v0.16.0

[chengfang]

What's Changed

• refactor: Add registry scanner module by @ishitasequeira in refactor: Add registry scanner module #890
• fix: pass image tag into build image command by @pasha-codefresh in fix: pass image tag into build image command #893
• fix: wrong checkout command in documentation by @pasha-codefresh in fix: wrong checkout command in documentation #894
• fix: add build steps to create binary checksum and signature files by @chengfang in fix: add build steps to create binary checksum and signature files #901
• refactor: Add additional packages to registry-scanner by @ishitasequeira in refactor: Add additional packages to registry-scanner #900
• fix: respect log level settings by @wd in fix: respect log level settings #904
• fix: Image Updater continuously force-pushes new commits when checkout branch is specified. #895 Image Updater continuously force-pushes new commits when checkout branch is specified by @chengfang in fix: #895 Image Updater continuously force-pushes new commits when checkout branch is specified #911
• fix: log level for library from argocd by @wd in fix: log level for library from argocd #913
• fix: App of apps being overwritten by image-updater #896 App of apps being overwritten by image-updater by @chengfang in fix: #896 App of apps being overwritten by image-updater #918
• fix: delay setting git.username and git.email config till commit time by @chengfang in fix: delay setting git.username and git.email config till commit time #912
• chore: add cherry-pick-bot by @chengfang in chore: add cherry-pick-bot #931
• refactor: Add registry pkg registry scanner by @ishitasequeira in refactor: Add registry pkg registry scanner #933
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.6.0 to 2.11.0 by @dependabot in chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.6.0 to 2.11.0 #906
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 by @dependabot in chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 #908
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 #914
• chore(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in chore(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 #907
• docs: Update OWNERS by @jannfis in docs: Update OWNERS #935
• chore(deps): upgrade golangci-lint from 1.59.1 to 1.61.0 by @chengfang in chore(deps): upgrade golangci-lint from 1.59.1 to 1.61.0 #937
• chore(deps): upgrade argo-cd from 2.11.7 to 2.13.0 by @chengfang in chore(deps): upgrade argo-cd from 2.11.7 to 2.13.0 #936
• chore(deps): bump k8s.io/apimachinery to 0.31.2, add k8s.io/cri-client and k8s.io/endpointslice to replace section by @chengfang in chore(deps): bump k8s.io/apimachinery to 0.31.2, add k8s.io/cri-client and k8s.io/endpointslice to replace section #938
• chore(deps): bump codecov/codecov-action from 4 to 5 by @dependabot in chore(deps): bump codecov/codecov-action from 4 to 5 #949
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.11.0 to 2.12.0 by @dependabot in chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.11.0 to 2.12.0 #948
• chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 #946
• chore(deps): bump github.com/prometheus/client_golang from 1.20.3 to 1.20.5 by @dependabot in chore(deps): bump github.com/prometheus/client_golang from 1.20.3 to 1.20.5 #944
• chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.6.1 to 4.7.1 by @dependabot in chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.6.1 to 4.7.1 #945
• chore(deps): bump golang.org/x/crypto from 0.27.0 to 0.29.0 by @dependabot in chore(deps): bump golang.org/x/crypto from 0.27.0 to 0.29.0 #947
• Add image folder to registry scanner by @ishitasequeira in Add image folder to registry scanner #952
• chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.0 to 2.13.1 by @dependabot in chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.0 to 2.13.1 #956
• chore(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 by @dependabot in chore(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 #959
• chore(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 in /registry-scanner by @dependabot in chore(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 in /registry-scanner #953
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 by @dependabot in chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 #955
• chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 by @dependabot in chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 #958
• chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 by @dependabot in chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 #966
• Improve Application updates when write-back method is ArgoCD by @aaguilartablada in Improve Application updates when write-back method is ArgoCD #965
• update k8s.io/client-go from v1.5.2 to v0.31.0 by @kranurag7 in update k8s.io/client-go from v1.5.2 to v0.31.0 #967
• Update references of pkg/tag pkg/log pkg/options to use modules from registry-scanner by @ishitasequeira in Update references of pkg/tag pkg/log pkg/options to use modules from registry-scanner #962
• remove docker/distribution replace from go.mod by @kranurag7 in remove docker/distribution replace from go.mod #969
• fix: Image updater changes git write back file by @chengfang in fix: Image updater changes git write back file #970
• Update CI to run tests for registry-scanner separately by @ishitasequeira in Update CI to run tests for registry-scanner separately #971
• Update references of cache, env, health to use modules from registry-scanner by @ishitasequeira in Update references of cache, env, health to use modules from registry-scanner #972
• chore(ci): use files parameter in codecov-action instead of file, which was deprecated and removed by @chengfang in chore(ci): use files parameter in codecov-action instead of file, which was deprecated and removed #977
• fix: Add gpg-agent to container image by @jannfis in fix: Add gpg-agent to container image #978
• chore(deps): bump jinja2 from 3.1.4 to 3.1.5 in /docs by @dependabot in chore(deps): bump jinja2 from 3.1.4 to 3.1.5 in /docs #982
• move pkg/health out of registry-scanner by @ishitasequeira in move pkg/health out of registry-scanner #995
• chore(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 by @dependabot in chore(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 #985
• chore(doc): add description of DCO requirement in contributing.md; remove specific version from Golang the required tool by @chengfang in chore(doc): add description of DCO requirement in contributing.md; remove specific version from Golang the required tool #999
• Move references for kube, image, registry to registry-scanner by @ishitasequeira in Move references for kube, image, registry to registry-scanner #998
• chore(deps): bump google.golang.org/grpc from 1.67.1 to 1.69.2 by @dependabot in chore(deps): bump google.golang.org/grpc from 1.67.1 to 1.69.2 #986
• chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.1 to 2.13.2 by @dependabot in chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.1 to 2.13.2 #987
• chore(deps): bump alpine from 3.20 to 3.21 by @dependabot in chore(deps): bump alpine from 3.20 to 3.21 #989
• docs: correct formatting issues by @kj800x in docs: correct formatting issues #983
• CVE-2024-45338 in image-updater: Non-linear parsing of case-insensitive content in golang.org/x/net/html by @chengfang in CVE-2024-45338 in image-updater: Non-linear parsing of case-insensitive content in golang.org/x/net/html #1003
• Update reference.md to fix argument name by @lgov in Update reference.md to fix argument name #1005
• chore(deps): bump to golang.org/x/time v0.6.0 and golang.org/x/exp v00.0-20240719175910-8a7402abbf56, to sync up with main image-updater module by @chengfang in chore(deps): bump to golang.org/x/time v0.6.0 and golang.org/x/exp v00.0-20240719175910-8a7402abbf56, to sync up with main image-updater module #1006
• chore(deps): upgrade registry-scanner submodule version to the latest by @chengfang in chore(deps): upgrade registry-scanner submodule version to the latest #1007
• Keep yaml sequence indentation when writing back to Git to a kustomize file by @AlessandroZanatta in Keep yaml sequence indentation when writing back to Git to a kustomize file #1002
• chore: separate Argo specific constants from registry-scanner constants by @ishitasequeira in chore: separate Argo specific constants from registry-scanner constants #1010
• Replace common constant references by @ishitasequeira in Replace common constant references #1011
• chore(deps): upgrade github.com/go-git/go-git/v5 to v5.13.0 by @chengfang in chore(deps): upgrade github.com/go-git/go-git/v5 to v5.13.0 #1015
• Initialize the kubeClient and applicationsClientSet correctly by @ishitasequeira in Initialize the kubeClient and applicationsClientSet correctly #1025
• chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.2 to 2.13.4 by @dependabot in chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.2 to 2.13.4 #1026
• Update release process to create a separate tag for registry-scanner by @ishitasequeira in Update release process to create a separate tag for registry-scanner #1022
• chore(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2 by @dependabot in chore(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2 #1028
• chore(deps): bump google.golang.org/grpc from 1.69.2 to 1.70.0 by @dependabot in chore(deps): bump google.golang.org/grpc from 1.69.2 to 1.70.0 #1030
• chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @dependabot in chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 #1027
• chore(deps): upgrade argo-cd from 2.13.4 to 2.13.5 by @chengfang in chore(deps): upgrade argo-cd from 2.13.4 to 2.13.5 #1035
• fix: Prevent segfault with empty kustomization by @Ongy in fix: Prevent segfault with empty kustomization #1020
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 #1043
• fix(write-back): Duplicate image entries with different formats when updating two images by @chengfang in fix(write-back): Duplicate image entries with different formats when updating two images #1037
• fix: fix KustomizeImage Match function to pass added unit tests by @chengfang in fix: fix KustomizeImage Match function to pass added unit tests #1044
• chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 #1051
• chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 in /registry-scanner by @dependabot in chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 in /registry-scanner #1048
• chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 #1052
• chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.7.1 to 4.8.1 by @dependabot in chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.7.1 to 4.8.1 #1053
• chore(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.27.0 by @dependabot in chore(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.27.0 #1050
• Move to yaml.v3 and preserve comments, multiline strings, anchors in helm values by @bewinsnw in Move to yaml.v3 and preserve comments, multiline strings, anchors in helm values #1055
• chore(deps): bump jinja2 from 3.1.5 to 3.1.6 in /docs by @dependabot in chore(deps): bump jinja2 from 3.1.5 to 3.1.6 in /docs #1059
• fix: use correct default branch in multi-source applications by @aali309 in fix: use correct default branch in multi-source applications #1056
• Set up custom container registry and git server for image-updater e2e tests. by @dkarpele in Set up custom container registry and git server for image-updater e2e tests. #1061
• chore(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 by @dependabot in chore(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 #1064
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 in /registry-scanner by @dependabot in chore(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 in /registry-scanner #1063
• fix: use compact indent for sequences by @bewinsnw in fix: use compact indent for sequences #1062
• Fix multi images e2e test. by @dkarpele in Fix multi images e2e test. #1066
• [GITOPS-5120] Add e2e test for write-back GIT repository as annotation. by @dkarpele in [GITOPS-5120] Add e2e test for write-back GIT repository as annotation. #1068
• chore(deps): bump github.com/redis/go-redis/v9 from 9.6.1 to 9.6.3 by @dependabot in chore(deps): bump github.com/redis/go-redis/v9 from 9.6.1 to 9.6.3 #1070
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 #1071
• chore(deps): bump to registry-scanner/v0.1.0 by @chengfang in chore(deps): bump to registry-scanner/v0.1.0 #1079
• chore(deps): bump go version from 1.22 to 1.23 in github action files by @chengfang in chore(deps): bump go version from 1.22 to 1.23 in github action files #1081
• fix(build): add step to Makefile to generate signing gpg key (fix(build): add step to Makefile to generate signing gpg key #922); chore: fix the .phony target name for multiarch-image-push (chore: fix the .phony target name for multiarch-image-push #923) by @chengfang in fix(build): add step to Makefile to generate signing gpg key (#922); chore: fix the .phony target name for multiarch-image-push (#923) #1082
• Release 0.16.0 by @chengfang in Release 0.16.0 #1092

New Contributors

• @wd made their first contribution in fix: respect log level settings #904
• @aaguilartablada made their first contribution in Improve Application updates when write-back method is ArgoCD #965
• @kranurag7 made their first contribution in update k8s.io/client-go from v1.5.2 to v0.31.0 #967
• @kj800x made their first contribution in docs: correct formatting issues #983
• @lgov made their first contribution in Update reference.md to fix argument name #1005
• @AlessandroZanatta made their first contribution in Keep yaml sequence indentation when writing back to Git to a kustomize file #1002
• @Ongy made their first contribution in fix: Prevent segfault with empty kustomization #1020
• @bewinsnw made their first contribution in Move to yaml.v3 and preserve comments, multiline strings, anchors in helm values #1055
• @aali309 made their first contribution in fix: use correct default branch in multi-source applications #1056
• @dkarpele made their first contribution in Set up custom container registry and git server for image-updater e2e tests. #1061

Full Changelog: v0.15.2...v0.16.0

---

This discussion was created from the release v0.16.0.