chore(deps): update dependency oras-project/oras to v1.3.5 #213

Merged

CSRBot merged 1 commits from renovate/oras-project-oras-1.x into master 2026-10-19 03:21:12 +02:00

Conversation 0 Commits 1 Files Changed 1

+1 -1

CSRBot commented 2026-10-19 03:20:34 +02:00

Collaborator

Copy link

Copy source

This PR contains the following updates:

Package	Update	Change
oras-project/oras	patch	1.3.4 → 1.3.5

---

Release Notes

oras-project/oras (oras-project/oras)

v1.3.5

Compare Source

Changelog

• d6e7b58 bump: tag and release ORAS CLI v1.3.5 (#​2244)
• 4431829 docs: require cve fixes to land before preparing a release (#​2258)
• 8ee66ac docs: add ORAS CLI release process (#​2248)
• e09a8bb chore: bump oras-go to v2.6.4 in e2e tests (#​2247)
• 8270f5f chore: update oras-go to v2.6.4 (#​2242)
• ba3a3dc fix: validate extra destination tags before pushing (#​2237)
• 6ca02d0 build(deps): bump the github-actions group across 1 directory with 3 updates (#​2240)
• c9ccd95 build(deps): bump library/golang from 1.27.1-alpine to 1.27.2-alpine (#​2239)
• b2dc645 build(deps): bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1 in /test/e2e (#​2238)
• bae5056 Preserve the index media type when the index body omits it (#​2235)
• 227fc74 chore: update oras-go to v2.6.3 (#​2234)
• 4d6c6e8 build(deps): bump golang.org/x/term from 0.46.0 to 0.47.0 (#​2232)
• 21193d8 build(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0 (#​2231)
• 8b3b8bd Fall back to config media type for old-style artifact types (#​2114)
• e58fee3 fix: validate format before special handling (#​2205)
• 4e9a756 fix: validate empty OCI layout path with digest (#​2230)
• b0a7bda fix: restore pretty output for manifest fetch-config (#​2228)
• ab0ff3d fix: limit manifest config fetch size (#​2222)
• 80f72e1 build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the github-actions group (#​2223)
• d608889 docs(e2e): correct test/e2e/README.md references (#​2219)
• 8d737cd chore: drop dead .gitignore entries for the Docker e2e registry mounts (#​2220)
• 02c5c20 ci: remove Docker-based e2e test run (#​2208)
• d41f4eb fix: detect credentials in multiple JSON values (#​2218)
• 5c33ab2 ci: pin e2e-k8s.yml action refs to commit SHAs (#​2216)
• 1033ebb fix: generate coverage report in covhtml (#​2214)
• ccf3e26 chore: update golang.org/x/crypto (#​2207)
• 715917d feat(cp): support multiple platforms (#​2191)
• 488b3fa fix: correct manifest fetch format error (#​2203)
• a826d9a fix: clarify absolute path validation warning (#​2201)
• 7327064 ci: replace action-publish with snapcraft CLI (#​2199)
• 1dd0de8 build(deps): bump the github-actions group with 4 updates (#​2200)
• 7c53cbf fix: clean up partial pull output on failure (#​2194)
• bdf7835 test(errors): cover the CLI error type and its constructors (#​2196)
• 88f46a4 build(deps): bump github.com/onsi/gomega from 1.43.1 to 1.44.0 in /test/e2e (#​2195)
• 8c979f1 test(display): cover the pulled-file model (#​2189)
• a0cd4de feat: add Kubernetes-based e2e testing infrastructure (#​1913)
• be79214 fix: fix concurrency in Tagged (#​2183)
• 44e831a ci: publish stable rolling image tags (#​2184)
• bc28b9c fix: keep an index's own children out of its reported referrers (#​2174)
• 458c186 build(deps): bump the github-actions group across 1 directory with 3 updates (#​2186)
• ba0b7df build(deps): bump library/alpine from 3.24.1 to 3.24.2 (#​2185)
• 8016ba3 fix: only infer platform from OCI image configs (#​2177)
• a9965b3 test(display): cover the raw content handlers (#​2182)
• e0dd8f2 build(deps): bump github.com/onsi/gomega from 1.43.0 to 1.43.1 in /test/e2e (#​2180)
• ce4dc19 fix(display): report files as [] instead of null when a pull produces none (#​2175)
• 0d1f61e test(display): cover the metadata model types (#​2176)
• 283000c build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 in /test/e2e (#​2179)
• 87495d5 fix(display): report referenceAsTags as [] instead of null when untagged (#​2170)
• 4e589f5 feat: add release automation script (#​1992)
• 1cd8618 test(display): split template repo handler tests to match source files (#​2171)
• 27c2d04 test(display): cover the pull metadata handler (#​2168)
• ec461af build(deps): bump the github-actions group with 2 updates (#​2172)
• 0afd96e build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 in /test/e2e (#​2167)
• 36a446d build(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 (#​2166)
• d1c4808 test(display): cover the template and descriptor metadata handlers (#​2164)
• d0da4a9 build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 (#​2162)
• 898a195 fix(cli): pluralize "argument" in argument-count errors (#​2161)
• 4728be6 test(credential): fix TestNewStoreError failing on Windows (#​2159)
• 003dfd1 build(deps): bump library/golang from 1.27.0-alpine to 1.27.1-alpine (#​2160)
• c508a57 build(deps): bump the github-actions group across 1 directory with 5 updates (#​2149)
• b16846a fix(ci): resolve licenserc go.mod path relative to config directory (#​2155)
• f54f368 fix: attribute recursive copy tag failures to the destination (#​2157)
• c75e8f3 feat(ci): add windows/arm64 build to github release (#​2153)
• 749d9c1 build(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0 in /test/e2e (#​2147)
• 86eb615 build(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (#​2146)
• 71d17dd build: bump Go toolchain to 1.26 (#​2145)
• 20df556 ci: fetch full history for release changelog (#​2143)

Verification

Release artifacts are signed with the ORAS project release key C6FC42F0DE84A345FAADB742F44418110791EF37. Signatures (.asc files) are attached to this release.

Public keys are available in the KEYS file.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [oras-project/oras](https://github.com/oras-project/oras) | patch | `1.3.4` → `1.3.5` | --- ### Release Notes <details> <summary>oras-project/oras (oras-project/oras)</summary> ### [`v1.3.5`](https://github.com/oras-project/oras/releases/tag/v1.3.5) [Compare Source](https://github.com/oras-project/oras/compare/v1.3.4...v1.3.5) #### Changelog - [`d6e7b58`](https://github.com/oras-project/oras/commit/d6e7b583b9afc7fa3798de77181c53c94418d727) bump: tag and release ORAS CLI v1.3.5 ([#&#8203;2244](https://github.com/oras-project/oras/issues/2244)) - [`4431829`](https://github.com/oras-project/oras/commit/44318293132b5725ca03f279ca58ba258f3e9303) docs: require cve fixes to land before preparing a release ([#&#8203;2258](https://github.com/oras-project/oras/issues/2258)) - [`8ee66ac`](https://github.com/oras-project/oras/commit/8ee66acb5b8ecb97c2bcb8c8e350f8919c656f8b) docs: add ORAS CLI release process ([#&#8203;2248](https://github.com/oras-project/oras/issues/2248)) - [`e09a8bb`](https://github.com/oras-project/oras/commit/e09a8bbe9837a70465801a6a9fc400fcf4c29a4f) chore: bump oras-go to v2.6.4 in e2e tests ([#&#8203;2247](https://github.com/oras-project/oras/issues/2247)) - [`8270f5f`](https://github.com/oras-project/oras/commit/8270f5ffa9ed7076bddd8120cc184c66494f8c30) chore: update oras-go to v2.6.4 ([#&#8203;2242](https://github.com/oras-project/oras/issues/2242)) - [`ba3a3dc`](https://github.com/oras-project/oras/commit/ba3a3dc53c8d676d1ed721673f9739bbab7b0130) fix: validate extra destination tags before pushing ([#&#8203;2237](https://github.com/oras-project/oras/issues/2237)) - [`6ca02d0`](https://github.com/oras-project/oras/commit/6ca02d0623152537dee5a066070d82d6b9f2f8f6) build(deps): bump the github-actions group across 1 directory with 3 updates ([#&#8203;2240](https://github.com/oras-project/oras/issues/2240)) - [`c9ccd95`](https://github.com/oras-project/oras/commit/c9ccd9587f4856f84568337e217923a4471ae58d) build(deps): bump library/golang from 1.27.1-alpine to 1.27.2-alpine ([#&#8203;2239](https://github.com/oras-project/oras/issues/2239)) - [`b2dc645`](https://github.com/oras-project/oras/commit/b2dc64558706a21d8bc02705fc2584b80b62ed1f) build(deps): bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1 in /test/e2e ([#&#8203;2238](https://github.com/oras-project/oras/issues/2238)) - [`bae5056`](https://github.com/oras-project/oras/commit/bae5056ea14f8f0cbcc7e1cfcbc8a75d02bcfbd1) Preserve the index media type when the index body omits it ([#&#8203;2235](https://github.com/oras-project/oras/issues/2235)) - [`227fc74`](https://github.com/oras-project/oras/commit/227fc742ae383c12a135ec314dc8e1eef38d2438) chore: update oras-go to v2.6.3 ([#&#8203;2234](https://github.com/oras-project/oras/issues/2234)) - [`4d6c6e8`](https://github.com/oras-project/oras/commit/4d6c6e8669cc914b7661dca3ecb349c517aad3dd) build(deps): bump golang.org/x/term from 0.46.0 to 0.47.0 ([#&#8203;2232](https://github.com/oras-project/oras/issues/2232)) - [`21193d8`](https://github.com/oras-project/oras/commit/21193d8f5a5d072442cf36f213997d9c079f6fbd) build(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0 ([#&#8203;2231](https://github.com/oras-project/oras/issues/2231)) - [`8b3b8bd`](https://github.com/oras-project/oras/commit/8b3b8bd42a49c06b0263a2715c6d93df4b9cf4c4) Fall back to config media type for old-style artifact types ([#&#8203;2114](https://github.com/oras-project/oras/issues/2114)) - [`e58fee3`](https://github.com/oras-project/oras/commit/e58fee37ea27a1b7a372c68d5c0d1c1b1c73f523) fix: validate format before special handling ([#&#8203;2205](https://github.com/oras-project/oras/issues/2205)) - [`4e9a756`](https://github.com/oras-project/oras/commit/4e9a756e8e56ad9d88edfaa91c1fa672470e956e) fix: validate empty OCI layout path with digest ([#&#8203;2230](https://github.com/oras-project/oras/issues/2230)) - [`b0a7bda`](https://github.com/oras-project/oras/commit/b0a7bdafe0bf643c9ebea893da7bd4b894f95a82) fix: restore pretty output for manifest fetch-config ([#&#8203;2228](https://github.com/oras-project/oras/issues/2228)) - [`ab0ff3d`](https://github.com/oras-project/oras/commit/ab0ff3d60601d15851fc8efe22061c35d3ea67e6) fix: limit manifest config fetch size ([#&#8203;2222](https://github.com/oras-project/oras/issues/2222)) - [`80f72e1`](https://github.com/oras-project/oras/commit/80f72e14f17bfc635f311994e56ca06637b166ea) build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the github-actions group ([#&#8203;2223](https://github.com/oras-project/oras/issues/2223)) - [`d608889`](https://github.com/oras-project/oras/commit/d60888982bb434831a1186d01f281f672368cd80) docs(e2e): correct test/e2e/README.md references ([#&#8203;2219](https://github.com/oras-project/oras/issues/2219)) - [`8d737cd`](https://github.com/oras-project/oras/commit/8d737cd0042cefe441c2c21f302d0bf87cf4c14c) chore: drop dead .gitignore entries for the Docker e2e registry mounts ([#&#8203;2220](https://github.com/oras-project/oras/issues/2220)) - [`02c5c20`](https://github.com/oras-project/oras/commit/02c5c20b29a857cc5c02b07303926a4423939db0) ci: remove Docker-based e2e test run ([#&#8203;2208](https://github.com/oras-project/oras/issues/2208)) - [`d41f4eb`](https://github.com/oras-project/oras/commit/d41f4ebf6fc5f1135de9cc4c0e573ff692fd1c17) fix: detect credentials in multiple JSON values ([#&#8203;2218](https://github.com/oras-project/oras/issues/2218)) - [`5c33ab2`](https://github.com/oras-project/oras/commit/5c33ab2eb1688246d9019a0f77086b910dc928fd) ci: pin e2e-k8s.yml action refs to commit SHAs ([#&#8203;2216](https://github.com/oras-project/oras/issues/2216)) - [`1033ebb`](https://github.com/oras-project/oras/commit/1033ebb7ad67e45d32ec744d7177258b456c1f4e) fix: generate coverage report in covhtml ([#&#8203;2214](https://github.com/oras-project/oras/issues/2214)) - [`ccf3e26`](https://github.com/oras-project/oras/commit/ccf3e265b6663e070a74a65bf03a207a112982e6) chore: update golang.org/x/crypto ([#&#8203;2207](https://github.com/oras-project/oras/issues/2207)) - [`715917d`](https://github.com/oras-project/oras/commit/715917d0e3f7f2c44fcaf8f2db98adf1de9eb7c2) feat(cp): support multiple platforms ([#&#8203;2191](https://github.com/oras-project/oras/issues/2191)) - [`488b3fa`](https://github.com/oras-project/oras/commit/488b3fab108b77fa2d3ac54eca6e56db41dbcdcb) fix: correct manifest fetch format error ([#&#8203;2203](https://github.com/oras-project/oras/issues/2203)) - [`a826d9a`](https://github.com/oras-project/oras/commit/a826d9aa24c1ee82a84e27c4df0584859d1bcb22) fix: clarify absolute path validation warning ([#&#8203;2201](https://github.com/oras-project/oras/issues/2201)) - [`7327064`](https://github.com/oras-project/oras/commit/73270644f4c1be45334af635b55233239acba6d2) ci: replace action-publish with snapcraft CLI ([#&#8203;2199](https://github.com/oras-project/oras/issues/2199)) - [`1dd0de8`](https://github.com/oras-project/oras/commit/1dd0de89bd4292d78d817b4c934c70c826df9540) build(deps): bump the github-actions group with 4 updates ([#&#8203;2200](https://github.com/oras-project/oras/issues/2200)) - [`7c53cbf`](https://github.com/oras-project/oras/commit/7c53cbf2c880ed160c9e08b0e6c22c6820a70f78) fix: clean up partial pull output on failure ([#&#8203;2194](https://github.com/oras-project/oras/issues/2194)) - [`bdf7835`](https://github.com/oras-project/oras/commit/bdf7835108c666aa9206146de715fb890ed99f6f) test(errors): cover the CLI error type and its constructors ([#&#8203;2196](https://github.com/oras-project/oras/issues/2196)) - [`88f46a4`](https://github.com/oras-project/oras/commit/88f46a4b0be1426385ffa4201c66b550da696ed5) build(deps): bump github.com/onsi/gomega from 1.43.1 to 1.44.0 in /test/e2e ([#&#8203;2195](https://github.com/oras-project/oras/issues/2195)) - [`8c979f1`](https://github.com/oras-project/oras/commit/8c979f1f30d0a4049addff5fcff8de48a4afe583) test(display): cover the pulled-file model ([#&#8203;2189](https://github.com/oras-project/oras/issues/2189)) - [`a0cd4de`](https://github.com/oras-project/oras/commit/a0cd4de5cfcddc825d8e9979bda5edcd6d422f6b) feat: add Kubernetes-based e2e testing infrastructure ([#&#8203;1913](https://github.com/oras-project/oras/issues/1913)) - [`be79214`](https://github.com/oras-project/oras/commit/be7921423828a0d4d4b56c995fe98c96de9f7a40) fix: fix concurrency in Tagged ([#&#8203;2183](https://github.com/oras-project/oras/issues/2183)) - [`44e831a`](https://github.com/oras-project/oras/commit/44e831af07247fdf99ff7c1ee9697944b53580e8) ci: publish stable rolling image tags ([#&#8203;2184](https://github.com/oras-project/oras/issues/2184)) - [`bc28b9c`](https://github.com/oras-project/oras/commit/bc28b9c7db34b286e10861f30fe6de2b1e210d5e) fix: keep an index's own children out of its reported referrers ([#&#8203;2174](https://github.com/oras-project/oras/issues/2174)) - [`458c186`](https://github.com/oras-project/oras/commit/458c1865e441537092ee2bdb1e2924fa91166c3f) build(deps): bump the github-actions group across 1 directory with 3 updates ([#&#8203;2186](https://github.com/oras-project/oras/issues/2186)) - [`ba0b7df`](https://github.com/oras-project/oras/commit/ba0b7df61b7b985939f20c941715ca14e312d69f) build(deps): bump library/alpine from 3.24.1 to 3.24.2 ([#&#8203;2185](https://github.com/oras-project/oras/issues/2185)) - [`8016ba3`](https://github.com/oras-project/oras/commit/8016ba39bcbf24fa9333afd9b1211efb88957b1f) fix: only infer platform from OCI image configs ([#&#8203;2177](https://github.com/oras-project/oras/issues/2177)) - [`a9965b3`](https://github.com/oras-project/oras/commit/a9965b334e2b061abe396cf30cf275d79ab86024) test(display): cover the raw content handlers ([#&#8203;2182](https://github.com/oras-project/oras/issues/2182)) - [`e0dd8f2`](https://github.com/oras-project/oras/commit/e0dd8f2de21d24e9192e87270df7a7f6dc38fa0e) build(deps): bump github.com/onsi/gomega from 1.43.0 to 1.43.1 in /test/e2e ([#&#8203;2180](https://github.com/oras-project/oras/issues/2180)) - [`ce4dc19`](https://github.com/oras-project/oras/commit/ce4dc19c325d32a9b13681946a287520c92a1699) fix(display): report files as \[] instead of null when a pull produces none ([#&#8203;2175](https://github.com/oras-project/oras/issues/2175)) - [`0d1f61e`](https://github.com/oras-project/oras/commit/0d1f61e69d36ed1794e71b879ecd7662e643a771) test(display): cover the metadata model types ([#&#8203;2176](https://github.com/oras-project/oras/issues/2176)) - [`283000c`](https://github.com/oras-project/oras/commit/283000c693d8fae70b9d1f8853bba729fefc3cd9) build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 in /test/e2e ([#&#8203;2179](https://github.com/oras-project/oras/issues/2179)) - [`87495d5`](https://github.com/oras-project/oras/commit/87495d530de96ef7114f5b7d7392cf3a0ecf7272) fix(display): report referenceAsTags as \[] instead of null when untagged ([#&#8203;2170](https://github.com/oras-project/oras/issues/2170)) - [`4e589f5`](https://github.com/oras-project/oras/commit/4e589f5dd7560cf2dc63144f70119c517f027aa5) feat: add release automation script ([#&#8203;1992](https://github.com/oras-project/oras/issues/1992)) - [`1cd8618`](https://github.com/oras-project/oras/commit/1cd8618b32ff7e42fdae5646c51e8afc8ef696f2) test(display): split template repo handler tests to match source files ([#&#8203;2171](https://github.com/oras-project/oras/issues/2171)) - [`27c2d04`](https://github.com/oras-project/oras/commit/27c2d042c21ff9861fc96415ebe6c237973917cc) test(display): cover the pull metadata handler ([#&#8203;2168](https://github.com/oras-project/oras/issues/2168)) - [`ec461af`](https://github.com/oras-project/oras/commit/ec461af45f6f9679bba8e16f4b538fe55ed7b6b2) build(deps): bump the github-actions group with 2 updates ([#&#8203;2172](https://github.com/oras-project/oras/issues/2172)) - [`0afd96e`](https://github.com/oras-project/oras/commit/0afd96e3afe031ebf8914a7e8c61fd83711d0117) build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 in /test/e2e ([#&#8203;2167](https://github.com/oras-project/oras/issues/2167)) - [`36a446d`](https://github.com/oras-project/oras/commit/36a446d68bb4426f36a6c789cede81272d827d9f) build(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 ([#&#8203;2166](https://github.com/oras-project/oras/issues/2166)) - [`d1c4808`](https://github.com/oras-project/oras/commit/d1c4808007895b6656fb161d08c707ce791fbbc5) test(display): cover the template and descriptor metadata handlers ([#&#8203;2164](https://github.com/oras-project/oras/issues/2164)) - [`d0da4a9`](https://github.com/oras-project/oras/commit/d0da4a96a6893d2e7f44ea60a8f317a2fcce1cf9) build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 ([#&#8203;2162](https://github.com/oras-project/oras/issues/2162)) - [`898a195`](https://github.com/oras-project/oras/commit/898a1950695c058a89facae5537cab5875da4014) fix(cli): pluralize "argument" in argument-count errors ([#&#8203;2161](https://github.com/oras-project/oras/issues/2161)) - [`4728be6`](https://github.com/oras-project/oras/commit/4728be697c04437640f6ca13308068724c4adf5c) test(credential): fix TestNewStoreError failing on Windows ([#&#8203;2159](https://github.com/oras-project/oras/issues/2159)) - [`003dfd1`](https://github.com/oras-project/oras/commit/003dfd1b050ba67d1f2969d24df4fcab59f29d19) build(deps): bump library/golang from 1.27.0-alpine to 1.27.1-alpine ([#&#8203;2160](https://github.com/oras-project/oras/issues/2160)) - [`c508a57`](https://github.com/oras-project/oras/commit/c508a57d3479d2f8648542540e081ce058ced5c1) build(deps): bump the github-actions group across 1 directory with 5 updates ([#&#8203;2149](https://github.com/oras-project/oras/issues/2149)) - [`b16846a`](https://github.com/oras-project/oras/commit/b16846a47c689db5ad559b068c5d9ca45129dd8e) fix(ci): resolve licenserc go.mod path relative to config directory ([#&#8203;2155](https://github.com/oras-project/oras/issues/2155)) - [`f54f368`](https://github.com/oras-project/oras/commit/f54f368af1fb3d45c2ac33287c23c9b100a13385) fix: attribute recursive copy tag failures to the destination ([#&#8203;2157](https://github.com/oras-project/oras/issues/2157)) - [`c75e8f3`](https://github.com/oras-project/oras/commit/c75e8f3bf66008167628841e3a627a853e183c8b) feat(ci): add windows/arm64 build to github release ([#&#8203;2153](https://github.com/oras-project/oras/issues/2153)) - [`749d9c1`](https://github.com/oras-project/oras/commit/749d9c1e453c271b6894e82698c4e9e1f41b621c) build(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0 in /test/e2e ([#&#8203;2147](https://github.com/oras-project/oras/issues/2147)) - [`86eb615`](https://github.com/oras-project/oras/commit/86eb61552d12edc760f1a938a3b5d86011437381) build(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 ([#&#8203;2146](https://github.com/oras-project/oras/issues/2146)) - [`71d17dd`](https://github.com/oras-project/oras/commit/71d17dd337598c964dbb58d3647d886c21b700b6) build: bump Go toolchain to 1.26 ([#&#8203;2145](https://github.com/oras-project/oras/issues/2145)) - [`20df556`](https://github.com/oras-project/oras/commit/20df5563afed97fd512fd2417e0a0b64c48c6b43) ci: fetch full history for release changelog ([#&#8203;2143](https://github.com/oras-project/oras/issues/2143)) #### Verification Release artifacts are signed with the ORAS project release key `C6FC42F0DE84A345FAADB742F44418110791EF37`. Signatures (`.asc` files) are attached to this release. Public keys are available in the [KEYS](https://github.com/oras-project/oras/blob/main/KEYS) file. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTYuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjExNi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->

CSRBot added 1 commit 2026-10-19 03:20:34 +02:00

chore(deps): update dependency oras-project/oras to v1.3.5 e005b458b9

CODEOWNERS rules requested review from volker.raschek 2026-10-19 03:20:34 +02:00

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-10-19 03:20:36 +02:00

CSRBot merged commit 3be51ab3d8 into master 2026-10-19 03:21:12 +02:00

CSRBot deleted branch renovate/oras-project-oras-1.x 2026-10-19 03:21:13 +02:00

Sign in to join this conversation.

Reviewers

No Reviewers

volker.raschek

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

CSRBot (CSRBot) volker.raschek (Markus Pesch)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/athens-proxy-charts#213