chore(deps): update dependency oras-project/oras to v1.3.1 - autoclosed #150

Closed

CSRBot wants to merge 1 commits from renovate/oras-project-oras-1.x into master

pull from: renovate/oras-project-oras-1.x

merge into: :master

:master

Conversation 0 Commits 1 Files Changed 1

+1 -1

CSRBot commented 2026-03-12 03:05:51 +01:00

Collaborator

Copy Link

Copy Source

This PR contains the following updates:

Package	Update	Change
oras-project/oras	patch	1.3.0 -> 1.3.1

---

Release Notes

oras-project/oras (oras-project/oras)

v1.3.1

Compare Source

Bug Fixes

• Fix #​1903: oras cp should not mount if source and destination credentials are different
• Fix #​1872: allow setting org.opencontainers.image.title in annotation file

Other Changes

• Upgrade to Go 1.26
• Update dependencies

What's Changed

• fix: cp should not mount if src and dst credentials are different by @​wangxiaoxuan273 in #​1903
• fix: allow setting org.opencontainers.image.title in annotation file by @​rafaelgieschke in #​1872
• build(deps): cherry-pick Go 1.25.7 bump to release-1.3 by @​TerryHowe in #​1990
• build(deps): cherry-pick golang.org/x/crypto bump to release-1.3 by @​TerryHowe in #​1994
• chore: bump Go to 1.26 by @​TerryHowe in #​2001

Full Changelog: https://github.com/oras-project/oras/compare/v1.3.0...v1.3.1

Notes

This release was signed with 2DA4 61D1 3B0C 2784 5EDF A77F E462 A389 4CBA AA47 (@​TerryHowe's GPG key) which can be found here.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [oras-project/oras](https://github.com/oras-project/oras) | patch | `1.3.0` -> `1.3.1` | --- ### Release Notes <details> <summary>oras-project/oras (oras-project/oras)</summary> ### [`v1.3.1`](https://github.com/oras-project/oras/releases/tag/v1.3.1) [Compare Source](https://github.com/oras-project/oras/compare/v1.3.0...v1.3.1) #### Bug Fixes - Fix [#&#8203;1903](https://github.com/oras-project/oras/issues/1903): `oras cp` should not mount if source and destination credentials are different - Fix [#&#8203;1872](https://github.com/oras-project/oras/issues/1872): allow setting `org.opencontainers.image.title` in annotation file #### Other Changes - Upgrade to Go `1.26` - Update dependencies #### What's Changed - fix: cp should not mount if src and dst credentials are different by [@&#8203;wangxiaoxuan273](https://github.com/wangxiaoxuan273) in [#&#8203;1903](https://github.com/oras-project/oras/pull/1903) - fix: allow setting org.opencontainers.image.title in annotation file by [@&#8203;rafaelgieschke](https://github.com/rafaelgieschke) in [#&#8203;1872](https://github.com/oras-project/oras/pull/1872) - build(deps): cherry-pick Go 1.25.7 bump to release-1.3 by [@&#8203;TerryHowe](https://github.com/TerryHowe) in [#&#8203;1990](https://github.com/oras-project/oras/pull/1990) - build(deps): cherry-pick golang.org/x/crypto bump to release-1.3 by [@&#8203;TerryHowe](https://github.com/TerryHowe) in [#&#8203;1994](https://github.com/oras-project/oras/pull/1994) - chore: bump Go to 1.26 by [@&#8203;TerryHowe](https://github.com/TerryHowe) in [#&#8203;2001](https://github.com/oras-project/oras/pull/2001) **Full Changelog**: <https://github.com/oras-project/oras/compare/v1.3.0...v1.3.1> #### Notes This release was signed with `2DA4 61D1 3B0C 2784 5EDF A77F E462 A389 4CBA AA47` ([@&#8203;TerryHowe](https://github.com/TerryHowe)'s GPG key) which can be found [here](https://github.com/TerryHowe.gpg). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDAuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

CSRBot added 1 commit 2026-03-12 03:05:53 +01:00

chore(deps): update dependency oras-project/oras to v1.3.1 b99b4614ec

CSRBot changed title from chore(deps): update dependency oras-project/oras to v1.3.1 to chore(deps): update dependency oras-project/oras to v1.3.1 - autoclosed 2026-03-12 09:03:45 +01:00

CSRBot closed this pull request 2026-03-12 09:03:46 +01:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

CSRBot (CSRBot) volker.raschek (Markus Pesch)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/dcmerge#150