Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apko for openSUSE:Factory checked in at 2026-02-25 21:11:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apko (Old) and /work/SRC/openSUSE:Factory/.apko.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apko" Wed Feb 25 21:11:00 2026 rev:97 rq:1335016 version:1.1.11 Changes: -------- --- /work/SRC/openSUSE:Factory/apko/apko.changes 2026-02-19 14:23:49.103814325 +0100 +++ /work/SRC/openSUSE:Factory/.apko.new.1977/apko.changes 2026-02-25 21:11:24.584246870 +0100 @@ -1,0 +2,29 @@ +Wed Feb 25 09:18:59 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.1.11: + * build(deps): bump github.com/package-url/packageurl-go from + 0.1.3 to 0.1.4 (#2082) + * build(deps): bump chainguard-dev/actions from 1.6.3 to 1.6.4 + (#2090) + * build(deps): bump github.com/google/go-containerregistry from + 0.20.7 to 0.21.0 (#2081) + * build(deps): bump google.golang.org/api from 0.267.0 to 0.268.0 + (#2091) + * build(deps): bump goreleaser/goreleaser-action from 6.4.0 to + 7.0.0 (#2088) + * build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 + (#2086) + * build(deps): bump chainguard-dev/actions from 1.6.2 to 1.6.3 + (#2087) + +------------------------------------------------------------------- +Wed Feb 25 09:16:46 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.1.10: + * chore: Increase max HTTP response size (#2083) + * build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 + in the go_modules group across 1 directory (#2080) + * build(deps): bump go.step.sm/crypto from 0.76.0 to 0.76.2 + (#2079) + +------------------------------------------------------------------- Old: ---- apko-1.1.9.obscpio New: ---- apko-1.1.11.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apko.spec ++++++ --- /var/tmp/diff_new_pack.Z1egQD/_old 2026-02-25 21:11:25.216272966 +0100 +++ /var/tmp/diff_new_pack.Z1egQD/_new 2026-02-25 21:11:25.216272966 +0100 @@ -17,7 +17,7 @@ Name: apko -Version: 1.1.9 +Version: 1.1.11 Release: 0 Summary: Build OCI images from APK packages directly without Dockerfile License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Z1egQD/_old 2026-02-25 21:11:25.260274784 +0100 +++ /var/tmp/diff_new_pack.Z1egQD/_new 2026-02-25 21:11:25.264274949 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/chainguard-dev/apko</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.1.9</param> + <param name="revision">v1.1.11</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Z1egQD/_old 2026-02-25 21:11:25.288275939 +0100 +++ /var/tmp/diff_new_pack.Z1egQD/_new 2026-02-25 21:11:25.296276270 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/apko</param> - <param name="changesrevision">1a683b227173c90d68cba68c21b662e1f94276b0</param></service></servicedata> + <param name="changesrevision">04910df9249f691d87c44d957113884ffff46c40</param></service></servicedata> (No newline at EOF) ++++++ apko-1.1.9.obscpio -> apko-1.1.11.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/go.mod new/apko-1.1.11/go.mod --- old/apko-1.1.9/go.mod 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/go.mod 2026-02-24 16:25:02.000000000 +0100 @@ -1,6 +1,6 @@ module chainguard.dev/apko -go 1.25.0 +go 1.25.6 require ( chainguard.dev/sdk v0.1.50 @@ -8,14 +8,14 @@ github.com/charmbracelet/log v0.4.2 github.com/go-git/go-git/v5 v5.16.5 github.com/google/go-cmp v0.7.0 - github.com/google/go-containerregistry v0.20.7 + github.com/google/go-containerregistry v0.21.0 github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 github.com/hashicorp/go-cleanhttp v0.5.2 github.com/hashicorp/go-retryablehttp v0.7.8 github.com/invopop/jsonschema v0.13.0 github.com/klauspost/compress v1.18.4 github.com/klauspost/pgzip v1.2.6 - github.com/package-url/packageurl-go v0.1.3 + github.com/package-url/packageurl-go v0.1.4 github.com/pavlo-v-chernykh/keystore-go/v4 v4.5.0 github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c github.com/spf13/cobra v1.10.2 @@ -25,12 +25,12 @@ go.lsp.dev/uri v0.3.0 go.opentelemetry.io/otel v1.40.0 go.opentelemetry.io/otel/trace v1.40.0 - go.step.sm/crypto v0.76.0 + go.step.sm/crypto v0.76.2 golang.org/x/oauth2 v0.35.0 golang.org/x/sync v0.19.0 golang.org/x/sys v0.41.0 golang.org/x/time v0.14.0 - google.golang.org/api v0.267.0 + google.golang.org/api v0.268.0 gopkg.in/ini.v1 v1.67.1 gopkg.in/yaml.v3 v3.0.1 k8s.io/apimachinery v0.35.1 @@ -43,7 +43,7 @@ cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect cloud.google.com/go/compute/metadata v0.9.0 // indirect dario.cat/mergo v1.0.1 // indirect - filippo.io/edwards25519 v1.1.0 // indirect + filippo.io/edwards25519 v1.1.1 // indirect github.com/Microsoft/go-winio v0.6.2 // indirect github.com/ProtonMail/go-crypto v1.3.0 // indirect github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect @@ -62,11 +62,11 @@ github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/errdefs/pkg v0.3.0 // indirect - github.com/containerd/stargz-snapshotter/estargz v0.18.1 // indirect + github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/distribution/reference v0.6.0 // indirect - github.com/docker/cli v29.0.3+incompatible // indirect + github.com/docker/cli v29.2.1+incompatible // indirect github.com/docker/distribution v2.8.3+incompatible // indirect github.com/docker/docker v28.5.2+incompatible // indirect github.com/docker/docker-credential-helpers v0.9.4 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/go.sum new/apko-1.1.11/go.sum --- old/apko-1.1.9/go.sum 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/go.sum 2026-02-24 16:25:02.000000000 +0100 @@ -10,8 +10,8 @@ cloud.google.com/go/compute/metadata v0.9.0/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10= dario.cat/mergo v1.0.1 h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s= dario.cat/mergo v1.0.1/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk= -filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= -filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= +filippo.io/edwards25519 v1.1.1 h1:YpjwWWlNmGIDyXOn8zLzqiD+9TyIlPhGFG96P39uBpw= +filippo.io/edwards25519 v1.1.1/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg= github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E= github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v8QkMxJ6pZY= @@ -63,8 +63,8 @@ github.com/containerd/errdefs/pkg v0.3.0/go.mod h1:NJw6s9HwNuRhnjJhM7pylWwMyAkmCQvQ4GpJHEqRLVk= github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= -github.com/containerd/stargz-snapshotter/estargz v0.18.1 h1:cy2/lpgBXDA3cDKSyEfNOFMA/c10O1axL69EU7iirO8= -github.com/containerd/stargz-snapshotter/estargz v0.18.1/go.mod h1:ALIEqa7B6oVDsrF37GkGN20SuvG/pIMm7FwP7ZmRb0Q= +github.com/containerd/stargz-snapshotter/estargz v0.18.2 h1:yXkZFYIzz3eoLwlTUZKz2iQ4MrckBxJjkmD16ynUTrw= +github.com/containerd/stargz-snapshotter/estargz v0.18.2/go.mod h1:XyVU5tcJ3PRpkA9XS2T5us6Eg35yM0214Y+wvrZTBrY= github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g= github.com/cyphar/filepath-securejoin v0.4.1 h1:JyxxyPEaktOD+GAnqIqTf9A8tHyAG22rowi7HkoSU1s= github.com/cyphar/filepath-securejoin v0.4.1/go.mod h1:Sdj7gXlvMcPZsbhwhQ33GguGLDGQL7h7bg04C/+u9jI= @@ -74,8 +74,8 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= -github.com/docker/cli v29.0.3+incompatible h1:8J+PZIcF2xLd6h5sHPsp5pvvJA+Sr2wGQxHkRl53a1E= -github.com/docker/cli v29.0.3+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= +github.com/docker/cli v29.2.1+incompatible h1:n3Jt0QVCN65eiVBoUTZQM9mcQICCJt3akW4pKAbKdJg= +github.com/docker/cli v29.2.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/docker/docker v28.5.2+incompatible h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM= @@ -124,8 +124,8 @@ github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= -github.com/google/go-containerregistry v0.20.7 h1:24VGNpS0IwrOZ2ms2P1QE3Xa5X9p4phx0aUgzYzHW6I= -github.com/google/go-containerregistry v0.20.7/go.mod h1:Lx5LCZQjLH1QBaMPeGwsME9biPeo1lPx6lbGj/UmzgM= +github.com/google/go-containerregistry v0.21.0 h1:ocqxUOczFwAZQBMNE7kuzfqvDe0VWoZxQMOesXreCDI= +github.com/google/go-containerregistry v0.21.0/go.mod h1:ctO5aCaewH4AK1AumSF5DPW+0+R+d2FmylMJdp5G7p0= github.com/google/s2a-go v0.1.9 h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0= github.com/google/s2a-go v0.1.9/go.mod h1:YA0Ei2ZQL3acow2O62kdp9UlnvMmU7kA6Eutn0dXayM= github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4= @@ -204,8 +204,8 @@ github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM= github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040= github.com/opencontainers/image-spec v1.1.1/go.mod h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M= -github.com/package-url/packageurl-go v0.1.3 h1:4juMED3hHiz0set3Vq3KeQ75KD1avthoXLtmE3I0PLs= -github.com/package-url/packageurl-go v0.1.3/go.mod h1:nKAWB8E6uk1MHqiS/lQb9pYBGH2+mdJ2PJc2s50dQY0= +github.com/package-url/packageurl-go v0.1.4 h1:RHfiiN1SSY+Kic537DXch6fy593rxGJW6WDzAiOwNdk= +github.com/package-url/packageurl-go v0.1.4/go.mod h1:nKAWB8E6uk1MHqiS/lQb9pYBGH2+mdJ2PJc2s50dQY0= github.com/pavlo-v-chernykh/keystore-go/v4 v4.5.0 h1:2nosf3P75OZv2/ZO/9Px5ZgZ5gbKrzA3joN1QMfOGMQ= github.com/pavlo-v-chernykh/keystore-go/v4 v4.5.0/go.mod h1:lAVhWwbNaveeJmxrxuSTxMgKpF6DjnuVpn6T8WiBwYQ= github.com/pierrec/lz4/v4 v4.1.22 h1:cKFw6uJDK+/gfw5BcDL0JL5aBsAFdsIT18eRtLj7VIU= @@ -294,8 +294,8 @@ go.opentelemetry.io/otel/trace v1.40.0/go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA= go.opentelemetry.io/proto/otlp v1.7.1 h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4= go.opentelemetry.io/proto/otlp v1.7.1/go.mod h1:b2rVh6rfI/s2pHWNlB7ILJcRALpcNDzKhACevjI+ZnE= -go.step.sm/crypto v0.76.0 h1:K23BSaeoiY7Y5dvvijTeYC9EduDBetNwQYMBwMhi1aA= -go.step.sm/crypto v0.76.0/go.mod h1:PXYJdKkK8s+GHLwLguFaLxHNAFsFL3tL1vSBrYfey5k= +go.step.sm/crypto v0.76.2 h1:JJ/yMcs/rmcCAwlo+afrHjq74XBFRTJw5B2y4Q4Z4c4= +go.step.sm/crypto v0.76.2/go.mod h1:m6KlB/HzIuGFep0UWI5e0SYi38UxpoKeCg6qUaHV6/Q= go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto= go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE= go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0= @@ -312,8 +312,8 @@ golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546/go.mod h1:j/pmGrbnkbPtQfxEe5D0VQhZC6qKbfKifgD0oM7sR70= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs= -golang.org/x/mod v0.31.0 h1:HaW9xtz0+kOcWKwli0ZXy79Ix+UW/vOfmWI5QVd2tgI= -golang.org/x/mod v0.31.0/go.mod h1:43JraMp9cGx1Rx3AqioxrbrhNsLl2l/iNAvuBkrezpg= +golang.org/x/mod v0.33.0 h1:tHFzIWbBifEmbwtGz65eaWyGiGZatSrT9prnU8DbVL8= +golang.org/x/mod v0.33.0/go.mod h1:swjeQEj+6r7fODbD2cqrnje9PnziFuw4bmLbBZFrQ5w= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= @@ -350,8 +350,8 @@ golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo= golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk= -golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY= -golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww= +golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg= +golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= @@ -367,14 +367,14 @@ golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU= -golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA= -golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc= +golang.org/x/tools v0.42.0 h1:uNgphsn75Tdz5Ji2q36v/nsFSfR/9BRFvqhGBaJGd5k= +golang.org/x/tools v0.42.0/go.mod h1:Ma6lCIwGZvHK6XtgbswSoWroEkhugApmsXyrUmBhfr0= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= -google.golang.org/api v0.267.0 h1:w+vfWPMPYeRs8qH1aYYsFX68jMls5acWl/jocfLomwE= -google.golang.org/api v0.267.0/go.mod h1:Jzc0+ZfLnyvXma3UtaTl023TdhZu6OMBP9tJ+0EmFD0= +google.golang.org/api v0.268.0 h1:hgA3aS4lt9rpF5RCCkX0Q2l7DvHgvlb53y4T4u6iKkA= +google.golang.org/api v0.268.0/go.mod h1:HXMyMH496wz+dAJwD/GkAPLd3ZL33Kh0zEG32eNvy9w= google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 h1:merA0rdPeUV3YIIfHHcH4qBkiQAc1nfCKSI7lB4cV2M= google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409/go.mod h1:fl8J1IvUjCilwZzQowmw2b7HQB2eAuYBabMXzWurF+I= google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 h1:Jr5R2J6F6qWyzINc+4AM8t5pfUz6beZpHp678GNrMbE= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/publish_test.go new/apko-1.1.11/internal/cli/publish_test.go --- old/apko-1.1.9/internal/cli/publish_test.go 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/publish_test.go 2026-02-24 16:25:02.000000000 +0100 @@ -100,7 +100,7 @@ // This test will fail if we ever make a change in apko that changes the image. // Sometimes, this is intentional, and we need to change this and bump the version. - want := "sha256:91213f5088cd9e4e0b8daa74f86085c7007c5896ade6ef0ef9bcbcdda16f5f2d" + want := "sha256:b0fb49df7ff53c00f076854213ec9b8d2ac1b04ff7bf872dc262487b849b12b0" require.Equal(t, want, digest.String()) // Check that the sbomPath is not empty. @@ -174,7 +174,7 @@ // This test will fail if we ever make a change in apko that changes the image. // Sometimes, this is intentional, and we need to change this and bump the version. - want := "sha256:72435e8671ef7d79007d93066b54c81b875e567ccd396945d7b9ec083f96cba0" + want := "sha256:ec5ec0579b8edabcea15445d3058aa0b844bf2fb1122d19b35f555251857b9df" require.Equal(t, want, digest.String()) im, err := idx.IndexManifest() diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/apko-discover.lock.json new/apko-1.1.11/internal/cli/testdata/apko-discover.lock.json --- old/apko-1.1.9/internal/cli/testdata/apko-discover.lock.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/apko-discover.lock.json 2026-02-24 16:25:02.000000000 +0100 @@ -72,18 +72,18 @@ "version": "1.0.0-r0", "architecture": "x86_64", "signature": { - "range": "bytes=0-648", - "checksum": "sha1-V+Htugmm+Ru2ogsWm7VgD4A1DsQ=" + "range": "bytes=0-646", + "checksum": "sha1-S+THz+JYZxcNzNCw2jI9YlnDnE4=" }, "control": { - "range": "bytes=649-1562", - "checksum": "sha1-DRtLIHolxOMB++9L4ZjkeUFaKYc=" + "range": "bytes=647-1628", + "checksum": "sha1-m6wB0UFePGN8Drz82pC8y2uAiu8=" }, "data": { - "range": "bytes=1563-2767", - "checksum": "sha256-dZB1iTdQ2sfndKG6Ohf5VwWFjqz6kjSzZbqYU17BSRM=" + "range": "bytes=1629-2929", + "checksum": "sha256-ckBapsaMu5EOb/e4Ei1s2l/+dZMEamHhUmaoJ8yeZwg=" }, - "checksum": "Q1DRtLIHolxOMB++9L4ZjkeUFaKYc=" + "checksum": "Q1m6wB0UFePGN8Drz82pC8y2uAiu8=" }, { "name": "replayout", @@ -91,18 +91,18 @@ "version": "1.0.0-r0", "architecture": "x86_64", "signature": { - "range": "bytes=0-647", - "checksum": "sha1-ZrPCeQ4XeDjZSQw+IhJ4g4BcUlo=" + "range": "bytes=0-646", + "checksum": "sha1-M3D5FSI+rv4Qe3oJqVtR1CvOVKE=" }, "control": { - "range": "bytes=648-1589", - "checksum": "sha1-IvTcfj6zzLipr9akZ+YRTIyQCr8=" + "range": "bytes=647-1660", + "checksum": "sha1-1/HhSewwwOXgl0r0ffb0O0BRtYc=" }, "data": { - "range": "bytes=1590-2786", - "checksum": "sha256-IIzbGjwv4H9h6N1bEbF8p4cqkV0Ex54sXEsvf6txnEo=" + "range": "bytes=1661-2960", + "checksum": "sha256-zmiHBvaqKHsF8CxQeHa0M4mZKwj7T4T5kRe9VpTkXUw=" }, - "checksum": "Q1IvTcfj6zzLipr9akZ+YRTIyQCr8=" + "checksum": "Q11/HhSewwwOXgl0r0ffb0O0BRtYc=" }, { "name": "pretend-baselayout", @@ -110,18 +110,18 @@ "version": "1.0.0-r0", "architecture": "aarch64", "signature": { - "range": "bytes=0-644", - "checksum": "sha1-n9SJ91H1UwE+mkVVCifh6ziTwbc=" + "range": "bytes=0-647", + "checksum": "sha1-DaCiv+fkcPqYlZ1j6qUAyjvaaWQ=" }, "control": { - "range": "bytes=645-1555", - "checksum": "sha1-URAMn9SfiCvjs6C812GovkgRgVo=" + "range": "bytes=648-1628", + "checksum": "sha1-JQ8nfsxa27d0f6oa056sdT5IcJY=" }, "data": { - "range": "bytes=1556-2762", - "checksum": "sha256-igCqZKcxRp6yHq2IlyozkM68Z6v9PMr/PDAIuSh2W3A=" + "range": "bytes=1629-2929", + "checksum": "sha256-cY5bE593kEpYKyqepLmkPc/RnAiPsIsm92XAHwi+U9I=" }, - "checksum": "Q1URAMn9SfiCvjs6C812GovkgRgVo=" + "checksum": "Q1JQ8nfsxa27d0f6oa056sdT5IcJY=" }, { "name": "replayout", @@ -130,17 +130,17 @@ "architecture": "aarch64", "signature": { "range": "bytes=0-646", - "checksum": "sha1-1ifrimC4bUlo4O6aCGXcjOKAcTo=" + "checksum": "sha1-/2EQJW+59r1Vbi3AxFA7e9brusw=" }, "control": { - "range": "bytes=647-1586", - "checksum": "sha1-SWYSZF3dGLrN8kebGjOBfDH6vG4=" + "range": "bytes=647-1655", + "checksum": "sha1-u62watWiRSQgVtAIuVuYoDOaVO4=" }, "data": { - "range": "bytes=1587-2787", - "checksum": "sha256-U85iWddHApXsVosa4S0srhkr3SSlzuoBrEpZg5f1irQ=" + "range": "bytes=1656-2954", + "checksum": "sha256-IMtgng48z5PaYwqYWLrGUKoaZUHFmigOnKRJ7KcmTQo=" }, - "checksum": "Q1SWYSZF3dGLrN8kebGjOBfDH6vG4=" + "checksum": "Q1u62watWiRSQgVtAIuVuYoDOaVO4=" } ] } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/apko.lock.json new/apko-1.1.11/internal/cli/testdata/apko.lock.json --- old/apko-1.1.9/internal/cli/testdata/apko.lock.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/apko.lock.json 2026-02-24 16:25:02.000000000 +0100 @@ -32,18 +32,18 @@ "version": "1.0.0-r0", "architecture": "x86_64", "signature": { - "range": "bytes=0-648", - "checksum": "sha1-V+Htugmm+Ru2ogsWm7VgD4A1DsQ=" + "range": "bytes=0-646", + "checksum": "sha1-S+THz+JYZxcNzNCw2jI9YlnDnE4=" }, "control": { - "range": "bytes=649-1562", - "checksum": "sha1-DRtLIHolxOMB++9L4ZjkeUFaKYc=" + "range": "bytes=647-1628", + "checksum": "sha1-m6wB0UFePGN8Drz82pC8y2uAiu8=" }, "data": { - "range": "bytes=1563-2767", - "checksum": "sha256-dZB1iTdQ2sfndKG6Ohf5VwWFjqz6kjSzZbqYU17BSRM=" + "range": "bytes=1629-2929", + "checksum": "sha256-ckBapsaMu5EOb/e4Ei1s2l/+dZMEamHhUmaoJ8yeZwg=" }, - "checksum": "Q1DRtLIHolxOMB++9L4ZjkeUFaKYc=" + "checksum": "Q1m6wB0UFePGN8Drz82pC8y2uAiu8=" }, { "name": "replayout", @@ -51,18 +51,18 @@ "version": "1.0.0-r0", "architecture": "x86_64", "signature": { - "range": "bytes=0-647", - "checksum": "sha1-ZrPCeQ4XeDjZSQw+IhJ4g4BcUlo=" + "range": "bytes=0-646", + "checksum": "sha1-M3D5FSI+rv4Qe3oJqVtR1CvOVKE=" }, "control": { - "range": "bytes=648-1589", - "checksum": "sha1-IvTcfj6zzLipr9akZ+YRTIyQCr8=" + "range": "bytes=647-1660", + "checksum": "sha1-1/HhSewwwOXgl0r0ffb0O0BRtYc=" }, "data": { - "range": "bytes=1590-2786", - "checksum": "sha256-IIzbGjwv4H9h6N1bEbF8p4cqkV0Ex54sXEsvf6txnEo=" + "range": "bytes=1661-2960", + "checksum": "sha256-zmiHBvaqKHsF8CxQeHa0M4mZKwj7T4T5kRe9VpTkXUw=" }, - "checksum": "Q1IvTcfj6zzLipr9akZ+YRTIyQCr8=" + "checksum": "Q11/HhSewwwOXgl0r0ffb0O0BRtYc=" }, { "name": "pretend-baselayout", @@ -70,18 +70,18 @@ "version": "1.0.0-r0", "architecture": "aarch64", "signature": { - "range": "bytes=0-644", - "checksum": "sha1-n9SJ91H1UwE+mkVVCifh6ziTwbc=" + "range": "bytes=0-647", + "checksum": "sha1-DaCiv+fkcPqYlZ1j6qUAyjvaaWQ=" }, "control": { - "range": "bytes=645-1555", - "checksum": "sha1-URAMn9SfiCvjs6C812GovkgRgVo=" + "range": "bytes=648-1628", + "checksum": "sha1-JQ8nfsxa27d0f6oa056sdT5IcJY=" }, "data": { - "range": "bytes=1556-2762", - "checksum": "sha256-igCqZKcxRp6yHq2IlyozkM68Z6v9PMr/PDAIuSh2W3A=" + "range": "bytes=1629-2929", + "checksum": "sha256-cY5bE593kEpYKyqepLmkPc/RnAiPsIsm92XAHwi+U9I=" }, - "checksum": "Q1URAMn9SfiCvjs6C812GovkgRgVo=" + "checksum": "Q1JQ8nfsxa27d0f6oa056sdT5IcJY=" }, { "name": "replayout", @@ -90,17 +90,17 @@ "architecture": "aarch64", "signature": { "range": "bytes=0-646", - "checksum": "sha1-1ifrimC4bUlo4O6aCGXcjOKAcTo=" + "checksum": "sha1-/2EQJW+59r1Vbi3AxFA7e9brusw=" }, "control": { - "range": "bytes=647-1586", - "checksum": "sha1-SWYSZF3dGLrN8kebGjOBfDH6vG4=" + "range": "bytes=647-1655", + "checksum": "sha1-u62watWiRSQgVtAIuVuYoDOaVO4=" }, "data": { - "range": "bytes=1587-2787", - "checksum": "sha256-U85iWddHApXsVosa4S0srhkr3SSlzuoBrEpZg5f1irQ=" + "range": "bytes=1656-2954", + "checksum": "sha256-IMtgng48z5PaYwqYWLrGUKoaZUHFmigOnKRJ7KcmTQo=" }, - "checksum": "Q1SWYSZF3dGLrN8kebGjOBfDH6vG4=" + "checksum": "Q1u62watWiRSQgVtAIuVuYoDOaVO4=" } ] } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858 new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858 --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":658,"digest":"sha256:fbb854f9d5a601a36c4dc8cc82e5b21e91b11cdd4aab5035340e4f517c5a8eb1"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":3079,"digest":"sha256:7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/18f0f327158b3faef0749e774a6221638080b318ef93683272d3cb8dec130ac0 new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/18f0f327158b3faef0749e774a6221638080b318ef93683272d3cb8dec130ac0 --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/18f0f327158b3faef0749e774a6221638080b318ef93683272d3cb8dec130ac0 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/18f0f327158b3faef0749e774a6221638080b318ef93683272d3cb8dec130ac0 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"architecture":"arm64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"Title by Vendor"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:eb9640d19167d1e06f69bb57163e696ad254548869faddb5f14d34a933d22a72"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":658,"digest":"sha256:d0fb5f2c116b1db6b99ed363c37565c22826ab99a7148e4497fe5630d3569665"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":3006,"digest":"sha256:622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":658,"digest":"sha256:18f0f327158b3faef0749e774a6221638080b318ef93683272d3cb8dec130ac0"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":3018,"digest":"sha256:b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}} \ No newline at end of file Binary files old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456 and new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456 differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4 new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4 --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":658,"digest":"sha256:6c815259150f37d000417f9a93f41bddf74dff905c745986069d4b03e954ac1d"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":3072,"digest":"sha256:c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/6c815259150f37d000417f9a93f41bddf74dff905c745986069d4b03e954ac1d new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/6c815259150f37d000417f9a93f41bddf74dff905c745986069d4b03e954ac1d --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/6c815259150f37d000417f9a93f41bddf74dff905c745986069d4b03e954ac1d 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/6c815259150f37d000417f9a93f41bddf74dff905c745986069d4b03e954ac1d 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"architecture":"amd64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"Title by Vendor"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:20f698463c2755b6dc42b7d07e959ed7455a06e7367d507e829a315898f21a01"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}}} \ No newline at end of file Binary files old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08 and new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08 differ Binary files old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f and new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f differ Binary files old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738 and new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738 differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/d0fb5f2c116b1db6b99ed363c37565c22826ab99a7148e4497fe5630d3569665 new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/d0fb5f2c116b1db6b99ed363c37565c22826ab99a7148e4497fe5630d3569665 --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/d0fb5f2c116b1db6b99ed363c37565c22826ab99a7148e4497fe5630d3569665 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/d0fb5f2c116b1db6b99ed363c37565c22826ab99a7148e4497fe5630d3569665 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"architecture":"amd64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"Title by Vendor"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:5f11680e484ee94fedf9e105f1411d174e7a15185c3d976d1f7ce028e07bf26c"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/fbb854f9d5a601a36c4dc8cc82e5b21e91b11cdd4aab5035340e4f517c5a8eb1 new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/fbb854f9d5a601a36c4dc8cc82e5b21e91b11cdd4aab5035340e4f517c5a8eb1 --- old/apko-1.1.9/internal/cli/testdata/golden/blobs/sha256/fbb854f9d5a601a36c4dc8cc82e5b21e91b11cdd4aab5035340e4f517c5a8eb1 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/blobs/sha256/fbb854f9d5a601a36c4dc8cc82e5b21e91b11cdd4aab5035340e4f517c5a8eb1 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"architecture":"arm64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"Title by Vendor"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:ca5e16c7c944d764863cb1a4286e668e72d6d87ef9ddd82337b19d87715bae7e"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/index.json new/apko-1.1.11/internal/cli/testdata/golden/index.json --- old/apko-1.1.9/internal/cli/testdata/golden/index.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/index.json 2026-02-24 16:25:02.000000000 +0100 @@ -1 +1 @@ -{"schemaVersion":2,"mediaType":"application/vnd.oci.image.index.v1+json","manifests":[{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":560,"digest":"sha256:3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a","platform":{"architecture":"amd64","os":"linux"}},{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":560,"digest":"sha256:462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a","platform":{"architecture":"arm64","os":"linux"}}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}} \ No newline at end of file +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.index.v1+json","manifests":[{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":560,"digest":"sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4","platform":{"architecture":"amd64","os":"linux"}},{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":560,"digest":"sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858","platform":{"architecture":"arm64","os":"linux"}}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z","org.opencontainers.image.title":"Title","org.opencontainers.image.vendor":"Vendor"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/sboms/sbom-aarch64.spdx.json new/apko-1.1.11/internal/cli/testdata/golden/sboms/sbom-aarch64.spdx.json --- old/apko-1.1.9/internal/cli/testdata/golden/sboms/sbom-aarch64.spdx.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/sboms/sbom-aarch64.spdx.json 2026-02-24 16:25:02.000000000 +0100 @@ -1,6 +1,6 @@ { "SPDXID": "SPDXRef-DOCUMENT", - "name": "sbom-sha256:b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f", + "name": "sbom-sha256:7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "1970-01-01T00:00:00Z", @@ -13,13 +13,13 @@ "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/";, "documentDescribes": [ - "SPDXRef-Package-Image-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a" + "SPDXRef-Package-Image-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858" ], "packages": [ { - "SPDXID": "SPDXRef-Package-Image-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", - "name": "sha256:462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", - "versionInfo": "sha256:462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", + "SPDXID": "SPDXRef-Package-Image-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", + "name": "sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", + "versionInfo": "sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", "filesAnalyzed": false, "description": "apko container image", "downloadLocation": "NOASSERTION", @@ -28,20 +28,20 @@ "checksums": [ { "algorithm": "SHA256", - "checksumValue": "462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a" + "checksumValue": "124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3A462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", + "referenceLocator": "pkg:oci/golden@sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { - "SPDXID": "SPDXRef-Package-ImageLayer-sha256-b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f", - "name": "sha256:b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f", + "SPDXID": "SPDXRef-Package-ImageLayer-sha256-7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08", + "name": "sha256:7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08", "versionInfo": "1.0.0", "filesAnalyzed": false, "description": "apko operating system layer", @@ -51,7 +51,7 @@ "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3Ab075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", + "referenceLocator": "pkg:oci/golden@sha256:7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", "referenceType": "purl" } ] @@ -67,7 +67,7 @@ "primaryPackagePurpose": "OPERATING_SYSTEM" }, { - "SPDXID": "SPDXRef-Package-pretend-baselayout-1.0.0-r0", + "SPDXID": "SPDXRef-Package-apk-pretend-baselayout-1.0.0-r0", "name": "pretend-baselayout", "versionInfo": "1.0.0-r0", "filesAnalyzed": false, @@ -77,6 +77,7 @@ "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "copyrightText": "NOASSERTION", + "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", @@ -86,25 +87,26 @@ ] }, { - "SPDXID": "SPDXRef-Package-pretend-baselayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "SPDXID": "SPDXRef-Package-Melange-pretend-baselayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04", "name": "pretend-baselayout.melange.yaml", - "versionInfo": "8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "versionInfo": "326e0ed687bdfeadac839dc9b25686e4442c9d04", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", + "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:github/https%3A/%2Funknown%2Funknown%2Funknown@8e7230fc2d8afd47a5341ca0ba9b63f93bda5491#pretend-baselayout.melange.yaml", + "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@326e0ed687bdfeadac839dc9b25686e4442c9d04#pretend-baselayout.melange.yaml", "referenceType": "purl" } ] }, { - "SPDXID": "SPDXRef-Package-replayout-1.0.0-r0", + "SPDXID": "SPDXRef-Package-apk-replayout-1.0.0-r0", "name": "replayout", "versionInfo": "1.0.0-r0", "filesAnalyzed": false, @@ -114,6 +116,7 @@ "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "copyrightText": "NOASSERTION", + "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", @@ -123,19 +126,20 @@ ] }, { - "SPDXID": "SPDXRef-Package-replayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "SPDXID": "SPDXRef-Package-Melange-replayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04", "name": "replayout.melange.yaml", - "versionInfo": "8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "versionInfo": "326e0ed687bdfeadac839dc9b25686e4442c9d04", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", + "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:github/https%3A/%2Funknown%2Funknown%2Funknown@8e7230fc2d8afd47a5341ca0ba9b63f93bda5491#replayout.melange.yaml", + "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@326e0ed687bdfeadac839dc9b25686e4442c9d04#replayout.melange.yaml", "referenceType": "purl" } ] @@ -143,29 +147,29 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-Package-Image-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", + "spdxElementId": "SPDXRef-Package-Image-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", "relationshipType": "CONTAINS", - "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-b075b4a14ed0c1e236bac3448fa494c77772feb140cfad4033450e45010da27f" + "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-7e0f9d62f6cab4785e18a55f17d03f20ffb776881f1f46258efd9458f7cdaf08" }, { - "spdxElementId": "SPDXRef-Package-pretend-baselayout-1.0.0-r0", + "spdxElementId": "SPDXRef-Package-apk-pretend-baselayout-1.0.0-r0", "relationshipType": "DESCRIBED_BY", - "relatedSpdxElement": "SPDXRef-Package-pretend-baselayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491" + "relatedSpdxElement": "SPDXRef-Package-Melange-pretend-baselayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04" }, { - "spdxElementId": "SPDXRef-Package-Image-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", + "spdxElementId": "SPDXRef-Package-Image-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", "relationshipType": "CONTAINS", - "relatedSpdxElement": "SPDXRef-Package-pretend-baselayout-1.0.0-r0" + "relatedSpdxElement": "SPDXRef-Package-apk-pretend-baselayout-1.0.0-r0" }, { - "spdxElementId": "SPDXRef-Package-replayout-1.0.0-r0", + "spdxElementId": "SPDXRef-Package-apk-replayout-1.0.0-r0", "relationshipType": "DESCRIBED_BY", - "relatedSpdxElement": "SPDXRef-Package-replayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491" + "relatedSpdxElement": "SPDXRef-Package-Melange-replayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04" }, { - "spdxElementId": "SPDXRef-Package-Image-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", + "spdxElementId": "SPDXRef-Package-Image-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", "relationshipType": "CONTAINS", - "relatedSpdxElement": "SPDXRef-Package-replayout-1.0.0-r0" + "relatedSpdxElement": "SPDXRef-Package-apk-replayout-1.0.0-r0" } ] } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/sboms/sbom-index.spdx.json new/apko-1.1.11/internal/cli/testdata/golden/sboms/sbom-index.spdx.json --- old/apko-1.1.9/internal/cli/testdata/golden/sboms/sbom-index.spdx.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/sboms/sbom-index.spdx.json 2026-02-24 16:25:02.000000000 +0100 @@ -1,6 +1,6 @@ { "SPDXID": "SPDXRef-DOCUMENT", - "name": "sbom-sha256:dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2", + "name": "sbom-sha256:7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "1970-01-01T00:00:00Z", @@ -13,13 +13,13 @@ "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/";, "documentDescribes": [ - "SPDXRef-Package-sha256-dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2" + "SPDXRef-Package-sha256-7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de" ], "packages": [ { - "SPDXID": "SPDXRef-Package-sha256-dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2", - "name": "sha256:dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2", - "versionInfo": "sha256:dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2", + "SPDXID": "SPDXRef-Package-sha256-7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de", + "name": "sha256:7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de", + "versionInfo": "sha256:7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de", "filesAnalyzed": false, "description": "Multi-arch image index", "downloadLocation": "NOASSERTION", @@ -29,21 +29,21 @@ "checksums": [ { "algorithm": "SHA256", - "checksumValue": "dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2" + "checksumValue": "7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3Adca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2?mediaType=application%2Fvnd.oci.image.index.v1%2Bjson", + "referenceLocator": "pkg:oci/golden@sha256:7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de?mediaType=application%2Fvnd.oci.image.index.v1%2Bjson", "referenceType": "purl" } ] }, { - "SPDXID": "SPDXRef-Package-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", - "name": "sha256:3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", - "versionInfo": "sha256:3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", + "SPDXID": "SPDXRef-Package-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", + "name": "sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", + "versionInfo": "sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", "filesAnalyzed": false, "downloadLocation": "NOASSERTION", "supplier": "Organization: Chainguard, Inc.", @@ -51,21 +51,21 @@ "checksums": [ { "algorithm": "SHA256", - "checksumValue": "3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a" + "checksumValue": "69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3A3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", + "referenceLocator": "pkg:oci/golden@sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { - "SPDXID": "SPDXRef-Package-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", - "name": "sha256:462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", - "versionInfo": "sha256:462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a", + "SPDXID": "SPDXRef-Package-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", + "name": "sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", + "versionInfo": "sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858", "filesAnalyzed": false, "downloadLocation": "NOASSERTION", "supplier": "Organization: Chainguard, Inc.", @@ -73,13 +73,13 @@ "checksums": [ { "algorithm": "SHA256", - "checksumValue": "462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a" + "checksumValue": "124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3A462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", + "referenceLocator": "pkg:oci/golden@sha256:124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858?arch=arm64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] @@ -87,14 +87,14 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-Package-sha256-dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2", + "spdxElementId": "SPDXRef-Package-sha256-7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de", "relationshipType": "VARIANT_OF", - "relatedSpdxElement": "SPDXRef-Package-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a" + "relatedSpdxElement": "SPDXRef-Package-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4" }, { - "spdxElementId": "SPDXRef-Package-sha256-dca012567a108b20ddbae2b1701530ce24b60d2dbe88ad8eb3c99422e2db99a2", + "spdxElementId": "SPDXRef-Package-sha256-7d47a5afe35ced97755256fbc89650a7c9763488a263f9e3459e6344230bd3de", "relationshipType": "VARIANT_OF", - "relatedSpdxElement": "SPDXRef-Package-sha256-462b8caeb0369dd5ec14eb4f698cddd327f26ba65720561497217ffad2e96d6a" + "relatedSpdxElement": "SPDXRef-Package-sha256-124c885f834cfaf1329987457a9651a68c4fb9733d4462ae6288b98011277858" } ] } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/golden/sboms/sbom-x86_64.spdx.json new/apko-1.1.11/internal/cli/testdata/golden/sboms/sbom-x86_64.spdx.json --- old/apko-1.1.9/internal/cli/testdata/golden/sboms/sbom-x86_64.spdx.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/golden/sboms/sbom-x86_64.spdx.json 2026-02-24 16:25:02.000000000 +0100 @@ -1,6 +1,6 @@ { "SPDXID": "SPDXRef-DOCUMENT", - "name": "sbom-sha256:622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456", + "name": "sbom-sha256:c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738", "spdxVersion": "SPDX-2.3", "creationInfo": { "created": "1970-01-01T00:00:00Z", @@ -13,13 +13,13 @@ "dataLicense": "CC0-1.0", "documentNamespace": "https://spdx.org/spdxdocs/apko/";, "documentDescribes": [ - "SPDXRef-Package-Image-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a" + "SPDXRef-Package-Image-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4" ], "packages": [ { - "SPDXID": "SPDXRef-Package-Image-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", - "name": "sha256:3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", - "versionInfo": "sha256:3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", + "SPDXID": "SPDXRef-Package-Image-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", + "name": "sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", + "versionInfo": "sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", "filesAnalyzed": false, "description": "apko container image", "downloadLocation": "NOASSERTION", @@ -28,20 +28,20 @@ "checksums": [ { "algorithm": "SHA256", - "checksumValue": "3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a" + "checksumValue": "69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3A3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", + "referenceLocator": "pkg:oci/golden@sha256:69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.manifest.v1%2Bjson\u0026os=linux", "referenceType": "purl" } ] }, { - "SPDXID": "SPDXRef-Package-ImageLayer-sha256-622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456", - "name": "sha256:622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456", + "SPDXID": "SPDXRef-Package-ImageLayer-sha256-c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738", + "name": "sha256:c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738", "versionInfo": "1.0.0", "filesAnalyzed": false, "description": "apko operating system layer", @@ -51,7 +51,7 @@ "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:oci/golden@sha256%3A622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", + "referenceLocator": "pkg:oci/golden@sha256:c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738?arch=amd64\u0026mediaType=application%2Fvnd.oci.image.layer.v1.tar%2Bgzip\u0026os=linux", "referenceType": "purl" } ] @@ -67,7 +67,7 @@ "primaryPackagePurpose": "OPERATING_SYSTEM" }, { - "SPDXID": "SPDXRef-Package-pretend-baselayout-1.0.0-r0", + "SPDXID": "SPDXRef-Package-apk-pretend-baselayout-1.0.0-r0", "name": "pretend-baselayout", "versionInfo": "1.0.0-r0", "filesAnalyzed": false, @@ -77,6 +77,7 @@ "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "copyrightText": "NOASSERTION", + "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", @@ -86,25 +87,26 @@ ] }, { - "SPDXID": "SPDXRef-Package-pretend-baselayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "SPDXID": "SPDXRef-Package-Melange-pretend-baselayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04", "name": "pretend-baselayout.melange.yaml", - "versionInfo": "8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "versionInfo": "326e0ed687bdfeadac839dc9b25686e4442c9d04", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", + "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:github/https%3A/%2Funknown%2Funknown%2Funknown@8e7230fc2d8afd47a5341ca0ba9b63f93bda5491#pretend-baselayout.melange.yaml", + "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@326e0ed687bdfeadac839dc9b25686e4442c9d04#pretend-baselayout.melange.yaml", "referenceType": "purl" } ] }, { - "SPDXID": "SPDXRef-Package-replayout-1.0.0-r0", + "SPDXID": "SPDXRef-Package-apk-replayout-1.0.0-r0", "name": "replayout", "versionInfo": "1.0.0-r0", "filesAnalyzed": false, @@ -114,6 +116,7 @@ "originator": "Organization: Unknown", "supplier": "Organization: Unknown", "copyrightText": "NOASSERTION", + "primaryPackagePurpose": "APPLICATION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", @@ -123,19 +126,20 @@ ] }, { - "SPDXID": "SPDXRef-Package-replayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "SPDXID": "SPDXRef-Package-Melange-replayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04", "name": "replayout.melange.yaml", - "versionInfo": "8e7230fc2d8afd47a5341ca0ba9b63f93bda5491", + "versionInfo": "326e0ed687bdfeadac839dc9b25686e4442c9d04", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "downloadLocation": "NOASSERTION", "originator": "Organization: Unknown", "supplier": "Organization: Unknown", + "primaryPackagePurpose": "INSTALL", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", - "referenceLocator": "pkg:github/https%3A/%2Funknown%2Funknown%2Funknown@8e7230fc2d8afd47a5341ca0ba9b63f93bda5491#replayout.melange.yaml", + "referenceLocator": "pkg:github/https:/%2Funknown%2Funknown%2Funknown@326e0ed687bdfeadac839dc9b25686e4442c9d04#replayout.melange.yaml", "referenceType": "purl" } ] @@ -143,29 +147,29 @@ ], "relationships": [ { - "spdxElementId": "SPDXRef-Package-Image-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", + "spdxElementId": "SPDXRef-Package-Image-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", "relationshipType": "CONTAINS", - "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-622ca92e75385bab9884a8c8c65c3f4a4c3dd0eafbd2a57f2762bafcb393a456" + "relatedSpdxElement": "SPDXRef-Package-ImageLayer-sha256-c7557730da0e2d7fb242d8d1ac6dcf7e3a2439732aa5981270b4f3a02454b738" }, { - "spdxElementId": "SPDXRef-Package-pretend-baselayout-1.0.0-r0", + "spdxElementId": "SPDXRef-Package-apk-pretend-baselayout-1.0.0-r0", "relationshipType": "DESCRIBED_BY", - "relatedSpdxElement": "SPDXRef-Package-pretend-baselayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491" + "relatedSpdxElement": "SPDXRef-Package-Melange-pretend-baselayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04" }, { - "spdxElementId": "SPDXRef-Package-Image-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", + "spdxElementId": "SPDXRef-Package-Image-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", "relationshipType": "CONTAINS", - "relatedSpdxElement": "SPDXRef-Package-pretend-baselayout-1.0.0-r0" + "relatedSpdxElement": "SPDXRef-Package-apk-pretend-baselayout-1.0.0-r0" }, { - "spdxElementId": "SPDXRef-Package-replayout-1.0.0-r0", + "spdxElementId": "SPDXRef-Package-apk-replayout-1.0.0-r0", "relationshipType": "DESCRIBED_BY", - "relatedSpdxElement": "SPDXRef-Package-replayout.melange.yaml-8e7230fc2d8afd47a5341ca0ba9b63f93bda5491" + "relatedSpdxElement": "SPDXRef-Package-Melange-replayout.melange.yaml-326e0ed687bdfeadac839dc9b25686e4442c9d04" }, { - "spdxElementId": "SPDXRef-Package-Image-sha256-3fa87a64fb699f65953caad1adcba9f5d3f25134bfff43f92a1ed097712cd79a", + "spdxElementId": "SPDXRef-Package-Image-sha256-69f0237c7f8cf0b8a329d1bf1d6870c870c4ec323e39d3a6da59596632d0f2f4", "relationshipType": "CONTAINS", - "relatedSpdxElement": "SPDXRef-Package-replayout-1.0.0-r0" + "relatedSpdxElement": "SPDXRef-Package-apk-replayout-1.0.0-r0" } ] } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/image_on_top.apko.lock.json new/apko-1.1.11/internal/cli/testdata/image_on_top.apko.lock.json --- old/apko-1.1.9/internal/cli/testdata/image_on_top.apko.lock.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/image_on_top.apko.lock.json 2026-02-24 16:25:02.000000000 +0100 @@ -32,18 +32,18 @@ "version": "1.0.0-r0", "architecture": "x86_64", "signature": { - "range": "bytes=0-647", - "checksum": "sha1-ZrPCeQ4XeDjZSQw+IhJ4g4BcUlo=" + "range": "bytes=0-646", + "checksum": "sha1-M3D5FSI+rv4Qe3oJqVtR1CvOVKE=" }, "control": { - "range": "bytes=648-1589", - "checksum": "sha1-IvTcfj6zzLipr9akZ+YRTIyQCr8=" + "range": "bytes=647-1660", + "checksum": "sha1-1/HhSewwwOXgl0r0ffb0O0BRtYc=" }, "data": { - "range": "bytes=1590-2786", - "checksum": "sha256-IIzbGjwv4H9h6N1bEbF8p4cqkV0Ex54sXEsvf6txnEo=" + "range": "bytes=1661-2960", + "checksum": "sha256-zmiHBvaqKHsF8CxQeHa0M4mZKwj7T4T5kRe9VpTkXUw=" }, - "checksum": "Q1IvTcfj6zzLipr9akZ+YRTIyQCr8=" + "checksum": "Q11/HhSewwwOXgl0r0ffb0O0BRtYc=" }, { "name": "replayout", @@ -52,17 +52,17 @@ "architecture": "aarch64", "signature": { "range": "bytes=0-646", - "checksum": "sha1-1ifrimC4bUlo4O6aCGXcjOKAcTo=" + "checksum": "sha1-/2EQJW+59r1Vbi3AxFA7e9brusw=" }, "control": { - "range": "bytes=647-1586", - "checksum": "sha1-SWYSZF3dGLrN8kebGjOBfDH6vG4=" + "range": "bytes=647-1655", + "checksum": "sha1-u62watWiRSQgVtAIuVuYoDOaVO4=" }, "data": { - "range": "bytes=1587-2787", - "checksum": "sha256-U85iWddHApXsVosa4S0srhkr3SSlzuoBrEpZg5f1irQ=" + "range": "bytes=1656-2954", + "checksum": "sha256-IMtgng48z5PaYwqYWLrGUKoaZUHFmigOnKRJ7KcmTQo=" }, - "checksum": "Q1SWYSZF3dGLrN8kebGjOBfDH6vG4=" + "checksum": "Q1u62watWiRSQgVtAIuVuYoDOaVO4=" } ] } Binary files old/apko-1.1.9/internal/cli/testdata/packages/aarch64/APKINDEX.tar.gz and new/apko-1.1.11/internal/cli/testdata/packages/aarch64/APKINDEX.tar.gz differ Binary files old/apko-1.1.9/internal/cli/testdata/packages/aarch64/pretend-baselayout-1.0.0-r0.apk and new/apko-1.1.11/internal/cli/testdata/packages/aarch64/pretend-baselayout-1.0.0-r0.apk differ Binary files old/apko-1.1.9/internal/cli/testdata/packages/aarch64/replayout-1.0.0-r0.apk and new/apko-1.1.11/internal/cli/testdata/packages/aarch64/replayout-1.0.0-r0.apk differ Binary files old/apko-1.1.9/internal/cli/testdata/packages/x86_64/APKINDEX.tar.gz and new/apko-1.1.11/internal/cli/testdata/packages/x86_64/APKINDEX.tar.gz differ Binary files old/apko-1.1.9/internal/cli/testdata/packages/x86_64/pretend-baselayout-1.0.0-r0.apk and new/apko-1.1.11/internal/cli/testdata/packages/x86_64/pretend-baselayout-1.0.0-r0.apk differ Binary files old/apko-1.1.9/internal/cli/testdata/packages/x86_64/replayout-1.0.0-r0.apk and new/apko-1.1.11/internal/cli/testdata/packages/x86_64/replayout-1.0.0-r0.apk differ Binary files old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/10a1a18309374068005a73edacbd06b17fe67378c95d1e66e0cc2be1270c0328 and new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/10a1a18309374068005a73edacbd06b17fe67378c95d1e66e0cc2be1270c0328 differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/14160a36b6fb2f3d325eb09ada490e6ca171285b2ab0cd5d41989c11972eb153 new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/14160a36b6fb2f3d325eb09ada490e6ca171285b2ab0cd5d41989c11972eb153 --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/14160a36b6fb2f3d325eb09ada490e6ca171285b2ab0cd5d41989c11972eb153 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/14160a36b6fb2f3d325eb09ada490e6ca171285b2ab0cd5d41989c11972eb153 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":785,"digest":"sha256:c167d5b680a5a084c621b7e9af9973d68ccf6475af4b0858f2067fb556614f3b"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":4126,"digest":"sha256:bf74ddaf55d32ec9672a0a40efc6cb1bf0a167763c18fc22586c8a301167822f"},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":2885,"digest":"sha256:81168b5de29746299ae4cdb269544f6dff75d8f0e6b03b314cee06723c7e2f6b"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/3c6b4bb5b39be26700e6baff9d83a53bba4a0d994e22638d11a4c104bc9e39c9 new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/3c6b4bb5b39be26700e6baff9d83a53bba4a0d994e22638d11a4c104bc9e39c9 --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/3c6b4bb5b39be26700e6baff9d83a53bba4a0d994e22638d11a4c104bc9e39c9 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/3c6b4bb5b39be26700e6baff9d83a53bba4a0d994e22638d11a4c104bc9e39c9 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":785,"digest":"sha256:e83f38a3553148f2189193b4908cce3576907dacddc14617d0e8d22370c80cce"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":4126,"digest":"sha256:bf74ddaf55d32ec9672a0a40efc6cb1bf0a167763c18fc22586c8a301167822f"},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":2955,"digest":"sha256:7bd766d91d366d79c001436814bdfd629ef6da668805945c414cb074ddb7f0ed"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/45338ea1681a61ef1ff24b109f0c13aa95113a33cfb684377f8b89fe63b754b5 new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/45338ea1681a61ef1ff24b109f0c13aa95113a33cfb684377f8b89fe63b754b5 --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/45338ea1681a61ef1ff24b109f0c13aa95113a33cfb684377f8b89fe63b754b5 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/45338ea1681a61ef1ff24b109f0c13aa95113a33cfb684377f8b89fe63b754b5 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":785,"digest":"sha256:bafb997874b76dcef4ccfbf7d651aaab7ec557ce580053743664d5f7294de0e7"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":4123,"digest":"sha256:583625b6164fff3b017f62b9fcd60cb53fff18a7e89ee538212134a13fc29fb1"},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":2886,"digest":"sha256:10a1a18309374068005a73edacbd06b17fe67378c95d1e66e0cc2be1270c0328"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/52a254489d2b6d123a52b293b7032cca79834ce9f0176151c52754a0c7b1d1ea new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/52a254489d2b6d123a52b293b7032cca79834ce9f0176151c52754a0c7b1d1ea --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/52a254489d2b6d123a52b293b7032cca79834ce9f0176151c52754a0c7b1d1ea 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/52a254489d2b6d123a52b293b7032cca79834ce9f0176151c52754a0c7b1d1ea 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"architecture":"arm64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"},{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:2888aac57b90cf66093aa48092bf1f1f1b1bdb85bde8601a5f8cf0f06c814763","sha256:833080c5930b626e29628105bd42d7390dfdbc753f761d111d3ac92256bae9c3"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}}} \ No newline at end of file Binary files old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/7bd766d91d366d79c001436814bdfd629ef6da668805945c414cb074ddb7f0ed and new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/7bd766d91d366d79c001436814bdfd629ef6da668805945c414cb074ddb7f0ed differ Binary files old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/81168b5de29746299ae4cdb269544f6dff75d8f0e6b03b314cee06723c7e2f6b and new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/81168b5de29746299ae4cdb269544f6dff75d8f0e6b03b314cee06723c7e2f6b differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/9743477d70b66d27d627eb7dc1a548dee98ad742b195e24545b73a1c7113aea8 new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/9743477d70b66d27d627eb7dc1a548dee98ad742b195e24545b73a1c7113aea8 --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/9743477d70b66d27d627eb7dc1a548dee98ad742b195e24545b73a1c7113aea8 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/9743477d70b66d27d627eb7dc1a548dee98ad742b195e24545b73a1c7113aea8 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":785,"digest":"sha256:52a254489d2b6d123a52b293b7032cca79834ce9f0176151c52754a0c7b1d1ea"},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":4123,"digest":"sha256:583625b6164fff3b017f62b9fcd60cb53fff18a7e89ee538212134a13fc29fb1"},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":2945,"digest":"sha256:ff58773a945b386b75663553a7f451c4f6116ec6fac9c22ef41ebaf27704a566"}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/bafb997874b76dcef4ccfbf7d651aaab7ec557ce580053743664d5f7294de0e7 new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/bafb997874b76dcef4ccfbf7d651aaab7ec557ce580053743664d5f7294de0e7 --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/bafb997874b76dcef4ccfbf7d651aaab7ec557ce580053743664d5f7294de0e7 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/bafb997874b76dcef4ccfbf7d651aaab7ec557ce580053743664d5f7294de0e7 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"architecture":"arm64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"},{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:2888aac57b90cf66093aa48092bf1f1f1b1bdb85bde8601a5f8cf0f06c814763","sha256:bbee945b3496e2f8493351721e2a99b8855871828825448e239663afa9a9f887"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/c167d5b680a5a084c621b7e9af9973d68ccf6475af4b0858f2067fb556614f3b new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/c167d5b680a5a084c621b7e9af9973d68ccf6475af4b0858f2067fb556614f3b --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/c167d5b680a5a084c621b7e9af9973d68ccf6475af4b0858f2067fb556614f3b 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/c167d5b680a5a084c621b7e9af9973d68ccf6475af4b0858f2067fb556614f3b 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -{"architecture":"amd64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"},{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:783b8b05724ae7998917558527ef930f1442af2f071850913fc406992e44606c","sha256:f95c9a2c33d0677226db00b3890b5f89efe1e12819aca4396971620e6fd679dd"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/e83f38a3553148f2189193b4908cce3576907dacddc14617d0e8d22370c80cce new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/e83f38a3553148f2189193b4908cce3576907dacddc14617d0e8d22370c80cce --- old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/e83f38a3553148f2189193b4908cce3576907dacddc14617d0e8d22370c80cce 1970-01-01 01:00:00.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/e83f38a3553148f2189193b4908cce3576907dacddc14617d0e8d22370c80cce 2026-02-24 16:25:02.000000000 +0100 @@ -0,0 +1 @@ +{"architecture":"amd64","author":"github.com/chainguard-dev/apko","created":"1970-01-01T00:00:00Z","history":[{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"},{"author":"apko","created":"1970-01-01T00:00:00Z","created_by":"apko","comment":"This is an apko single-layer image"}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:783b8b05724ae7998917558527ef930f1442af2f071850913fc406992e44606c","sha256:79551ed211a0ca334ac3206473ff5f46a095fb4baf5ee4d13b804d8acca517bf"]},"config":{"Entrypoint":["/bin/sh","-l"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin","SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"],"Labels":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}}} \ No newline at end of file Binary files old/apko-1.1.9/internal/cli/testdata/top_image/blobs/sha256/ff58773a945b386b75663553a7f451c4f6116ec6fac9c22ef41ebaf27704a566 and new/apko-1.1.11/internal/cli/testdata/top_image/blobs/sha256/ff58773a945b386b75663553a7f451c4f6116ec6fac9c22ef41ebaf27704a566 differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/internal/cli/testdata/top_image/index.json new/apko-1.1.11/internal/cli/testdata/top_image/index.json --- old/apko-1.1.9/internal/cli/testdata/top_image/index.json 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/internal/cli/testdata/top_image/index.json 2026-02-24 16:25:02.000000000 +0100 @@ -1 +1 @@ -{"schemaVersion":2,"mediaType":"application/vnd.oci.image.index.v1+json","manifests":[{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":631,"digest":"sha256:14160a36b6fb2f3d325eb09ada490e6ca171285b2ab0cd5d41989c11972eb153","platform":{"architecture":"amd64","os":"linux"}},{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":631,"digest":"sha256:45338ea1681a61ef1ff24b109f0c13aa95113a33cfb684377f8b89fe63b754b5","platform":{"architecture":"arm64","os":"linux"}}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}} \ No newline at end of file +{"schemaVersion":2,"mediaType":"application/vnd.oci.image.index.v1+json","manifests":[{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":631,"digest":"sha256:3c6b4bb5b39be26700e6baff9d83a53bba4a0d994e22638d11a4c104bc9e39c9","platform":{"architecture":"amd64","os":"linux"}},{"mediaType":"application/vnd.oci.image.manifest.v1+json","size":631,"digest":"sha256:9743477d70b66d27d627eb7dc1a548dee98ad742b195e24545b73a1c7113aea8","platform":{"architecture":"arm64","os":"linux"}}],"annotations":{"org.opencontainers.image.created":"1970-01-01T00:00:00Z"}} \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.9/pkg/options/options.go new/apko-1.1.11/pkg/options/options.go --- old/apko-1.1.9/pkg/options/options.go 2026-02-19 07:52:51.000000000 +0100 +++ new/apko-1.1.11/pkg/options/options.go 2026-02-24 16:25:02.000000000 +0100 @@ -36,10 +36,10 @@ APKIndexDecompressedMaxSize int64 `json:"apkIndexDecompressedMaxSize,omitempty"` // APKControlMaxSize is the maximum decompressed size for APK control sections (default: 10 MB). APKControlMaxSize int64 `json:"apkControlMaxSize,omitempty"` - // APKDataMaxSize is the maximum decompressed size for APK data sections (default: 4 GB). + // APKDataMaxSize is the maximum decompressed size for APK data sections (default: ~17 GB). // This protects against gzip bombs. APKDataMaxSize int64 `json:"apkDataMaxSize,omitempty"` - // HTTPResponseMaxSize is the maximum size for HTTP responses (default: 2 GB). + // HTTPResponseMaxSize is the maximum size for HTTP responses (default: ~9 GB). HTTPResponseMaxSize int64 `json:"httpResponseMaxSize,omitempty"` } @@ -49,7 +49,7 @@ APKIndexDecompressedMaxSize: 100 << 20, // 100 MB APKControlMaxSize: 10 << 20, // 10 MB APKDataMaxSize: 16 << 30, // ~17 GB - HTTPResponseMaxSize: 2 << 30, // 2 GB + HTTPResponseMaxSize: 8 << 30, // ~9 GB } } ++++++ apko.obsinfo ++++++ --- /var/tmp/diff_new_pack.Z1egQD/_old 2026-02-25 21:11:26.012305835 +0100 +++ /var/tmp/diff_new_pack.Z1egQD/_new 2026-02-25 21:11:26.016306001 +0100 @@ -1,5 +1,5 @@ name: apko -version: 1.1.9 -mtime: 1771483971 -commit: 1a683b227173c90d68cba68c21b662e1f94276b0 +version: 1.1.11 +mtime: 1771946702 +commit: 04910df9249f691d87c44d957113884ffff46c40 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/apko/vendor.tar.gz /work/SRC/openSUSE:Factory/.apko.new.1977/vendor.tar.gz differ: char 58, line 1
