What's Changed

• Update to new apko release by @octo-sts-10[bot] in #347

New Contributors

• @octo-sts-10[bot] made their first contribution in #347

Full Changelog: v1.5.51...v1.5.52

What's Changed

• apk_keyring: prefer embedded content over URL fetch by @a-crate in #350

New Contributors

• @a-crate made their first contribution in #350

Full Changelog: v1.5.50...v1.5.51

What's Changed

• chore(deps): bump chainguard-dev/actions/git-tag from 1.6.25 to 1.6.26 by @dependabot[bot] in #341
• chore(deps): bump chainguard-dev/actions/setup-gitsign from 1.6.25 to 1.6.26 by @dependabot[bot] in #340
• chore(deps): bump aspect_bazel_lib from 2.19.4 to 2.22.5 by @dependabot[bot] in #320
• chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #337
• fix: disable remote execution for apko_image build action by @rajatvig in #332
• Update to new apko release by @octo-sts-4[bot] in #321
• Drop Bazel 6 support and fix reproducible extension metadata (#342) by @xnox in #343

New Contributors

• @rajatvig made their first contribution in #332
• @octo-sts-4[bot] made their first contribution in #321

Full Changelog: v1.5.48...v1.5.49

What's Changed

• chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4 by @dependabot[bot] in #327
• chore(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.25 by @dependabot[bot] in #339
• chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.7 by @dependabot[bot] in #338
• chore(deps): bump gazelle from 0.50.0 to 0.51.3 by @dependabot[bot] in #334

Full Changelog: v1.5.47...v1.5.48

Major Feature

This release contains this package resolve fix:

• chainguard-dev/apko#2208

It means that sub-packages of the same full-version from the same origin, are preferred over mixing-matching versions. For example, previously if apko.yaml had "openssh=fixed-version", locking would still install "openssh-client=higher-version". But with this change it would instead resolve "openssh-client=matching-fixed-version". Overall this is more intuitive as the likely intention is to have all subpackages of the same version, when one of them is pinned down.

What's Changed

• Simplify .bazelversion by removing comments by @xnox in #316
• chore(deps): bump rules_pkg from 1.1.0 to 1.2.0 by @dependabot[bot] in #317
• chore(deps): bump stardoc from 0.8.0 to 0.8.1 by @dependabot[bot] in #318
• chore(deps): bump rules_oci from 2.2.6 to 2.3.0 by @dependabot[bot] in #319
• Update to new apko release by @octo-sts[bot] in #315

Full Changelog: v1.5.46...v1.5.47

What's Changed

• fix: skip signature segment download for unsigned apks by @markusthoemmes in #311
• chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #310
• chore(deps): bump chainguard-dev/actions from 1.6.16 to 1.6.19 by @dependabot[bot] in #309
• Update to new apko release by @octo-sts[bot] in #307
• feat: mark apko module extension as reproducible to reduce lockfile size by @xnox in #313
• Add bazel to dependabot by @xnox in #314
• Add more bazel versions by @xnox in #298
• fix: add independent cache key to apk_import to allow manual invalidation by @xnox in #312

New Contributors

• @markusthoemmes made their first contribution in #311

Full Changelog: v1.5.45...v1.5.46

What's Changed

• Update to new apko release by @octo-sts-3[bot] in #303

Full Changelog: v1.5.44...v1.5.45

What's Changed

• fix: stage apko cache as a tree artifact (follow-up to #294) by @tiborv in #302
• Update to new apko release by @octo-sts-3[bot] in #300
• chore(deps): bump chainguard-dev/actions from 1.6.15 to 1.6.16 by @dependabot[bot] in #301

Full Changelog: v1.5.43...v1.5.44

What's Changed

• Update to new apko release by @octo-sts-3[bot] in #299

New Contributors

• @octo-sts-3[bot] made their first contribution in #299

Full Changelog: v1.5.42...v1.5.43

What's Changed

• chore(deps): bump step-security/harden-runner from 2.16.0 to 2.17.0 by @dependabot[bot] in #290
• chore: bump step-security/harden-runner to v2.19.0 by @antitree in #295
• Update lock files by @xnox in #297
• Update to new apko release by @octo-sts[bot] in #285
• chore(deps): bump step-security/action-actionlint from 1.69.1 to 1.72.0 by @dependabot[bot] in #289
• chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #291
• chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #293
• chore(deps): bump chainguard-dev/actions from 1.6.13 to 1.6.15 by @dependabot[bot] in #296
• fix: replace ctx.actions.symlink with cp for Bazel 9 linux-sandbox by @tiborv in #294

New Contributors

• @antitree made their first contribution in #295
• @tiborv made their first contribution in #294

Full Changelog: v1.5.41...v1.5.42