• cli/command: remove uses of GetAuthConfigKey, ParseRepositoryInfo #5942
• cli/command, cli-plugins/plugin: some cleanups in WithInitializeClient, withPluginClientConn #6081
• cli/command: remove interactive login prompt from docker push/pull #6174
• internal/registryclient: repositoryEndpoint: memoize repoName #6327
• cli/command: remove deprecated RegistryAuthenticationPrivilegedFunc #6349
• cli/command/image: runPush: minor cleanups and linting issues #6363
• cli/command/plugin: simplify auth #6372
• cli/command/image: pushTrustedReference: internalize constructing indexInfo #6507

Really (REALLY) work in progress; slowly untangling some of the auth-code which was wrapper-upon-wrapper-upon-wrapper; often because types like registry.IndexInfo or registry.RepositoryInfo were part of the signature.

Docker Content Trust added yet-another layer of abstraction on top of that, with trust.ImageRefAndAuth, which is a wrapper on its own to wrap all those bits.

In most cases, all we need is;

• either the name of the registry, or an image-ref from which we can deduct the name
• we DONT need to know about Mirrors, because the client doesn't configure those
• for most situations we don't even need to know about "insecure registries", but we can deduct "defaults" there from the hostname (default is loopbacks are insecure, everything else isn't)

And of course, there's the "special cases" for docker hub;

• docker.io or index.docker.io PREFIX means "docker hub registry" (actual registry is registry-1.docker.io (but there's other domains possible ⚠️ we still need to normalise those)
• we currently use https://index.docker.io/v1/ as KEY to store credentials for those
• ☝️ also something we should consider changing, because for other registries, we use hostname without scheme / path

But there's more to untangle, such as creds-helpers/stores converting "to hostname", but other paths don't, and likely corner-cases, where (e.g.) a trailing / is missing in https://index.docker.io/v1/, etc etc.

- Human readable description for the release notes

- A picture of a cute animal (not mandatory but encouraged)