What's Changed

• [1.4] Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in the go_modules group across 1 directory by @github-actions[bot] in #554
• [1.4] Bump github.com/sigstore/timestamp-authority/v2 from 2.0.4 to 2.0.6 in the go_modules group across 1 directory by @github-actions[bot] in #564
• [1.4] Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in the go_modules group across 1 directory by @github-actions[bot] in #567
• fixed versions and dependencies on release/1.4 by @zackbradys in #568
• [1.4] removed unnecessary rewrite flag from sync by @github-actions[bot] in #573
• added makefile command for vulnerability checks (backport #577) by @mergify[bot] in #580
• remove cherrypick bot and add mergify details (backport #581) by @mergify[bot] in #582

Full Changelog: v1.4.2...v1.4.3

What's Changed

• [1.4] Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in the go_modules group across 1 directory by @github-actions[bot] in #554
• [1.4] Bump github.com/sigstore/timestamp-authority/v2 from 2.0.4 to 2.0.6 in the go_modules group across 1 directory by @github-actions[bot] in #564
• [1.4] Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in the go_modules group across 1 directory by @github-actions[bot] in #567
• fixed versions and dependencies on release/1.4 by @zackbradys in #568
• [1.4] removed unnecessary rewrite flag from sync by @github-actions[bot] in #573

Full Changelog: v1.4.2...v1.4.3-rc.1

What's Changed

• Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 in the go_modules group across 1 directory by @dependabot[bot] in #497
• Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 in the go_modules group across 1 directory by @dependabot[bot] in #498
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory by @dependabot[bot] in #502
• update cosign fork to 3.0.4 plus dep tidy by @amartin120 in #509
• fix: Fix file:// dependency chart path resolution by @eklatzer in #510
• update github.com/olekukonko/tablewriter to v1.1.2 by @amartin120 in #512
• keep registry on image rewrite if not specified by @CamrynCarter in #501
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory by @dependabot[bot] in #517
• update release/2.0 from main by @zackbradys in #546

New Contributors

• @eklatzer made their first contribution in #510

Full Changelog: v1.4.2-dev.1...v2.0.0-dev.2

What's Changed

• smaller changes and updates for v1.4.2 release by @zackbradys in #524
• over-"haul": replace oras v1 and cosign fork with native containerd-based implementation by @amartin120 in #515
• Bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible in the go_modules group across 1 directory by @dependabot[bot] in #526
• removed deprecated code by @zackbradys in #528
• fix extract for oci files by @amartin120 in #529
• improved test coverage by @amartin120 in #530
• adjust extract to handle an image index appropriately by @amartin120 in #531

Full Changelog: v1.4.2-rc.1...v2.0.0-dev.1

What's Changed

• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 in the go_modules group across 1 directory by @dependabot[bot] in #495
• fix for new helm chart features by @zackbradys in #496
• Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 in the go_modules group across 1 directory by @dependabot[bot] in #497
• Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 in the go_modules group across 1 directory by @dependabot[bot] in #498
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory by @dependabot[bot] in #502
• update cosign fork to 3.0.4 plus dep tidy by @amartin120 in #509
• fix: Fix file:// dependency chart path resolution by @eklatzer in #510
• update github.com/olekukonko/tablewriter to v1.1.2 by @amartin120 in #512
• keep registry on image rewrite if not specified by @CamrynCarter in #501
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory by @dependabot[bot] in #517
• fix: handling of file referenced dependencies without repository field by @devLeitner in #514
• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in the go_modules group across 1 directory by @dependabot[bot] in #520
• dev.md file by @CamrynCarter in #521
• smaller changes and updates for v1.4.2 release by @zackbradys in #524

New Contributors

• @eklatzer made their first contribution in #510
• @devLeitner made their first contribution in #514

Full Changelog: v1.4.1...v1.4.2

What's Changed

• Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 in the go_modules group across 1 directory by @dependabot[bot] in #497
• Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 in the go_modules group across 1 directory by @dependabot[bot] in #498
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory by @dependabot[bot] in #502
• update cosign fork to 3.0.4 plus dep tidy by @amartin120 in #509
• fix: Fix file:// dependency chart path resolution by @eklatzer in #510
• update github.com/olekukonko/tablewriter to v1.1.2 by @amartin120 in #512
• keep registry on image rewrite if not specified by @CamrynCarter in #501
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 in the go_modules group across 1 directory by @dependabot[bot] in #517
• fix: handling of file referenced dependencies without repository field by @devLeitner in #514
• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in the go_modules group across 1 directory by @dependabot[bot] in #520
• dev.md file by @CamrynCarter in #521

New Contributors

• @eklatzer made their first contribution in #510
• @devLeitner made their first contribution in #514

Full Changelog: v1.4.2-dev.1...v1.4.2-rc.1

What's Changed

• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 in the go_modules group across 1 directory by @dependabot[bot] in #495
• fix for new helm chart features by @zackbradys in #496

Full Changelog: v1.4.1...v1.4.2-dev.1

Fixes

• Implemented fix to better support loading Hauler bundles directly into the containerd cache for K3s and RKE2 via the /var/lib/rancher/rke2/agent/images directory. Users can now pass the --containerd flag when using hauler store save to ensure full compatibility with containerd, regardless of the contents of the store.

What's Changed

• Bump github.com/sigstore/fulcio from 1.8.3 to 1.8.5 in the go_modules group across 1 directory by @dependabot[bot] in #489
• fix and support containerd imports of hauls by @zackbradys in #492
• fixed typos for containerd imports by @zackbradys in #493

Full Changelog: v1.4.0...v1.4.1

What's Changed

New Features

Automatic Helm Chart Dependency & Image Resolution

• When adding helm charts to a Hauler store, with hauler store add chart …, flags can be set (--add-dependencies and --add-images) to parse, fetch, and include all dependent charts and container images. This includes images found in the templates, images specified in the chart.yaml annotations, and images in the image-lock file if it is included with the chart. This helps to ensure teams arrive in airgapped environments with everything they need.

Artifact Renaming & Registry Path Rewrites

• Users can now fully customize how artifacts are named and where they are stored within private registries. This allows teams to enforce their own internal standards, organize artifacts by mission or program, and maintain cleaner, more predictable registries. Not sure what you’re able to rewrite? Try it using hauler store add image … --rewrite

Selective Artifact Removal

• Hauler now supports removing individual or multiple artifacts from an existing store using simple string matching. This makes it easy to make edits-such as removing an unintended image tag-without reprocessing large stores. Please try it out today by using hauler store remove …

All Changes

• updated/fixed workflow dependency versions by @zackbradys in #478
• Path rewrites by @CamrynCarter in #475
• delete artifacts from store by @CamrynCarter in #473
• [feature] migrated tempdir to store persistent flags by @zackbradys in #484
• add experimental notes by @CamrynCarter in #483
• more experimental feature updates by @zackbradys in #486
• added/fixed helm chart images/dependencies features by @zackbradys in #485
• added/updated logging for serve and remove by @zackbradys in #487

New Contributors

• @CamrynCarter made their first contribution in #475

Full Changelog: v1.3.2...v1.4.0

What's Changed

• updated/fixed workflow dependency versions by @zackbradys in #478
• Path rewrites by @CamrynCarter in #475
• delete artifacts from store by @CamrynCarter in #473
• [feature] migrated tempdir to store persistent flags by @zackbradys in #484
• add experimental notes by @CamrynCarter in #483
• more experimental feature updates by @zackbradys in #486
• added/fixed helm chart images/dependencies features by @zackbradys in #485

New Contributors

• @CamrynCarter made their first contribution in #475

Full Changelog: v1.3.2...v1.4.0-rc.1