v1.2.0-rc.1

New Features

• oras is compliant with OCI image-spec v1.1.0 and distribution-spec v1.1.0
• Support X.509 mTLS authentication with OCI registries
• PREVIEW Introduce --platform to oras attach for better multi-arch attaching experience, which allows adding referrer artifact to a specific sub-platform

Experimental Features

• BREAKING CHANGE oras discover shows tree view output by default
• BREAKING CHANGE Introduce new go templating experience to all commands support --format based on the spec
  • BREAKING CHANGE Require explicit type assertion --format go-template=TEMPLATE
  • BREAKING CHANGE Change field selectors from uppercased to lowercased
  • BREAKING CHANGE Rename digested reference selector to reference
  • Examples:
    • --format go-template="{{ .digest }}" to print the digest of the newly pushed manifest using Go template
  • Template can also be specified by --template
• Introduce output control via --format to oras pull, oras manifest fetch, and oras discover

Deprecation

• oras discover: --output is marked as deprecated and succeeded by --format

Bug Fixes

• Fix #1079: snap build cannot read default credentials file
• Fix #1268: oras blob fetch failed to output to stdout in terminal mode
• Fix #1300: pushing with multiple tags will corrupt --format output
• Minor fixes

Other Changes

• Improve UX
  • oras discover: show placeholder when artifactType is not presented in an index referrer
  • oras push: show artifact type when pushing files
  • Improve error message based on ORAS CLI error handling guildline
  • Improve identity token input by a new flag --identity-token to replace --password without --username
• Improve live progress output for terminal
  • Introduce colored output
  • Smooth download speed display with reduced fluctuation
• Update dependencies
• Update to Golang 1.22.3

Detailed Commits

• bump: tag and release ORAS CLI v1.2.0-beta.1 by @qweeah in #1266
• doc (spec): add error message guideline by @FeynmanZhou in #1163
• build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 by @dependabot in #1269
• build(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 by @dependabot in #1270
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 in /test/e2e by @dependabot in #1278
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in #1272
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 in /test/e2e by @dependabot in #1271
• fix(e2e): update ZOT image by @qweeah in #1284
• build(deps): bump golang.org/x/term from 0.17.0 to 0.18.0 by @dependabot in #1279
• test(unit): exclude darwin from go build constraint by @wangxiaoxuan273 in #1289
• refactor: pass cobra.Command to all cmd exec functions by @TerryHowe in #1285
• fix: make --output - implies --no-tty by @wangxiaoxuan273 in #1286
• build(actions): update github actions for Node 20 by @TerryHowe in #1287
• fix: Revert github actions coverage until fixed by @TerryHowe in #1290
• feat: Use cobra.Command.OutOrStdout method for output by @TerryHowe in #1288
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 in /test/e2e by @dependabot in #1296
• build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 in /test/e2e by @dependabot in #1297
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 in /test/e2e by @dependabot in #1305
• refactor: add stdout to metadata handlers by @qweeah in #1312
• bump: bump oras-go to 2.5.0 by @wangxiaoxuan273 in #1303
• refactor: use command output in status output by @qweeah in #1314
• chore: using const to replace string by @LinuxSuRen in #1316
• refactor: make command accessible in option parser by @wangxiaoxuan273 in #1315
• bump: update golang to 1.22 by @TerryHowe in #1282
• build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #1323
• build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 by @dependabot in #1322
• bump(ci): update codecov gha to v4 by @qweeah in #1324
• bump(ci): update golangci-lint to v4 by @qweeah in #1325
• feat: support --format for oras pull by @qweeah in #1293
• feat: support --platform for oras attach by @qweeah in #1309
• feat: show artifact type when pushing files by @wangxiaoxuan273 in #1320
• fix: oras push should return error when artifacttype is empty for spec 1.1 by @wangxiaoxuan273 in #1317
• build(ci): add dependabot to update ci version automatically by @qweeah in #1326
• build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 by @dependabot in #1328
• build(deps): bump goreleaser/goreleaser-action from 2 to 5 by @dependabot in #1329
• build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #1331
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #1330
• build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #1332
• feat: support --format in manifest fetch command by @qweeah in #1295
• ux: improve the usage doc of --image-spec by @wangxiaoxuan273 in #1334
• feat: support --format in oras discover by @qweeah in #1299
• chore: add preview feature mark to platform-specific attaching by @qweeah in #1337
• feat: oras discover should show a placeholder of artifactType if it's not presented by @wangxiaoxuan273 in #1336
• feat: make image spec preview by @wangxiaoxuan273 in #1338
• feat: make --identity-token an alias of --password by @wangxiaoxuan273 in #1294
• fix: discard tagging output when pushing with formatted output by @qweeah in #1302
• feat: add color to progress mark and bar by @qweeah in #1344
• feat: make all go-template key lower-cased by @qweeah in #1343
• feat: improve error message when detecting conflicting flags by @wangxiaoxuan273 in #1345
• feat: add mTLS options by @sabre1041 in #1319
• chore: set go version to 1.22.0 in go.mod by @Amulyam24 in #1351
• fix: fix failed Windows unit test by @wangxiaoxuan273 in #1352
• chore(ux): optimize progress bar by @qweeah in #1349
• fix: fix error message when output is used before format for oras discover by @wangxiaoxuan273 in #1354
• fix: return error when --format and --pretty are both used by @wangxiaoxuan273 in #1359
• fix: ignore --pretty when --output is used for oras manifest fetch by @wangxiaoxuan273 in #1363
• build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 in /test/e2e by @dependabot in #1364
• build(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #1370
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 in /test/e2e by @dependabot in #1369
• feat: improve error message of when a set of flags is required to use together by @wangxiaoxuan273 in #1358
• build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 in /test/e2e by @dependabot in #1371
• refactor: move logger method to command by @TerryHowe in #1355
• refactor: Move ShortDigest out of display package by @TerryHowe in #1373
• build(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 by @dependabot in #1374
• fix: Replace obsolete html element by @TerryHowe in #1372
• chore: project selected fields from OCI descriptor by @qweeah in #1362
• refactor: No error return for print by @TerryHowe in #1375
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 in /test/e2e by @dependabot in #1376
• feat: add pushed tags to metadata by @qweeah in #1346
• doc(spec): formatted ORAS CLI output by @FeynmanZhou in #1199
• build(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #1379
• feat: add --template and support --format go-template=TEMPLATE experience by @qweeah in #1377
• bump: update Golang to v1.22.3 by @qweeah in #1380
• ci(release): add dispatch GHA for snapcraft classic release by @qweeah in #1256

New Contributors

• @LinuxSuRen made their first contribution in #1316
• @sabre1041 made their first contribution in #1319
• @Amulyam24 made their first contribution in #1351

Full Changelog: v1.2.0-beta.1...v1.2.0-rc.1

Notes

This release was signed with 46D3 369B 393F 6F82 71FD 1CE8 F86E C70D 2B0C 404F (@qweeah's GPG key) which can be found here.