v1.3.4

Security Fix

After release, the change in this version was identified as a fix for CVE-2022-23538 - User credentials leaked to third-party service via HTTP redirect.

See GHSA-7p8m-22h4-9pj7 for full details.

What's Changed

• Fix for specific S3 backends by @EmmEff in #154

Full Changelog: v1.3.3...v1.3.4

v1.4.0

What's Changed

• CircleCI updates by @EmmEff in #147
• CircleCI updates by @EmmEff in #148
• build(deps): bump github.com/sylabs/json-resp from 0.8.1 to 0.8.2 by @dependabot in #149
• Support for pulling SIF images directly from OCI registry by @EmmEff in #150
• Support for pushing SIF images directly to OCI registry by @EmmEff in #151

Full Changelog: v1.3.3...v1.4.0

v1.3.3

What's Changed

• Change master branch to main by @tri-adam in #144
• Update Go deps by @EmmEff in #145
• Reduce Dependencies by @tri-adam in #146

Full Changelog: v1.3.2...v1.3.3

v1.3.2

What's Changed

• (Re)use Client.HTTPClient for range requests by @EmmEff in #143

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Allow http.Client to handle all redirects except http.StatusSeeOther by @brisk022 in #140

New Contributors

• @brisk022 made their first contribution in #140

Full Changelog: v1.3.0...v1.3.1

v1.3.0

What's Changed

• build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 by @dependabot in #136
• Adopt Go 1.18 by @tri-adam in #133
• build(deps): bump github.com/sylabs/json-resp from 0.8.0 to 0.8.1 by @dependabot in #137
• Bump golangci-lint to v1.45 by @tri-adam in #138
• Add ParseAmbiguous by @tri-adam in #139

Full Changelog: v1.2.2...v1.3.0

v1.2.2

What's Changed

• Bump golang.org/x/sync by @tri-adam in #132
• CI Improvements by @tri-adam in #131
• Trim Leading Slash in Ref Paths by @tri-adam in #135

Full Changelog: v1.2.1...v1.2.2

Version 1.2.1

What's Changed

• ci: bump golangci-lint to 1.43 by @tri-adam in #122
• Add V1 OpenAPI Spec by @tri-adam in #123
• Remove HTTP client timeout by @EmmEff in #124

Full Changelog: v1.2.0...v1.2.1

Version 1.2.0

The major enhancement in this release is the implementation of ConcurrentDownloadImage(), which supports (configurable) concurrent downloads. Also included are spelling/grammar fixes in code comments.

Version 1.1.2

This patch release bumps github.com/sylabs/json-resp to 0.8.0.