v0.13.1

What's Changed

• Bump apko to v0.13.1 by @jonjohnsonjr in #217

Full Changelog: v0.13.0...v0.13.1

v0.13.0

What's Changed

• Pull in Jon's solver fix by @mattmoor in #209
• support writing pre- and post-resolved configs to disk by @imjasonh in #213
• Bump hashicorp/setup-terraform from 2 to 3 by @dependabot in #191
• Bump actions/setup-go from 4 to 5 by @dependabot in #207
• Bump sigstore/cosign-installer from 3.1.2 to 3.3.0 by @dependabot in #206
• Bump github.com/google/go-containerregistry from 0.16.2-0.20230905180039-a748190e18d4 to 0.17.0 by @dependabot in #205
• Update images digests by @chainguardian in #180
• Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in #212
• Bump apko to v0.13.0 by @jonjohnsonjr in #215

Note: Use ghcr.io/wolfi-dev/apko:latest@sha256:bc30928b28670100da9e0307082f320ee219feaa9f89a0d29be2b7645a4fe625 for reproducibility tests.

Full Changelog: v0.12.0...v0.13.0

v0.12.0

What's Changed

• Retry pushes by @jonjohnsonjr in #199
• Bump apko to v0.12.0 by @jonjohnsonjr in #202

Full Changelog: v0.11.0...v0.12.0

v0.11.0

What's Changed

• Bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in #190
• Bump apko to v0.11.2 by @jonjohnsonjr in #194

Full Changelog: v0.10.8...v0.11.0

v0.10.8

What's Changed

• Bump actions/checkout from 3 to 4 by @dependabot in #152
• Bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in #179
• Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 by @dependabot in #153
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.4 to 0.0.10 by @dependabot in #176
• Update images digests by @chainguardian in #165
• Bump goreleaser/goreleaser-action from 4.3.0 to 5.0.0 by @dependabot in #164
• Bump crazy-max/ghaction-import-gpg from 5 to 6 by @dependabot in #163
• Bump k8s.io/apimachinery from 0.28.1 to 0.28.2 by @dependabot in #168
• Bump github.com/hashicorp/terraform-plugin-testing from 1.3.0 to 1.5.1 by @dependabot in #154
• Bump google.golang.org/grpc from 1.57.0 to 1.57.1 by @dependabot in #187
• Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in #182
• Bump k8s.io/apimachinery from 0.28.2 to 0.28.3 by @dependabot in #185
• Bump apko to pick up env fix by @jonjohnsonjr in #183

Full Changelog: v0.10.7...v0.10.8

v0.10.7

What's Changed

• parse YAML strictly, failing on unknown fields by @imjasonh in #174
• Bump go-apk by @jonjohnsonjr in #178

Full Changelog: v0.10.6...v0.10.7

v0.10.6

fix: build single-arch images compatibly with apko CLI (#173)

When asked to build a single-arch image, apko CLI builds an index
containing one manifest. By contrast, before this PR, tf-apko would
build a single-arch _image_ in this case.

This meant that the check-compatibility test (which tries to use the
apko CLI to rebuild an image from the attested locked apko config, and
get the same digest) would not get the same digest when building
single-arch images.

Signed-off-by: Jason Hall <jason@chainguard.dev>

v0.10.5

Add missing err check (#166)

Signed-off-by: Jon Johnson <jon.johnson@chainguard.dev>

v0.10.4

What's Changed

• Bump apko by @jonjohnsonjr in #160

Full Changelog: v0.10.3...v0.10.4

v0.10.3

What's Changed

• Bump apko by @jonjohnsonjr in #159

Full Changelog: v0.10.2...v0.10.3