kpack v0.17.1

What's Changed

• Updating lifecycle image registry for local development by @rashedkvm in #1856
• Extends builds.kpack.io with a new optional field spec.builder.ref by @rashedkvm in #1857
• fix: filename typo in tutorial.md by @ragul-engg in #1863
• Bump dependencies by @tomkennedy513 in #1875
• fix: remove gcr.io reference from tutorial by @mogsie in #1878
• Pin docker dependency by @tomkennedy513 in #1876
• Remove gcr.io references from tests by @tomkennedy513 in #1885
• Bump github.com/buildpacks/lifecycle from 0.20.10 to 0.20.12 by @dependabot[bot] in #1888
• Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 by @dependabot[bot] in #1890
• security: update dependencies to fix CVEs by @aboryslawski in #1927
• README: Link to buildpack-community kpack CLI repo by @gogolok in #1926
• README: Correct codecov batch by @gogolok in #1925
• Fix failing e2e by @tomkennedy513 in #1929

New Contributors

• @rashedkvm made their first contribution in #1856
• @ragul-engg made their first contribution in #1863
• @mogsie made their first contribution in #1878
• @aboryslawski made their first contribution in #1927

Full Changelog: v0.17.0...v0.17.1

sha256 checksum:

8e62eeed25dd81d1a3c75d9a0fd0f6e820d033ef2d49b639f6ac68fa4ae76e89  release-0.17.1.yaml

kpack v0.17.0

NOTE: This release switches the registry to use ghcr.io as the previous kpack distribution registry is being shut down. Please migrate to this release to avoid image pull failures on other versions.

Features

• Implement lifecycle CRD by @natalieparellano in #1628
• Enable using cache registry for the first build by @mtparet in #1767
• feat: allow buildpacks with empty stacks by @ctrox in #1825
• Do not reconcile images and builds being deleted by @danail-branekov in #1820
• Migrate images to GHCR by @chenbh in #1853

Breaking Changes

• Remove support for windows builds by @tomkennedy513 in #1834

Bumped Dependencies

• Bump lifecycle image to 0.20.5 by @chenbh in #1814
• Bump deps to resolve cves by @tomkennedy513 in #1845

New Contributors

• @mtparet made their first contribution in #1767
• @ctrox made their first contribution in #1825

sha256 checksum:

0915bd8206de40360079b2e52af1a34560fc277cbe44eedaa4c7dca0dac5127a  release-0.17.0.yaml

Full Changelog: v0.16.0...v0.17.0

kpack v0.16.1

What's Changed

• Bump lifecycle image to 0.20.5 by @chenbh in #1814
• Pull in changes from main for v0.16.1 by @chenbh in #1815

sha256 checksum:

8e0144497ebf2dab2b6b009af87a80535e14420bcb0c3088836b99d0750f351d  release-0.16.1.yaml

Full Changelog: v0.16.0...v0.16.1

kpack v0.16.0

What's Changed

• Update fetch.go to include a Depth specifier by @ollie-kane-CB in #1732
• update lifecycle dep by @BRONSOLO in #1733
• Adopters: Korifi by @gogolok in #1756
• Remove obsolete function builtWithBuildpacks by @gogolok in #1764
• README: Correct CI badge link by @gogolok in #1763
• Use go 1.23.3 in go.mod by @gogolok in #1765
• Bump go-git and disable dependabot for older release branches by @chenbh in #1812

Dependency bumps

• Bump lifecycle version from 0.17.3 to 0.19.7 by @natalieparellano in #1669
• Bump golang.org/x/net from 0.26.0 to 0.30.0 by @dependabot in #1724
• Bump renovatebot/github-action from 40.2.2 to 41.0.8 by @dependabot in #1784
• Bump helm/kind-action from 1.10.0 to 1.12.0 by @dependabot in #1781
• Bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #1683
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.8.0 by @dependabot in #1738
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 by @dependabot in #1786
• Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 by @dependabot in #1789
• Bump github.com/docker/docker from 26.1.4+incompatible to 26.1.5+incompatible by @dependabot in #1790
• Bump github.com/open-policy-agent/opa from 0.63.0 to 0.68.0 by @dependabot in #1788
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #1791
• Bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @dependabot in #1807
• Bump golang.org/x/oauth2 from 0.19.0 to 0.25.0 by @dependabot in #1783
• Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azfile from 1.2.2 to 1.4.0 by @dependabot in #1813
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.14.0 to 1.17.0 by @dependabot in #1787

New Contributors

• @ollie-kane-CB made their first contribution in #1732
• @gogolok made their first contribution in #1756

SHA256 checksum

18e7bc9f48f6e065824a2fea85bdf03966de0d2468c662ea980c0bbca812556b  release-0.16.0.yaml

Full Changelog: v0.15.0...v0.16.0

kpack v0.15.0

What's Changed

• Add scaling factor flag to scale client-side requests by @samj1912 in #1667

Bumped Dependencies

• Bump renovatebot/github-action from 40.1.6 to 40.2.2 by @dependabot in #1662
• Bump github.com/google/go-containerregistry from 0.19.1 to 0.20.0 by @dependabot in #1665
• Bump codecov/codecov-action from 4.1.0 to 4.5.0 by @dependabot in #1651
• Bump imjasonh/setup-crane from 0.3 to 0.4 by @dependabot in #1650
• Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1579
• Bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #1631
• Bump helm/kind-action from 1.8.0 to 1.10.0 by @dependabot in #1607
• Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in #1649
• Bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @dependabot in #1668

sha256 checksum:

c11bba45ab33da26b658da77cf73f103d239eef5d922ab0ac76b94ad49d67e68  release-0.15.0.yaml

Full Changelog: v0.14.1...v0.15.0

kpack v0.14.1

What's Changed

Bug Fixes

• Fix blob auth headers for Azure by @chenbh in #1637

Bumped Dependencies

• Specify go patch version in go.mod by @chenbh in #1646
• Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #1638
• Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in #1644
• Bump github.com/sigstore/cosign/v2 from 2.2.2 to 2.2.4 by @dependabot in #1643
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.6.0 by @dependabot in #1645

sha256 checksum:

d4c85e5c045d7b7059332d8d3af92e5b03f3d2e7db70083465f7e36e7da24081  release-0.14.1.yaml

Full Changelog: v0.14.0...v0.14.1

kpack v0.14.0

What's Changed

• Add WEBHOOK_PORT environment variable by @ChuckQuinnIV in #1538
• Relocate the run image to the builder repo by @tomkennedy513 in #1533
• Shorten service binding secret volume mount names by @georgethebeatle in #1562
• Support authentication methods for blobs by @chenbh in #1616

Bumped Dependencies

• Bump aws sdk versions by @chenbh in #1512
• Bump golang.org/x/net from 0.19.0 to 0.21.0 by @dependabot in #1522
• Bump github.com/moby/buildkit from 0.11.6 to 0.12.5 by @antoinerg in #1566
• Bump github.com/google/go-containerregistry from 0.17.0 to 0.19.1 by @dependabot in #1554
• Bump softprops/action-gh-release from 1 to 2 by @dependabot in #1546
• Bump codecov/codecov-action from 3.1.4 to 4.1.0 by @dependabot in #1541
• Bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #1559
• Bump renovatebot/github-action from 40.0.2 to 40.1.6 by @dependabot in #1563
• Bump golang.org/x/sync from 0.5.0 to 0.6.0 by @dependabot in #1471
• Bump golang.org/x/net from 0.21.0 to 0.25.0 by @dependabot in #1612

CI changes

• Fix download artifacts by @chenbh in #1505
• Enable renovate by @xtreme-shane-lattanzio in #1534
• Update renovate env by @tomkennedy513 in #1539

New Contributors

• @ChuckQuinnIV made their first contribution in #1538
• @georgethebeatle made their first contribution in #1562

sha256 checksum:

2667b2c06ea5244998af87f2f056b006bf9dabcf5dc6b99698233aaacbacd15c  release-0.14.0.yaml

Full Changelog: v0.13.4...v0.14.0

kpack v0.13.4

Bumped Dependencies

• bump lifecycle version from 0.17.3 to 0.17.5 by @antoinerg in #1568
• Bump golang.org/x/net from 0.21.0 to 0.25.0 by @antoinerg in #1630

sha256 checksum:

fee1b86ed9c68dbf362093bd31ddf1e36a24a91c564f052c7cc84947831dd80d  release-0.13.4.yaml

Full Changelog: v0.13.3...v0.13.4

kpack v0.13.3

What's Changed

• Bump github.com/moby/buildkit from 0.11.6 to 0.12.5 by @antoinerg in #1565

sha256 checksum:

894a9490555efd8053138f59d95dbae9b557a3a27ce1d2377e59dbe605751d08  release-0.13.3.yaml

Full Changelog: v0.13.2...v0.13.3

kpack v0.12.5

What's Changed

• Bump github.com/moby/buildkit from 0.11.6 to 0.12.5 by @antoinerg in #1567

sha256 checksum:

49841cf7ce2aa1c99d9d9af7743c4fd4751604b4339181c03e62bf2aa10b2dd5  release-0.12.5.yaml

Full Changelog: https://github.com/buildpacks-community/kpack/compare/v0.12.4..v0.12.5