Release v0.27.9

Changelog

• 914a574 Add an OperatingSystem package to our image SBOMs (#1690)

Release v0.27.7

Changelog

• c0a179e improve error messages in expandApk (#1675)

Release v0.27.6

What's Changed

• ldsocache snapshot/20250507 by @dannf in #1665
• lock: fix up filter for wanted arches by @xnox in #1670

Full Changelog: v0.27.5...v0.27.6

Release v0.27.5

What's Changed

• Respect arch flags when using lockfiles by @jonjohnsonjr in #1664
• build(deps): bump github.com/charmbracelet/log from 0.4.1 to 0.4.2 by @dependabot in #1669

Full Changelog: v0.27.4...v0.27.5

Release v0.27.4

What's Changed

• Remove link to "support" by @juliandunn in #1662
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in #1666
• Guard against empty inputs list in unify() by @jonjohnsonjr in #1668

New Contributors

• @juliandunn made their first contribution in #1662

Full Changelog: v0.27.3...v0.27.4

Release v0.27.3

What's Changed

• build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot in #1657
• build(deps): bump github/codeql-action from 3.28.14 to 3.28.17 by @dependabot in #1652
• build(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in #1639
• build(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.16.0 by @dependabot in #1626
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in #1656
• build(deps): bump google.golang.org/api from 0.229.0 to 0.231.0 by @dependabot in #1647
• build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0 by @dependabot in #1655
• README: fix url typo by @wlynch in #1661
• Fix build_repositories for layered images by @jonjohnsonjr in #1663

Full Changelog: v0.27.2...v0.27.3

Release v0.27.2

What's Changed

• Drop cosign dep by @jonjohnsonjr in #1645
• Use maps and slices from stdlib by @jonjohnsonjr in #1646
• auth: Add oauth2.TokenSource auth provider by @wlynch in #1651
• usrmerge: apko needs to create apk dirs in /usr/lib instead of /lib by @zmarano in #1593
• Make apko hermetic again. by @sfc-gh-ptabor in #1654

New Contributors

• @zmarano made their first contribution in #1593

Full Changelog: v0.27.1...v0.27.2

Release v0.27.1

What's Changed

• apk: expose ParsedConstraint version by @shimmerjs in #1640
• Allow an empty layering object for legacy behavior by @mattmoor in #1643

New Contributors

• @shimmerjs made their first contribution in #1640

Full Changelog: v0.27.0...v0.27.1

Release v0.27.0

What's Changed

• generate /etc/ld.so.cache by @dannf in #1629
• Drop experimental tag from layering by @jonjohnsonjr in #1635
• Apko 0.26.0 regression: Build with base stopped working. by @sfc-gh-ptabor in #1633
• Apko keyrings to recognize key suffixes when lost during fetch: by @sfc-gh-ptabor in #1630
• ldso-cache: Fix small nits by @jonjohnsonjr in #1634

Potentially Breaking

Since we now populate etc/ld.so.cache, we expect content to change from the previous release, and it's possible that this will have observable effects (positive, we hope) on the images at runtime.

Full Changelog: v0.26.1...v0.27.0

Release v0.26.1

What's Changed

• apk cache: ignore error on cache tmpfile chmod by @wlynch in #1631

Full Changelog: v0.26.0...v0.26.1