1.2831.0

[github.com/gardener/cc-utils:1.2831.0]

✨ New Features

• [OPERATOR] ctt: the initial per-host concurrency limit is now configurable via max_concurrent in each target's processing.cfg kwargs, and globally via --max-concurrent-per-host (default: 8). Useful for registries with strict write rate-limits (e.g. Keppel). by @ccwienk [#1715]

1.2830.0

[github.com/gardener/cc-utils:1.2830.0]

✨ New Features

• [DEVELOPER] The Python OCM library now supports more access/artefact types for (de-)serialisation by @8R0WNI3 [#1690]

1.2829.0

[github.com/gardener/cc-utils:1.2829.0]

🏃 Others

• [OPERATOR] sbom: CBOM enrichment now resolves ~50% more algorithm components that cbomkit-theia
  leaves without key sizes (per-file summary entries not linked to cert key-material).
  Gobinary inference gains rules for AWS SDK v1/v2, smithy-go, Alibaba Cloud SDK, and
  egress-filter-refresher — fixing zero-asset CBOM classification for ecr-credential-provider. by @ccwienk [#1709]

1.2828.0

[github.com/gardener/cc-utils:1.2828.0]

✨ New Features

• [OPERATOR] CBOM enrichment: cbomkit-theia CBOMs are now post-processed to populate
  missing RSA/EC key sizes, converting MANUAL compliance violations to
  actionable findings with concrete key-size information. by @ccwienk [#1708]

🐛 Bug Fixes

• [OPERATOR] Fix _PerHostThrottle.on_success() being called on exhausted-retry 429/5xx responses.
  The concurrency limit now only grows back when the response is actually successful (2xx). by @ccwienk [#1707]

1.2827.0

[github.com/gardener/cc-utils:1.2827.0]

✨ New Features

• [DEVELOPER] The Python OCM library now supports OCI index manifests for component descriptors by @8R0WNI3 [#1703]

1.2826.0

no release-notes available

1.2825.0

[github.com/gardener/cc-utils:1.2825.0]

✨ New Features

• [OPERATOR] ctt: replication targets are now processed in parallel, significantly reducing total
  replication time when multiple targets are configured by @ccwienk [#1700]
• [OPERATOR] upgrade-dependencies workflow / ocm-upgrade action: new component-policies
  input for per-component upstream-gating overrides. by @ccwienk [#1699]

🐛 Bug Fixes

• [OPERATOR] oci client: blob downloads now respect the default socket read-timeout (121 s), preventing
  workers from hanging indefinitely on stalled connections by @ccwienk [#1701]

1.2824.0

[github.com/gardener/cc-utils:1.2824.0]

🏃 Others

• [DEVELOPER] add ocm.access module; cnudie.access and ocm.util.artifact_url / ocm.util.to_absolute_oci_access are deprecated and will be removed in a future release by @ccwienk [#1695]

1.2823.0

[github.com/gardener/cc-utils:1.2823.0]

🐛 Bug Fixes

• [OPERATOR] fix release-branch VERSION: was e.g. v1.74.1-dev instead of v1.73.1-dev when
  using create-release-branch: true by @ccwienk [#1692]
• [OPERATOR] signingserver client retries on connection failures (not just HTTP errors); connect timeout is now configurable (default 12s, was 4s) by @ccwienk [#1693]

1.2822.0

[github.com/gardener/cc-utils:1.2822.0]

✨ New Features

• [OPERATOR] CBOM scanning now also emits a Go module-inferred CBOM referrer alongside the
  cbomkit-theia CBOM, covering scratch/distroless images and supplementing Debian-based
  images. No additional I/O: inference runs directly from the syft CycloneDX SBOM
  already in memory. A post-hoc scan_gobinary.py script is provided for backfilling
  existing images. by @ccwienk [#1691]