ocm/0.12.0

application/spdx+json

• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:1c799921e480a995f6e68a1fb6bb352eada82c7b81d697e39a1b193f61a35c3b
• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:8f95e9617763b2f94bb1e035e3d48356cbb1db2ca5fd4fe8d8f61b8e9877b24c

application/vnd.cyclonedx+json

• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:0fd7938b08de4c73a7e204c9db104e63f25abca81fb53cd81a2dad40eb70c496
• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:a27763a83e1bc3be5b06d12ad640be3361fc9f291c54aeddc902381cf0ad7ca4

Container (OCI) Images

• ocm-image: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm:0.12.0

1.2842.0

[github.com/gardener/cc-utils:1.2842.0]

⚠️ Breaking Changes

• [DEVELOPER] Removed deprecated GAR-OIDC shims: oci.auth.make_refreshable_gar_credentials_lookup, oci.client.client_with_gar_oidc_auth, and exchange_gar_token's gh_token/gh_token_url kwargs. Use refreshable_gar_credentials_lookup(oidc_cfg, subject_token_supplier) + Client(credentials_invalidate=...). by @ccwienk [#1740]

🐛 Bug Fixes

• [DEVELOPER] GAR OIDC id-token fetch retries like the STS/IAM exchanges; client_with_gar_oidc_auth now raises a DeprecationWarning as documented. by @ccwienk [#1739]

1.2841.0

[github.com/gardener/cc-utils:1.2841.0]

⚠️ Breaking Changes

• [DEVELOPER] oci.auth GAR-OIDC helpers were decoupled from GitHub-Actions specifics: exchange_gar_token now accepts an OIDC subject-token, and refreshable credentials are built via refreshable_gar_credentials_lookup(oidc_cfg, subject_token_supplier). oci.client.Client gained a credentials_invalidate callback for one-shot 401 retry. The previous entrypoints (make_refreshable_gar_credentials_lookup, client_with_gar_oidc_auth) remain but are deprecated. by @ccwienk [#1738]

1.2840.0

no release-notes available

1.2839.0

[github.com/gardener/cc-utils:1.2839.0]

🏃 Others

• [OPERATOR] fix(ctt): avoid duplicate resources when replicating diamond component-reference graphs by @ccwienk [#1736]

1.2838.0

[github.com/gardener/cc-utils:1.2838.0]

🐛 Bug Fixes

• [OPERATOR] ctt: fix silently ignored inject_sboms: true in processing.cfg — wire the
  flag into ProcessingPipeline and strip stale SBOM/CBOM resources before
  re-injection. by @ccwienk [#1735]

1.2837.0

[github.com/gardener/cc-utils:1.2837.0]

🐛 Bug Fixes

• [OPERATOR] Fix KeyError when replicating images with a V2 manifest whose config blob is absent from the source registry. by @ccwienk [#1718]
• [OPERATOR] oci.Client: separate read/write per-host throttles so write-429s no longer
  reduce read concurrency; retry budget raised to 12 attempts, backoff capped
  at 60 s (~11 min total vs previous 31 s). by @ccwienk [#1729]

ocm/0.11.0

application/spdx+json

• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:60ea6ad052733db509ad6b87d14ed2beca3ab3e3219535a13d06c0263948e683
• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:6782c9e9e68b7594b5b18e1ca9a527cc3fbde1f08cedf032513b71175d1c34a0

application/vnd.cyclonedx+json

• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:596e8b098af3c24cc8aa66f05a1e516828e6757a6965f4f17f04c61aa73159bd
• ocm-image-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm@sha256:6016cdd7279bcfa725636116c1d2703647ec90bf3775f6b0b18559a6e0ec6a93

Container (OCI) Images

• ocm-image: europe-docker.pkg.dev/gardener-project/releases/cicd/ocm:0.11.0

1.2836.0

no release-notes available

1.2835.0

no release-notes available