maint: Update module github.com/google/go-containerregistry to v0.22.1 #42

Merged

bot-ci merged 1 commit from renovate/go-dependencies into main

2026-09-04 03:13:07 +00:00

renovate-bot commented

2026-09-04 02:01:32 +00:00

Owner

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/go-containerregistry	`v0.22.0` → `v0.22.1`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.22.1`

Compare Source

What's Changed

Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in #2426
daemon: fix stale docker/docker reference in WithClient docs by @BobDu in #2428
build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #2422
authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in #2420
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2423
Support pulling images by sha512 digest by @BobDu in #2427
Allow empty label and annotation values in crane mutate by @theadsingh in #2418
fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in #2434
validate: support index attestation manifests and empty configs by @Subserial in #2414
name: improve error when parsing a reference with a URL scheme by @locker95 in #2431
fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in #2436
fix(release): honor declared Go toolchain by @rksharma-owg in #2435
remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in #2432
flatten: preserve config and layer media types when flattening by @Subserial in #2438
fix(mutate): make Time layer updates lazy by @amarkdotdev in #2429
build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #2439
remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in #2441

New Contributors

@shaggyinsomniac made their first contribution in #2426
@BobDu made their first contribution in #2428
@nileshpatil6 made their first contribution in #2420
@theadsingh made their first contribution in #2418
@locker95 made their first contribution in #2431
@rksharma-owg made their first contribution in #2435
@codysoyland made their first contribution in #2441

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.22.0...v0.22.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `v0.22.0` → `v0.22.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fgo-containerregistry/v0.22.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fgo-containerregistry/v0.22.0/v0.22.1?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>google/go-containerregistry (github.com/google/go-containerregistry)</summary> ### [`v0.22.1`](https://github.com/google/go-containerregistry/releases/tag/v0.22.1) [Compare Source](https://github.com/google/go-containerregistry/compare/v0.22.0...v0.22.1) #### What's Changed - Reject non-canonical IP literals in all SSRF guards by [@shaggyinsomniac](https://github.com/shaggyinsomniac) in [#2426](https://github.com/google/go-containerregistry/pull/2426) - daemon: fix stale docker/docker reference in WithClient docs by [@BobDu](https://github.com/BobDu) in [#2428](https://github.com/google/go-containerregistry/pull/2428) - build(deps): bump the go-deps group across 2 directories with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2422](https://github.com/google/go-containerregistry/pull/2422) - authn: do not overwrite AuthConfig.Auth when username and password are empty by [@nileshpatil6](https://github.com/nileshpatil6) in [#2420](https://github.com/google/go-containerregistry/pull/2420) - build(deps): bump the actions group across 1 directory with 8 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2423](https://github.com/google/go-containerregistry/pull/2423) - Support pulling images by sha512 digest by [@BobDu](https://github.com/BobDu) in [#2427](https://github.com/google/go-containerregistry/pull/2427) - Allow empty label and annotation values in crane mutate by [@theadsingh](https://github.com/theadsingh) in [#2418](https://github.com/google/go-containerregistry/pull/2418) - fix(build): Use dependencies.gitSource in cloudbuild\_v2.yaml by [@tprussak](https://github.com/tprussak) in [#2434](https://github.com/google/go-containerregistry/pull/2434) - validate: support index attestation manifests and empty configs by [@Subserial](https://github.com/Subserial) in [#2414](https://github.com/google/go-containerregistry/pull/2414) - name: improve error when parsing a reference with a URL scheme by [@locker95](https://github.com/locker95) in [#2431](https://github.com/google/go-containerregistry/pull/2431) - fix(build): install binaries to /ko-app and add to PATH ([#2424](https://github.com/google/go-containerregistry/issues/2424)) by [@tprussak](https://github.com/tprussak) in [#2436](https://github.com/google/go-containerregistry/pull/2436) - fix(release): honor declared Go toolchain by [@rksharma-owg](https://github.com/rksharma-owg) in [#2435](https://github.com/google/go-containerregistry/pull/2435) - remote: apply checkRedirectSSRF to writer-side HTTP clients by [@locker95](https://github.com/locker95) in [#2432](https://github.com/google/go-containerregistry/pull/2432) - flatten: preserve config and layer media types when flattening by [@Subserial](https://github.com/Subserial) in [#2438](https://github.com/google/go-containerregistry/pull/2438) - fix(mutate): make Time layer updates lazy by [@amarkdotdev](https://github.com/amarkdotdev) in [#2429](https://github.com/google/go-containerregistry/pull/2429) - build(deps): bump the go-deps group across 2 directories with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2439](https://github.com/google/go-containerregistry/pull/2439) - remote: copy manifest annotations to referrers fallback tag descriptors by [@codysoyland](https://github.com/codysoyland) in [#2441](https://github.com/google/go-containerregistry/pull/2441) #### New Contributors - [@shaggyinsomniac](https://github.com/shaggyinsomniac) made their first contribution in [#2426](https://github.com/google/go-containerregistry/pull/2426) - [@BobDu](https://github.com/BobDu) made their first contribution in [#2428](https://github.com/google/go-containerregistry/pull/2428) - [@nileshpatil6](https://github.com/nileshpatil6) made their first contribution in [#2420](https://github.com/google/go-containerregistry/pull/2420) - [@theadsingh](https://github.com/theadsingh) made their first contribution in [#2418](https://github.com/google/go-containerregistry/pull/2418) - [@locker95](https://github.com/locker95) made their first contribution in [#2431](https://github.com/google/go-containerregistry/pull/2431) - [@rksharma-owg](https://github.com/rksharma-owg) made their first contribution in [#2435](https://github.com/google/go-containerregistry/pull/2435) - [@codysoyland](https://github.com/codysoyland) made their first contribution in [#2441](https://github.com/google/go-containerregistry/pull/2441) **Full Changelog**: <https://github.com/google/go-containerregistry/compare/v0.22.0...v0.22.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-09-04 02:01:32 +00:00

maint: Update module github.com/google/go-containerregistry to v0.22.1

ci/woodpecker/pr/pr_check Pipeline was successful

Details

ci/woodpecker/pr/ci Pipeline was successful

Details

c6fc8d0da6