v2.8.1

This security patch release addresses an issue with previous versions of the github.com/sylabs/sif/v2/pkg/integrity package, which did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. Users are encouraged to upgrade. More information is available in GHSA-m5m3-46gj-wch8.

Full Changelog: v2.8.0...v2.8.1

v2.8.0

This release adds support for embedded Software Bills of Materials (SBOM) within SIF images.

What's Changed

• Bump golangci-lint to v1.49 by @tri-adam in #226
• SBOM support by @tri-adam in #227
• ci: remove rowserrcheck linter by @tri-adam in #229

Full Changelog: v2.7.2...v2.8.0

v2.7.2

What's Changed

• Bump golangci-lint by @tri-adam in #217
• build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 by @dependabot in #219
• Go 1.19 Support by @tri-adam in #220
• Make Default Alignment System-Independent by @tri-adam in #222
• Bump Linter to 1.48 by @tri-adam in #223
• Bump github.com/ProtonMail/go-crypto dependency by @tri-adam in #224
• Bump Node to v18 by @tri-adam in #225

Full Changelog: v2.7.1...v2.7.2

v2.7.1

What's Changed

• Renew Expired Unit Test Key by @tri-adam in #214
• Change master branch to main by @tri-adam in #212
• Bump github.com/ProtonMail/go-crypto dependency by @tri-adam in #215
• Remove unused testify dependency by @tri-adam in #216

Full Changelog: v2.7.0...v2.7.1

v2.7.0

Expose github.com/sylabs/sif/v2/pkg/user package, which contains APIs to mount/unmount SIFs using squashfuse.

What's Changed

• feat: expose MountFUSE / UnmountFUSE API by @dtrudg in #209
• Move mount/unmount to user package by @tri-adam in #211

Full Changelog: v2.6.0...v2.7.0

v2.6.0

Add experimental siftool unmount command, which can be used to un-mount a SIF image using previously mounted with siftool mount.

What's Changed

• ci: updated sbom name generating template by @vlesich-sylabs in #203
• mount: add option to specify squashfuse path by @dtrudg in #207
• feat: Add experimental unmount command by @dtrudg in #208

New Contributors

• @dtrudg made their first contribution in #207

Full Changelog: v2.5.0...v2.6.0

v2.5.0

Add experimental siftool mount command, which attempts to mount the primary system partition of a SIF image using squashfuse.

What's Changed

• test: use valid squashfs/ext3 inputs by @tri-adam in #197
• Experimental Mount Command by @tri-adam in #195
• Sbom release by @vlesich-sylabs in #198
• build(deps): bump github.com/ProtonMail/go-crypto by @tri-adam in #199
• Remove Magefiles by @tri-adam in #201

Full Changelog: v2.4.2...v2.5.0

v2.4.2

What's Changed

• Bump golangci-lint to v1.45 by @tri-adam in #187
• sbom generating step by @vlesich-sylabs in #196

New Contributors

• @vlesich-sylabs made their first contribution in #196

Full Changelog: v2.4.1...v2.4.2

v2.4.1

What's Changed

• build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot in #185
• Adopt Go 1.18 by @tri-adam in #179
• build(deps): bump github.com/magefile/mage from 1.12.1 to 1.13.0 by @dependabot in #186

Full Changelog: v2.4.0...v2.4.1

v2.4.0

Add support for riscv64 architecture.

What's Changed

• Add RISC-V Architecture by @tri-adam in #182
• Expand goreleaser Build Architectures by @tri-adam in #183

Full Changelog: v2.3.2...v2.4.0