Vote for releasing v1.1.0-rc.1

[qweeah]

At least 3 approvals are needed from the 5 owners to cut 7fc68d4 as the release branch for oras CLI v1.1.0 release. This branch will be named as release-1.1 and tagged as v1.1.0-rc.1 for releasing.

• Terry Howe (@TerryHowe)
• Sajay Antony (@sajayantony)
• Shiwei Zhang (@shizhMSFT)
• Steve Lasker (@SteveLasker)
• Billy Zha (@qweeah)

The release will be conducted by following the release checklist.

Issue Notes

Bug Fixes

• oras push and oras attach generates unwanted manifest file (oras push generate manifest unwanted file #995)
• Path validation not enforced for oras attach and oras push (--disable-path-validation not working for oras push and oras attach #983, disallow absolute file path in oras push and oras attach by default  #980, Oras pushes an artifact when uploaded file in the absolute path but fails in pull (tested with azure container registry) #973)
• Wrong error information when --distribution-spec is provided with invalid value (invalid --distribution-spec flag returns wrong error information #897)
• Tree view print bug in oras discover (Improper verbose output of oras discover -o tree #1003)

New Features

• Add a new flag --skip-delete-referrers to allow oras commands to skip referrer index clean up (allow oras command to skip referrer index clean up #954, make oras cp skip dangling referrers index deletion error #952, Improve the error msg for OCI v1.0 registries or registries that don't support deletion API #915)
• Support Golang scripting (Make public command level methods so users can script in go #807)

Other Changes

• Improve UX
  • oras pull prints better error msg when path traversal is required (improve path traversal error msg of oras pull  #978)
  • Mention OCI support in help doc (add OCI layout support in command help doc #904)
  • Mark filtered tag listing as experimental (example of tag listing with filtering is not marked as experimental #993)
• Improve Documentation
  • Fix link in contribute doc (Incorrect Link in File: CONTRIBUTING.md #950)
• Update dependencies
  • Remove dependencies on docker CLI (Remove dependency on docker CLI #414)
  • Update dependency from github.com/moby/term to golang.org/x/term (Update github.com/moby/term to golang.org/x/term #908)
• Update to golang 1.20.5
• Improve tests
  • Generate code coverage for E2E tests (end-to-end test generated coverage profile #900)
  • Added more tests (add OCI layout support in command help doc #904, e2e tests for oras tag towards OCI layouts #901)

Comparing to v1.0.0, the release includes below code changes:

What's Changed

• refactor: Logger initializes logging by @TerryHowe in refactor: Logger initializes logging #867
• test(cov): make unit tests cover more by @qweeah in test(cov): make unit tests cover more #905
• refactor: add root package for Cobra commands by @qweeah in refactor: add root package for Cobra commands #825
• build(deps): bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible by @dependabot in build(deps): bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible #909
• refactor: unify command contexts by @qweeah in refactor: unify command contexts #899
• test: generate coverage profile during e2e tests by @qweeah in test: generate coverage profile during e2e tests #903
• build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 #919
• refactor: replace terminal package used by oras login by @qweeah in refactor: replace terminal package used by oras login #910
• test(e2e): OCI layout specs for oras tag by @qweeah in test(e2e): OCI layout specs for oras tag #902
• build(deps): bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible by @dependabot in build(deps): bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible #918
• Add make target for e2e by @sajayantony in Add make target for e2e #924
• test: make e2e coverage data in action by @qweeah in test: make e2e coverage data in action #926
• build(deps): bump github.com/docker/cli from 23.0.3+incompatible to 23.0.4+incompatible by @dependabot in build(deps): bump github.com/docker/cli from 23.0.3+incompatible to 23.0.4+incompatible #929
• feat: use oras-credential-go to do auth by @qweeah in feat: use oras-credential-go to do auth #932
• doc: fix broken logo link by @FeynmanZhou in doc: fix broken logo link #935
• docs: fix broken links in README by @wangxiaoxuan273 in docs: fix broken links in README #937
• build: using cross compilation in docker build by @northtyphoon in build: using cross compilation in docker build #938
• build(deps): bump golang.org/x/term from 0.7.0 to 0.8.0 by @dependabot in build(deps): bump golang.org/x/term from 0.7.0 to 0.8.0 #942
• build(deps): bump oras-go and oras-credentials-go by @qweeah in build(deps): bump oras-go and oras-credentials-go #946
• fixed the link in the file : oras/CONTRIBUTING.md by @yash7raut in fixed the link in the file : oras/CONTRIBUTING.md #951
• build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 #953
• build: add dependabot for e2e module by @qweeah in build: add dependabot for e2e module #958
• build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 by @dependabot in build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 #955
• build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.0 to 0.1.1 by @dependabot in build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.0 to 0.1.1 #956
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc2 to 1.1.0-rc.3 in /test/e2e by @dependabot in build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc2 to 1.1.0-rc.3 in /test/e2e #961
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.5 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.5 in /test/e2e #962
• build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.7 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.7 in /test/e2e #959
• build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 in /test/e2e by @dependabot in build(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 in /test/e2e #960
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 in /test/e2e #963
• fix: correct spec flag description by @qweeah in fix: correct spec flag description #964
• build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 #966
• chore: add snap for ubuntu by @SamirPS in chore: add snap for ubuntu #965
• build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 in /test/e2e #970
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 in /test/e2e #969
• chore: simplify e2e scripts and github action by @qweeah in chore: simplify e2e scripts and github action #967
• Revert "Add help to make file" by @TerryHowe in Revert "Add help to make file" #974
• Add help to make file by @TerryHowe in Add help to make file #975
• build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 by @dependabot in build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 #971
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 in /test/e2e by @dependabot in build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 in /test/e2e #976
• test: add unit-tests for internal/version.go by @enraiha0307 in test: add unit-tests for internal/version.go #977
• build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.1 to 0.2.0 by @qweeah in build(deps): bump github.com/oras-project/oras-credentials-go from 0.1.1 to 0.2.0 #990
• fix: enforce path validation for push/attach and improve path traversal failure message for pull by @suganyas in fix: enforce path validation for push/attach and improve path traversal failure message for pull #988
• chore: add experimental mark to filtered tag listing by @qweeah in chore: add experimental mark to filtered tag listing #994
• test(e2e): add test for pushing via absolute path by @qweeah in test(e2e): add test for pushing via absolute path #991
• test(e2e): update spec-related constants to string literal by @qweeah in test(e2e): update spec-related constants to string literal #992
• chore: update help doc with OCI layout support by @qweeah in chore: update help doc with OCI layout support #997
• feat: add flag to skip deleting obsolete referrers index by @qweeah in feat: add flag to skip deleting obsolete referrers index #957
• fix: pushing based on temporary file store path by @qweeah in fix: pushing based on temporary file store path #996
• chore: update minor version by @qweeah in chore: update minor version #1000
• fix: properly print tree for oras discover by @shizhMSFT in fix: properly print tree for oras discover #1005
• build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 by @dependabot in build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 #1008
• build(deps): bump oras-go to main branch by @qweeah in build(deps): bump oras-go to main branch #1004

[shizhMSFT]

It would be better if the long list of changes can be summarized.

[shizhMSFT]

BREAKING CHANGE: oras blob delete and oras manifest delete return success on non-existent content when the flag --force is specified

It is not a breaking change but a behavior fix. That is, a bug fix.

[qweeah]

BREAKING CHANGE: oras blob delete and oras manifest delete return success on non-existent content when the flag --force is specified

It is not a breaking change but a behavior fix. That is, a bug fix.

Removed from the list, it's done in 1.0.0

[FeynmanZhou]

LGTM but I am not a maintainer for ORAS CLI.

Are there any changes that should be reflected in the ORAS documentation? I see at least --skip-delete-referrers should be added to the ORAS documentation accordingly. Anything else?