v5.34.0

What's Changed

• Bump c/storage to v1.56.0, c/image to v5.33.0 by @TomSweeneyRedHat in #2625
• Update stubs to match signature of actual methods by @SpangleLabs in #2541
• docker: add check for too many parts by @giuseppe in #2619
• fix(deps): update module golang.org/x/crypto to v0.29.0 by @renovate in #2624
• fix(deps): update module golang.org/x/oauth2 to v0.24.0 by @renovate in #2626
• chore(deps): update dependency golangci/golangci-lint to v1.62.0 by @renovate in #2630
• chore(deps): update dependency containers/automation_images to v20241107 by @renovate in #2631
• fix(deps): update module github.com/sigstore/sigstore to v1.8.10 by @renovate in #2601
• fix(deps): update module github.com/sylabs/sif/v2 to v2.20.0 by @renovate in #2611
• docker: drop use of external distribution challenge pkg by @flavianmissi in #2629
• Merge tag 'v5.33.0' into main by @mtrmac in #2634
• Improve an error message by @mtrmac in #2595
• Propagate CompressedDigest/CompressedSize when reusing data from another layer by @mtrmac in #2583
• chore(deps): update dependency golangci/golangci-lint to v1.62.2 by @renovate in #2640
• fix(deps): update module github.com/proglottis/gpgme to v0.1.4 by @renovate in #2638
• fix(deps): update module github.com/stretchr/testify to v1.10.0 by @renovate in #2639
• Two small lint updates by @mtrmac in #2642
• Use testify's ErrorAs to simplify tests a bit by @mtrmac in #2641
• Fix excessive memory and disk usage when sharing layers by @mtrmac in #2636
• Fix a missing s.lock.Unlock() on an error path by @mtrmac in #2643
• In pulls, compute DiffIDs earlier, and also for v2s2 by @mtrmac in #2635
• Update module golang.org/x/sync to v0.10.0 by @renovate in #2650
• Update golang.org/x/exp digest to 2d47ceb by @renovate in #2648
• Update module golang.org/x/term to v0.27.0 by @renovate in #2651
• Update module golang.org/x/crypto to v0.30.0 by @renovate in #2652
• Update module github.com/docker/docker to v27.4.0+incompatible by @renovate in #2654
• Update module github.com/docker/cli to v27.4.0+incompatible by @renovate in #2653
• Update module golang.org/x/crypto to v0.31.0 by @renovate in #2655
• Update module github.com/sylabs/sif/v2 to v2.20.1 by @renovate in #2656
• Update module github.com/sigstore/sigstore to v1.8.11 by @renovate in #2657
• Update module github.com/secure-systems-lab/go-securesystemslib to v0.9.0 by @renovate in #2658
• Update module github.com/containers/ocicrypt to v1.2.1 by @renovate in #2659
• Update module github.com/docker/docker to v27.4.1+incompatible by @renovate in #2662
• Update module github.com/sylabs/sif/v2 to v2.20.2 by @renovate in #2660
• Update module github.com/docker/cli to v27.4.1+incompatible by @renovate in #2661
• Fix docker daemon on Windows trying to use https instead of http for named pipes by @brbayes-msft in #2666
• Update dependency golangci/golangci-lint to v1.63.2 by @renovate in #2667
• Update dependency golangci/golangci-lint to v1.63.3 by @renovate in #2668
• Update dependency golangci/golangci-lint to v1.63.4 by @renovate in #2669
• OCI layout extensions by @vrothberg in #2633
• Update module golang.org/x/term to v0.28.0 by @renovate in #2671
• Update module golang.org/x/oauth2 to v0.25.0 by @renovate in #2670
• Update module golang.org/x/crypto to v0.32.0 by @renovate in #2674
• Update module github.com/vbauerster/mpb/v8 to v8.9.1 by @renovate in #2675
• Add a comment justifying lack of unit test coverage by @mtrmac in #2673
• Move JSONFormatToInvalidSignatureError to an unconditionally-included file by @mtrmac in #2632
• Update dependency containers/automation_images to v20250107 by @renovate in #2677
• Update module github.com/sigstore/sigstore to v1.8.12 by @renovate in #2678
• Update for c/storage almost always computing UncompressedDigest by @mtrmac in #2680
• Update module github.com/docker/docker to v27.5.0+incompatible by @renovate in #2682
• Update module github.com/docker/cli to v27.5.0+incompatible by @renovate in #2681
• Update module github.com/containers/storage to v1.56.1 by @renovate in #2684
• Update module github.com/sigstore/rekor to v1.3.8 by @renovate in #2685
• Update module github.com/vbatts/tar-split to v0.11.7 by @renovate in #2686
• Expect UncompressedDigest to be set for partial pulls, enforce DiffID match by @mtrmac in #2613
• Validate digests of data downloaded while fetching sigstore attachments by @mtrmac in #2689
• Merge tag 'v5.33.1' into main by @mtrmac in #2691
• Update module github.com/docker/cli to v27.5.1+incompatible by @renovate in #2692
• Update module github.com/docker/docker to v27.5.1+incompatible by @renovate in #2693
• ignore ENOENT errors when parsing .d files by @Luap99 in #2696

New Contributors

• @SpangleLabs made their first contribution in #2541
• @flavianmissi made their first contribution in #2629
• @brbayes-msft made their first contribution in #2666

Full Changelog: v5.33.1...v5.34.0