| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: copacetic-zsh-completion | Distribution: openSUSE Tumbleweed |
| Version: 0.15.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Sun Sep 20 07:59:59 2026 |
| Group: System/Shells | Build host: reproducible |
| Size: 7676 | Source RPM: copacetic-0.15.0-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/project-copacetic/copacetic | |
| Summary: Zsh Completion for copacetic | |
zsh command line completion support for copacetic.
Apache-2.0
* Sun Sep 20 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.15.0:
Copacetic v0.15.0 expands support for minimal and
application-centric workloads, led by Ubuntu Chiseled image
patching and experimental Helm chart-aware patching. This release
also adds SLES 16 support and includes substantial correctness,
reproducibility, and performance improvements.
* Highlights
- Ubuntu Chiseled image patching
Copa can now patch both common Ubuntu Chiseled image layouts:
- Apt-less images that retain a full /var/lib/dpkg/status
support targeted updates from scanner reports and
comprehensive updates without a report. Copa applies
updates through external Ubuntu tooling while preserving
the full-status representation; the final image does not
gain /var/lib/dpkg/status.d, apt, dpkg, BusyBox, or a
shell.
- Native images containing /var/lib/chisel/manifest.wall
support comprehensive re-cuts of their selected Chisel
slices. Copa validates the manifest and resulting
filesystem, preserves paths not owned by the original
manifest and unaffected platform descriptors, rejects
downgrades, and records the resolved Chisel release as OCI
provenance.
Native Chisel release selection can be inferred from
/etc/os-release or overridden with --chisel-release. The CLI
and bulk mode accept a named release, local release
directory, or pinned HTTPS Git source; the BuildKit frontend
accepts a named release or a supplied local build context and
rejects Git URLs.
See the Ubuntu Chiseled image documentation and #1667.
- Experimental Helm chart-aware patching
The experimental chart mode renders a Helm chart with its
default values, discovers images from supported Kubernetes
workload locations, patches those images, and publishes a
self-contained wrapper chart containing the patched image
overrides. Patched images remain in their original
repositories in single-chart mode; bulk PatchConfig supports
a separate image target registry and explicit value-path
overrides where automatic resolution is ambiguous.
Chart mode requires the Helm CLI, COPA_EXPERIMENTAL=1,
- -push, and credentials that can push both the patched images
and wrapper chart.
See the bulk and Helm chart patching documentation and #1547.
- SLES 16 support
Copa now supports SLES 16 BCI images and recognizes the
SQLite RPM database used by SLES 16 alongside the existing
NDB and Berkeley DB formats. Multi-platform fixtures and
package-manager coverage were added for the new release.
See #1621.
* Patching correctness and reliability
- Local image resolution — Docker and Podman inspection is
preferred before registry fallback, improving support for
local-only images and avoiding unnecessary remote lookups.
(#1614)
- Reliable RPM repatching — successive updates now compute
changes from the current patched state, preventing stale
files from being reintroduced. (#1589)
- Bounded image inspection — media-type discovery now honors
patch cancellation and timeout contexts instead of allowing
daemon or registry calls to block indefinitely. (#1587)
- Platform and VEX correctness — platform discovery no longer
panics on descriptors without platform metadata, and
generated OpenVEX documents now include the required
vulnerability name field for schema compliance. (#1672)
* Application-level Go patching
Experimental Go patching is more reliable and reproducible:
- go mod tidy -e allows CVE-relevant updates to proceed when an
upstream project has unrelated module-graph problems. (#1602)
- Pre-modules major-version dependencies such as
github.com/docker/docker receive the required +incompatible
suffix. (#1682)
- Copa skips stale scanner fixes that would downgrade or
reinstall an equal Go dependency and avoids claiming those
skipped findings as remediated in VEX output. (#1683)
- Go update lists, generated go.mod requirements, and rebuild
steps are emitted deterministically. (#1680)
* Performance and maintenance
- VEX generation, VEX file output, tar hardlink rewriting,
BuildKit progress forwarding, and terminal progress
bookkeeping now use substantially fewer allocations and less
CPU in large workloads. (#1639)
The release also updates BuildKit to 0.31.1 (#1675),
containerd to 2.2.5 (#1631), Go to 1.25.13 (#1673), and gRPC
to 1.83.1 (#1694), while expanding unit, integration, and
end-to-end coverage across patching paths.
* Important usage notes
- Native manifest.wall Chiseled images currently support
comprehensive patching only; do not pass a vulnerability
report. Trivy does not yet inventory packages from
manifest.wall.
- Updating an apt-less full-status Chiseled image installs
content from complete .deb archives and can add dependency
packages or package-owned files that were not present in the
original image. Maintainer scripts and dpkg triggers are
disabled, lifecycle-package updates such as dpkg, apt, or
bash are rejected, and the resulting filesystem and
application should be validated before deployment.
- Initial native Chisel support resolves public Ubuntu archives
only. Ubuntu Pro, ESM, FIPS, private mirrors, and
authenticated archives are not forwarded.
- Native Chisel patching does not support linux/arm/v6.
- Helm chart-aware patching remains experimental. Single-chart
mode has no custom values-file input, so it discovers only
images visible in the default render and supported workload
shapes. Digest-pinned images and ambiguous value paths are
rejected rather than silently publishing unsafe overrides.
* Dependencies
- chore: bump github.com/Masterminds/semver/v3 from 3.4.0 to
3.5.0 (#1689)
- chore: bump github.com/testcontainers/testcontainers-go from
0.40.0 to 0.44.0 (#1568)
- chore: bump the all group across 1 directory with 18 updates
(#1659)
- chore: bump github.com/moby/buildkit from 0.28.1 to 0.31.1
(#1675)
- chore: bump github.com/moby/go-archive from 0.2.0 to 0.3.0
(#1674)
- fix: update Go to 1.25.13 (#1673)
- chore: bump the all group across 1 directory with 7 updates
(#1658)
- chore: bump github.com/containerd/containerd/v2 from 2.2.1 to
2.2.5 (#1631)
- chore: bump actions/checkout from 6.0.3 to 7.0.0 in the all
group (#1630)
- chore: bump the all group across 1 directory with 11 updates
(#1626)
- chore: bump the all group in /website with 2 updates (#1619)
- fix: update x/crypto for govulncheck (#1617)
- chore: bump the all group across 1 directory with 2 updates
(#1603)
- chore: bump github.com/in-toto/in-toto-golang from 0.10.0 to
0.11.0 (#1600)
- chore: bump github.com/moby/moby/api from 1.54.1 to 1.54.2
(#1584)
- chore: bump the all group across 1 directory with 12 updates
(#1606)
- fix: govuln fix - update go version to 1.25.10 (#1608)
* Fri Jul 03 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.14.2:
* fix: avoid forced recompression on local export (#1637) (#1640)
* Mon May 18 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.14.1:
* Bug fixes
- Frontend image: restore /tmp on the published
copacetic-frontend image. v0.14.0's FROM scratch rootfs
caused every patch run via the BuildKit frontend to fail with
stat /tmp: no such file or directory. Switched to
gcr.io/distroless/static-debian12:nonroot plus a
defense-in-depth ensureTempDir(). E2E now builds the real
frontend.Dockerfile so this regression class cannot recur.
(#1597)
- Preserve original manifest annotations on patched images.
Same-tag patches silently dropped
org.opencontainers.image.{source,revision,version,title}. Now
captured pre-patch and forwarded to both single-platform and
multi-platform export paths, with image.version rewritten
consistently. (#1605)
* Docs
- Document current app-level patching limitation re: private
registries. (#1595)
- Generate v0.14.x docs snapshot. (#1590)
* Wed May 06 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.14.0:
* Features
- Go binary patching — patch vulnerable Go binaries by
rebuilding from source with updated stdlib/deps (#1388)
- Arch Linux support — pacman package manager (#1467)
- RPM chroot-based patching — patch RPM images that are missing
a package manager (#1473)
- Python virtual environment patching — support venv-based
site-packages via PkgPath (#1485)
- Bulk patching improvements — skip detection and
cross-registry support (#1475)
- Test environment utilities for BuildKit integration tests
(#1399)
- Demo recordings + asciinema player added to the website
(#1453)
- Patch summary output showing total/patched/skipped
vulnerabilities (#1517)
- Fallback source resolution for Go binary patching on
stripped/distroless images (#1546)
* Security hardening
- Bump otel/sdk to fix CVE-2026-24051 (#1483)
- Validate RPM package names before distroless shell execution
(#1541)
- Validate RPM package names in dnf chroot path (#1529)
- Validate Node.js npm tarballs before extraction (#1533)
- Prevent Node.js shell injection via untrusted package paths
(#1538)
- Validate .NET deps.json script inputs to prevent command
injection (#1537)
- Prevent Go module flag injection via leading-dash names
(#1526)
- Prevent tag-based command injection in release workflow
(#1535)
- Codebase audit hardening (#1507)
- Prevent apt option injection from distroless package names
(#1540)
- Cap buffered patch layer size to mitigate memory DoS (#1543)
- Block self-hosted build workflow jobs on forked PRs (#1539)
- Replace label-gated trusted-fork workflow with native fork PR
approval (#1582, supersedes #1572, #1573)
- Reject whitespace/control chars in Go binary path validation
(#1586)
* Bug fixes
- VEX: use installed version in PURLs and add distro qualifier
for BOM-VEX correlation (#1552)
- Avoid masking package manager failures as no-updates (#1530)
- Restore strict multi-platform failure behavior when
ignore-errors=false (#1532)
- Suppress NU1605 in generated patch.csproj for .NET (#1557)
- Filter App.Runtime images in .NET patching (#1501)
- Replace npm install with direct tarball replacement (#1479)
- Resolve TUI freeze and CLI deadlock on early build errors
(#1505)
- Close progress channel when no platforms need patching
(#1528)
- Migrate docker/docker to moby/moby/client (#1525)
- Go patching log levels (#1516)
- Keep frontend.Dockerfile Go version aligned with go.mod and
harden release pipeline (#1571)
* Dependency upgrades
- BuildKit 0.28.1 (#1512)
- Trivy v0.69.3 + OpenTelemetry-Go v1.43.0 (#1558)
- google.golang.org/grpc 1.78.0 → 1.79.3 (#1480, #1502)
- github.com/quay/claircore 1.5.45 → 1.5.52 (#1442, #1464,
[#1518])
- github.com/google/go-containerregistry 0.20.7 → 0.21.3
(#1520)
- k8s.io/apimachinery 0.35.0 → 0.35.2 (#1470, #1487)
- testcontainers-go 0.38.0 → 0.40.0 (#1438)
- Plus dependabot bumps for dependency groups across the
project
* Internal / CI
- Refactor: structured rebuildFailure replaces rebuildErrors
[]string in langmgr (#1560)
- Stabilize CI — golangci-lint alignment, deterministic tests,
network retries (#1477)
- Pin BuildKit version and set explicit DNS for
podman/container env (#1563)
- Pin scanner-plugin-template dependency in build workflow
(#1544)
* Docs
- Improve buildkit-frontend examples (#1498)
- Generate v0.13.x docs (#1437)
- Remove Microsoft support policy section from SUPPORT.md
(#1455)
- Update website footer to LF Projects Series LLC trademark
disclaimer (#1566)
- add Verity to Copa CLI adopters (#1583)
* Sun Jan 11 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.13.0:
* Notable Changes
- Can now use Copa as a Buildkit front end
- Bulk Image Patching to patch multiple images from a single
declarative config!
- .NET app-level patching
- SUSE distro support
* Changelog
- 28c466e feat: add support to SUSE and openSUSE distros with
Zypper (#1294)
- 358b2a9 build: update Go base image to 1.25.5-alpine3.23
(#1432)
- babc08e chore: bump github.com/charmbracelet/lipgloss from
0.7.1 to 0.13.1 (#1435)
- e07a778 chore: bump google.golang.org/grpc from 1.77.0 to
1.78.0 (#1434)
- bbb2395 chore: bump qs from 6.14.0 to 6.14.1 in /website
(#1431)
- 92d26c1 docs: Revert "docs: add distroless images support
documentation" (#1433)
- 95008df docs: add distroless images support documentation
(#1430)
- 9697ce8 chore: bump the all group across 1 directory with 7
updates (#1429)
- 153bd4d docs: update link for trivy installation guide
(#1426)
- 5c04112 chore: bump k8s.io/apimachinery from 0.34.3 to 0.35.0
(#1427)
- b4d40f4 chore: bump golang.org/x/term from 0.37.0 to 0.38.0
(#1416)
- 5d9a56a feat: Bulk Image Patching (#1235)
- 509008e fix: add registry authentication for platform
discovery (#1420)
- 3747056 chore: bump github.com/moby/buildkit from 0.26.2 to
0.26.3 (#1422)
- 71e55d9 feat: improve tui (#1421)
- 1faa7b9 feat: .NET app-level patching (#1106)
- d715e29 chore: bump the all group with 4 updates (#1418)
- e398be5 chore: bump the all group in /website with 2 updates
(#1417)
- 8a72242 chore: bump k8s.io/apimachinery from 0.34.2 to 0.34.3
(#1415)
- 1db23ce chore: bump github.com/moby/buildkit from 0.25.2 to
0.26.2 (#1413)
- 41db4e7 chore: bump the all group across 1 directory with 9
updates (#1412)
- a9dbb76 chore: bump the all group in /website with 2 updates
(#1410)
- 6e9ca5a chore: bump github.com/spf13/cobra from 1.10.1 to
1.10.2 (#1407)
- e5edca3 chore: bump mdast-util-to-hast from 13.1.0 to 13.2.1
in /website (#1404)
- 83ba211 fix: exit successfully and fix status for up to date
images (#1378)
- aa1b163 chore: bump express from 4.21.2 to 4.22.1 in /website
(#1403)
- 71f7c30 chore: bump the all group across 1 directory with 9
updates (#1401)
- b2a2000 chore: bump node-forge from 1.3.1 to 1.3.2 in
/website (#1400)
- f03e750 feat: add buildkit frontend (#1221)
- fe9c036 chore: bump google.golang.org/grpc from 1.76.0 to
1.77.0 (#1394)
- b852a63 fix: multi-platform url from docker when patching
(#1393)
- beeca06 fix: update test images for CVE fixes (#1398)
- 0301e4f docs: add multi-platform patch summary (#1392)
- c17bd47 chore: bump golang.org/x/crypto from 0.43.0 to 0.45.0
(#1389)
- 44ef770 chore: bump the all group with 2 updates (#1385)
- 0a3c3e0 chore: bump @tsconfig/docusaurus from 2.0.5 to 2.0.7
in /website in the all group (#1384)
- bf7e156 chore: bump golang.org/x/term from 0.36.0 to 0.37.0
(#1381)
- 8941fbd chore: bump k8s.io/apimachinery from 0.34.1 to 0.34.2
(#1380)
- 3c518cc fix: Node.js patching introduces new vulnerabilities
through transitive dependencies (#1379)
- b611800 chore: bump github.com/docker/docker from
28.5.1+incompatible to 28.5.2+incompatible (#1372)
- df8d3d6 chore: bump github.com/moby/buildkit from 0.25.1 to
0.25.2 (#1376)
- 04fdf4c chore: bump golang.org/x/sync from 0.17.0 to 0.18.0
(#1375)
- 5b60b0e chore: bump github.com/docker/cli from
28.5.1+incompatible to 28.5.2+incompatible (#1374)
- 6536384 chore: bump github.com/containerd/platforms from
1.0.0-rc.1 to 1.0.0-rc.2 (#1373)
- c801779 chore: bump the all group with 3 updates (#1371)
- 565da19 chore: bump github.com/containerd/containerd/v2 from
2.1.4 to 2.1.5 (#1370)
- d00d085 chore: bump github/codeql-action from 4.31.0 to
4.31.2 in the all group (#1368)
- 8925da4 chore: Generate v0.12.x docs (#1362)
- d488649 chore: bump @tsconfig/docusaurus from 2.0.4 to 2.0.5
in /website in the all group (#1367)
- 5d2dcb4 fix: version validation scripts for release tagging
(#1364)
- 0c86ad6 fix: Non Zero Exit code for no upgradable packages
causes build fail (#1274)
- 599e0ac fix: Trivy fails with "invalid tar header" when
scanning Copa-patched images (#1359)
- b742077 chore: bump github.com/quay/claircore from 1.5.44 to
1.5.45 (#1357)
- 4bee93a chore: bump the all group with 4 updates (#1356)
- d48007a fix: platform filtering (#1354)
- eb4f9e4 fix: handle missing OS field in Trivy report (#1353)
- da2b414 docs: fix eol admonition title (#1351)
- b96894f docs: enhance release process documentation (#1350)
- 7a3dc8e chore: bump the all group with 4 updates (#1347)
- afbaee7 chore: bump the all group in /website with 3 updates
(#1348)
* Mon Nov 03 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.12.0:
* Notable Changes
- Experimental App-level Patching: Now supports Python and
Node.js applications!
- Docker Build Integration: Use the new generate command to
patch images. This provides support for any Docker CLI flags.
- Local Output for Multi-Platform Patching: Added support for
the --oci-dir flag to store patched artifacts locally when
performing multi-platform patching.
- Enhanced End-of-Life (EOL) Checks: Improved support through
- -exit-on-eol and --eol-api-url flags for customizable EOL
validation.
* Dependencies
- chore: bump google.golang.org/grpc from 1.75.1 to 1.76.0
(#1341)
- chore: bump github.com/aquasecurity/trivy from 0.66.0 to
0.67.2 (#1340)
- chore: bump github.com/docker/docker from 28.5.0+incompatible
to 28.5.1+incompatible (#1339)
- chore: bump github.com/docker/cli from 28.4.0+incompatible to
28.5.1+incompatible (#1338)
- chore: bump the all group with 2 updates (#1337)
- chore: bump golang.org/x/term from 0.35.0 to 0.36.0 (#1336)
- chore: bump github.com/moby/buildkit from 0.24.0 to 0.25.0
(#1330)
- chore: bump github.com/docker/docker from 28.4.0+incompatible
to 28.5.0+incompatible (#1328)
- chore: bump the all group across 1 directory with 6 updates
(#1333)
- chore: bump the all group in /website with 5 updates (#1329)
- chore: bump github.com/quay/claircore from 1.5.43 to 1.5.44
(#1326)
- chore: bump github.com/openvex/go-vex from 0.2.5 to 0.2.7
(#1312)
- chore: bump the all group in /website with 3 updates (#1317)
- chore: bump github.com/quay/claircore from 1.5.39 to 1.5.42
(#1311)
- chore: bump github.com/spf13/cobra from 1.9.1 to 1.10.1
(#1310)
- chore: bump google.golang.org/grpc from 1.75.0 to 1.75.1
(#1313)
- chore: bump the all group with 4 updates (#1318)
- chore: bump k8s.io/apimachinery from 0.34.0 to 0.34.1 (#1309)
- chore: bump github.com/spf13/viper from 1.20.1 to 1.21.0
(#1300)
- chore: bump the all group across 1 directory with 3 updates
(#1305)
- chore: bump github.com/stretchr/testify from 1.11.0 to 1.11.1
(#1298)
- chore: bump golang.org/x/sync from 0.16.0 to 0.17.0 (#1296)
- chore: bump github.com/docker/cli from 28.3.3+incompatible to
28.4.0+incompatible (#1297)
- chore: bump the all group with 7 updates (#1292)
- chore: bump k8s.io/apimachinery from 0.33.4 to 0.34.0 (#1291)
- chore: bump github.com/docker/docker from 28.3.3+incompatible
to 28.4.0+incompatible (#1290)
- chore: bump the all group in /website with 2 updates (#1289)
- chore: bump github.com/aquasecurity/trivy from 0.65.0 to
0.66.0 (#1288)
- chore: bump github.com/docker/buildx from 0.25.0 to 0.28.0
(#1286)
- chore: bump the all group with 2 updates (#1270)
- chore: bump google.golang.org/grpc from 1.74.2 to 1.75.0
(#1269)
- chore: bump github.com/stretchr/testify from 1.10.0 to 1.11.0
(#1267)
- chore: bump github.com/go-viper/mapstructure/v2 from 2.3.0 to
2.4.0 (#1264)
- chore: bump the all group across 1 directory with 2 updates
(#1261)
- chore: bump k8s.io/apimachinery from 0.33.3 to 0.33.4 (#1259)
- chore: bump the all group across 1 directory with 6 updates
(#1258)
* Mon Aug 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.11.1:
* fix: os version format in tdnf install (#1215)
* feat: Add Parsable format for buildkit progress output within
Copa (#1238)
* chore: bump docker/login-action from 3.4.0 to 3.5.0 in the all
group across 1 directory (#1245)
* chore: bump github.com/aquasecurity/trivy from 0.64.1 to 0.65.0
(#1244)
* chore: bump github.com/docker/cli from 28.3.2+incompatible to
28.3.3+incompatible (#1242)
* chore: bump typescript from 5.8.3 to 5.9.2 in /website in the
all group (#1241)
* chore: bump github/codeql-action from 3.29.4 to 3.29.5 in the
all group (#1240)
* feat: modularize patching logic (#1228)
* ci: Fix osv-scanner config: replace [[ignore]] with
[[IgnoredVulns]] (#1214)
* fix: Get host platform info in single arch integration test
(#1197)
* fix: Add actionable logs and improve UX after buildkit endpoint
checks are exhausted (#1186)
* chore: bump github.com/docker/docker from 28.3.2+incompatible
to 28.3.3+incompatible (#1233)
* chore: bump the all group in /website with 3 updates (#1231)
* chore: bump google.golang.org/grpc from 1.73.0 to 1.74.2
(#1229)
* chore: add robbie to codeowners (#1226)
* fix: add almalinux to pkgmanager os type check (#1220)
* fix: set azurelinux base image tag (#1216)
* chore: bump k8s.io/apimachinery from 0.33.2 to 0.33.3 (#1217)
* chore: bump golang.org/x/sync from 0.15.0 to 0.16.0 (#1205)
* chore: bump github.com/docker/cli from 28.3.1+incompatible to
28.3.2+incompatible (#1204)
* chore: bump github.com/cpuguy83/go-docker from 0.3.1 to 0.4.0
(#1203)
* chore: bump github.com/docker/docker from 28.3.1+incompatible
to 28.3.2+incompatible (#1202)
* chore: bump the all group across 1 directory with 3 updates
(#1224)
* chore: Exempt good first issues from getting stale (#1219)
* chore: remove fluentbit eol img from tests (#1222)
* fix: Fix landing page dark mode (#1210)
* fix: Remove excessive token permissions (#1172)
* feat: Add landing page to copa docs (#1206)
* chore: bump dotenv from 17.0.1 to 17.2.0 in /website in the all
group (#1201)
* chore: add Robbie Cronin to maintainers (#1200)
* docs: optimize docs (#1189)
* feat: patch non-host alpine (#1194)
* feat: add riscv64 to validPlatforms (#1199)
* chore: bump github.com/docker/cli from 28.3.0+incompatible to
28.3.1+incompatible (#1192)
* chore: bump github.com/docker/docker from 28.3.0+incompatible
to 28.3.1+incompatible (#1191)
* chore: bump github.com/aquasecurity/trivy from 0.64.0 to 0.64.1
(#1190)
* docs: update tradeoffs section to reflect scanner independence
(#818) (#888)
* chore: Generate v0.11.x docs (#1182)
* docs: add Devtron to adopters list (#1163)
* feat: Add stale bot (#1180)
* Fri Jul 04 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.11.0:
* Notable Changes
- Copa now supports multi-platform patching!
- Support for buildkit instance running on podman
- Support for OCI Media Types in addition to Docker
* Changelog
- feat: support update all for multi platform patching (#1141)
- chore(security): ignore irrelevant vulnerabilities in
osv-scanner.toml (#1177)
- fix: Revert "chore: bump cbl-mariner/distroless/base from
2.0.20240112 to 2.0.20250602 in
/integration/singlearch/fixtures/openssl-test-img-rpm"
(#1173)
- chore: bump the all group across 1 directory with 2 updates
(#1174)
- chore: bump dotenv from 17.0.0 to 17.0.1 in /website in the
all group (#1170)
- chore: bump github.com/aquasecurity/trivy from 0.63.0 to
0.64.0 (#1169)
- chore: bump github.com/moby/buildkit from 0.23.1 to 0.23.2
(#1168)
- chore: bump cbl-mariner/distroless/base from 2.0.20240112 to
2.0.20250602 in
/integration/singlearch/fixtures/openssl-test-img-rpm (#1165)
- ci: [StepSecurity] Apply security best practices (#1156)
- fix: retain multiplatform manifest list annotations (#1120)
- docs: add openssf best practices badge (#1157)
- feat: enhance multi platform summary report (#1123)
- chore: bump github.com/cpuguy83/go-docker from 0.3.0 to 0.3.1
(#1148)
- chore: bump the all group with 2 updates (#1147)
- chore: bump github.com/docker/cli from 28.2.2+incompatible to
28.3.0+incompatible (#1146)
- chore: bump github.com/docker/docker from 28.2.2+incompatible
to 28.3.0+incompatible (#1145)
- chore: bump dotenv from 16.5.0 to 17.0.0 in /website in the
all group (#1144)
- chore: bump github.com/go-viper/mapstructure/v2 from 2.2.1 to
2.3.0 (#1142)
- docs: update release doc to include cncf guidance (#1066)
- fix: handle docker load generically (#1059)
- docs: Update ADOPTERS.md to link to official adopters webpage
(#1140)
- fix: ensure tooling image is tried with platform (#1134)
- docs: improve multiplatform docs (#1129)
- fix: preseve all platforms in manifest (#1121)
- chore: bump k8s.io/apimachinery from 0.33.1 to 0.33.2 (#1126)
- chore: bump github.com/moby/buildkit from 0.22.0 to 0.23.1
(#1125)
- chore: bump github.com/docker/buildx from 0.24.0 to 0.25.0
(#1124)
- feat: add multiplatform e2e plugin test (#1114)
- docs: Add Search to website using Algolia (#1082)
- chore: bump brace-expansion from 1.1.11 to 1.1.12 in /website
(#1118)
- chore: bump the all group with 3 updates (#1117)
- chore: bump github.com/quay/claircore from 1.5.38 to 1.5.39
(#1116)
- chore: bump github.com/google/go-containerregistry from
0.20.5 to 0.20.6 (#1115)
- feat: Add Multi Arch Enhancements (#1098)
- fix: remove directory and platform-specific-errors args from
multi platform (#1105)
- chore: bump google.golang.org/grpc from 1.72.2 to 1.73.0
(#1102)
- chore: bump the all group with 2 updates (#1103)
- chore: bump golang.org/x/sync from 0.14.0 to 0.15.0 (#1100)
- chore: bump github.com/quay/claircore from 1.5.37 to 1.5.38
(#1099)
- chore: bump the all group in /website with 3 updates (#1101)
- feat: Add native v1alpha1 report support (#1079)
- fix: run go mod tidy (#1089)
- feat: add multiarch patching workflow changes (#1067)
- chore: bump ossf/scorecard-action from 2.4.1 to 2.4.2 in the
all group (#1088)
- chore: bump the all group in /website with 3 updates (#1087)
- chore: bump github.com/aquasecurity/trivy from 0.62.1 to
0.63.0 (#1085)
- chore: bump github.com/docker/cli from 28.1.1+incompatible to
28.2.2+incompatible (#1084)
- fix: add shorthand flag for report-dir (#1081)
- docs: Add Governance Documentation (#1056)
- docs: add contributor ladder (#1052)
- feat: Improve EOL Logging (#1069)
- docs: consistent community docs (#1078)
- chore: bump github.com/docker/buildx from 0.23.0 to 0.24.0
(#1076)
- chore: bump google.golang.org/grpc from 1.72.1 to 1.72.2
(#1075)
- chore: bump github.com/google/go-containerregistry from
0.20.3 to 0.20.5 (#1074)
- chore: bump github.com/moby/buildkit from 0.21.1 to 0.22.0
(#1073)
- docs: Keep FAQ headings consistent (#1062)
- docs: Clarify no VEX Document generation with update all
(#1055)
- feat: add multi arch command changes (#1009)
- chore: bump the all group with 4 updates (#1065)
- chore: bump k8s.io/apimachinery from 0.33.0 to 0.33.1 (#1064)
- chore: bump google.golang.org/grpc from 1.72.0 to 1.72.1
(#1063)
- chore: Add some tests for buildx context support (#1057)
- chore: bump github.com/aquasecurity/trivy from 0.61.1 to
0.62.1 (#1050)
- chore: bump golang.org/x/sync from 0.13.0 to 0.14.0 (#1049)
- fix: Debian temprootfs (#997)
- chore: Fix some issues with docker and buildx connections
(#1053)
- fix: oci media type should be respected (#949)
- chore: bump the all group with 2 updates (#1051)
- fix: upgrade golangci-lint to v2.1.0 (#1045)
- chore: bump the all group with 3 updates (#1043)
- chore: bump github.com/quay/claircore from 1.5.36 to 1.5.37
(#1042)
- chore: bump github.com/moby/buildkit from 0.21.0 to 0.21.1
(#1040)
- fix: guard against error buildkit solve (#1037)
- chore: bump the all group with 2 updates (#1032)
- chore: bump github.com/docker/buildx from 0.22.0 to 0.23.0
(#1030)
- chore: bump github.com/docker/cli from 28.0.4+incompatible to
28.1.1+incompatible (#1029)
- chore: bump github.com/docker/docker from 28.0.4+incompatible
to 28.1.1+incompatible (#1028)
- fix: apt apk images fail tooling images missing (#985)
- fix: ignore shadow cves for integration test (#1027)
- feat: add push images on patch flag (#1004)
- chore: bump the all group across 1 directory with 3 updates
(#1025)
- chore: bump github.com/quay/claircore from 1.5.35 to 1.5.36
(#1023)
- chore: bump google.golang.org/grpc from 1.71.1 to 1.72.0
(#1021)
- chore: bump github.com/moby/buildkit from 0.20.2 to 0.21.0
(#1020)
- chore: bump github.com/aquasecurity/trivy from 0.61.0 to
0.61.1 (#1019)
- feat: Discover Platforms Utility (#1017)
- chore: bump http-proxy-middleware from 2.0.7 to 2.0.9 in
/website (#1024)
- chore: bump golang.org/x/net from 0.37.0 to 0.38.0 (#1018)
- chore: bump the all group with 2 updates (#1016)
- chore: bump estree-util-value-to-estree from 3.1.1 to 3.3.3
in /website (#1015)
- chore: bump the all group with 3 updates (#1014)
- chore: bump typescript from 5.8.2 to 5.8.3 in /website in the
all group (#1013)
- chore: bump golang.org/x/sync from 0.12.0 to 0.13.0 (#1012)
- chore: bump google.golang.org/grpc from 1.71.0 to 1.71.1
(#1011)
- docs: explain EOL image error messages in FAQ (#966)
- feat: invalidate tdnf cache when patching (#973)
- fix: fast fail for no upgrades (#1005)
- docs: Add community docs (#996)
- chore: bump image-size from 1.1.1 to 1.2.1 in /website
(#1008)
- fix: lint fixes for ci (#1006)
- chore: upgrade trivy to 0.61.0 (#1007)
- chore: bump github.com/docker/buildx from 0.21.3 to 0.22.0
(#983)
- feat: add copa install command (#987)
- fix: rpm fails if mirror tooling image not present (#978)
- chore: bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0
in the all group (#1003)
- chore: bump github.com/docker/cli from 28.0.2+incompatible to
28.0.4+incompatible (#1002)
- chore: bump github.com/spf13/viper from 1.20.0 to 1.20.1
(#1001)
- chore: bump github.com/moby/buildkit from 0.20.1 to 0.20.2
(#1000)
- chore: bump the all group in /website with 2 updates (#999)
- fix: golangci-lint v1 is not supported by
golangci-lint-action v7 (#994)
- chore: bump the all group with 6 updates (#984)
- chore: add cbl-mariner/base/core:1.0 to mirrored tooling
images (#979)
- chore: bump k8s.io/apimachinery from 0.32.2 to 0.32.3 (#982)
- chore: bump github.com/docker/cli from
28.0.0-rc.2+incompatible to 28.0.2+incompatible (#981)
- feat: add support for custom suffix tag (#961)
- chore: bump github.com/moby/buildkit from 0.19.0 to 0.20.1
(#943)
- fix: dependency update for docker/buildx v0.21.3 (#972)
- chore: bump github.com/spf13/viper from 1.19.0 to 1.20.0
(#963)
- chore: bump github.com/containerd/containerd from 1.7.25 to
1.7.27 (#969)
- chore: bump github.com/containerd/containerd/v2 from 2.0.2 to
2.0.4 (#968)
- chore: bump the all group with 3 updates (#964)
- chore: bump github.com/opencontainers/image-spec from 1.1.0
to 1.1.1 (#962)
- chore: bump @babel/runtime from 7.26.0 to 7.26.10 in /website
(#959)
- chore: bump @babel/runtime-corejs3 from 7.26.0 to 7.26.10 in
/website (#958)
- chore: bump @babel/helpers from 7.26.0 to 7.26.10 in /website
(#957)
- chore: bump golang.org/x/net from 0.34.0 to 0.36.0 (#956)
- fix: update docs with mirrored tooling images (#955)
- feat: mirror tooling images to ghcr - part 2 (#947)
- chore: bump prismjs from 1.29.0 to 1.30.0 in /website (#954)
- chore: bump the all group with 2 updates (#950)
- chore: bump google.golang.org/grpc from 1.70.0 to 1.71.0
(#951)
- chore: bump golang.org/x/sync from 0.11.0 to 0.12.0 (#952)
- feat: mirror tooling images to ghcr (#946)
- docs: add docker extension (#948)
- chore: Generate v0.10.x docs (#945)
* Fri Mar 14 2025 dcermak@suse.com
- update to version 0.10.0:
https://github.com/project-copacetic/copacetic/releases/tag/v0.10.0
* Notable changes
- Copa now supports patching Alma Linux Images!
- chore: update golangci-lint version (#930), fixes
CVE-2025-22869 / bsc#1239421
- update to version 0.9.0:
https://github.com/project-copacetic/copacetic/releases/tag/v0.9.0
* Notable changes
- Copa now supports patching Azure Linux 3 based images!
- update to version 0.8.0:
https://github.com/project-copacetic/copacetic/releases/tag/v0.8.0
* Notable changes
- Copa now creates a single patch layer on subsequent patches
of an already patched image instead of appending a patch
layer for each patch! See FAQ for more information.
- Oracle Linux is now supported for updating without
vulnerability scanner reports. This will update all
dependencies, including vulnerable packages. See
documentation for more information.
- update to version 0.7.0:
https://github.com/project-copacetic/copacetic/releases/tag/v0.7.0
* Notable changes
- Support for upgrading all outdated packages without a scanner
report. See quick start to get started!
* Thu May 30 2024 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- new package copacetic: CLI tool for directly patching container
images using reports from vulnerability scanners
/usr/share/zsh_completion.d /usr/share/zsh_completion.d/_copa
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Sep 22 22:25:44 2026