From 5e11a3fc1f7ae2039ffc3d9d1339c3b0efcdfb50 Mon Sep 17 00:00:00 2001 From: David Levy Date: Thu, 29 Jan 2026 14:56:55 -0600 Subject: [PATCH 1/2] deps: upgrade docker/distribution to v2.8.3 and migrate to distribution/reference The docker/distribution v2.8.3 release deprecated the reference package and moved it to github.com/distribution/reference as a standalone module. This change: - Upgrades github.com/docker/distribution from v2.8.2 to v2.8.3 - Migrates import from github.com/docker/distribution/reference to github.com/distribution/reference (v0.6.0) This supersedes #658 which failed to build due to the breaking change. Closes #658 --- go.mod | 4 ++-- go.sum | 4 ++-- internal/container/docker.go | 5 +++-- 3 files changed, 7 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index 02f010bd..ff9a1b3b 100644 --- a/go.mod +++ b/go.mod @@ -7,7 +7,8 @@ toolchain go1.24.12 require ( github.com/alecthomas/chroma/v2 v2.5.0 github.com/billgraziano/dpapi v0.5.0 - github.com/docker/distribution v2.8.2+incompatible + github.com/distribution/reference v0.6.0 + github.com/docker/distribution v2.8.3+incompatible github.com/docker/docker v28.5.2+incompatible github.com/docker/go-connections v0.6.0 github.com/golang-sql/sqlexp v0.1.0 @@ -41,7 +42,6 @@ require ( github.com/containerd/errdefs/pkg v0.3.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/davecgh/go-spew v1.1.1 // indirect - github.com/distribution/reference v0.6.0 // indirect github.com/dlclark/regexp2 v1.4.0 // indirect github.com/docker/go-metrics v0.0.1 // indirect github.com/docker/go-units v0.5.0 // indirect diff --git a/go.sum b/go.sum index e15aefc7..4147ec19 100644 --- a/go.sum +++ b/go.sum @@ -57,8 +57,8 @@ github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5Qvfr github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= github.com/dlclark/regexp2 v1.4.0 h1:F1rxgk7p4uKjwIQxBs9oAXe5CqrXlCduYEJvrF4u93E= github.com/dlclark/regexp2 v1.4.0/go.mod h1:2pZnwuY/m+8K6iRw6wQdMtk+rH5tNGR1i55kozfMjCc= -github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8= -github.com/docker/distribution v2.8.2+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= +github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= +github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/docker/docker v28.5.2+incompatible h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM= github.com/docker/docker v28.5.2+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk= github.com/docker/go-connections v0.6.0 h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94= diff --git a/internal/container/docker.go b/internal/container/docker.go index 5687944c..9a05b2e4 100644 --- a/internal/container/docker.go +++ b/internal/container/docker.go @@ -5,9 +5,10 @@ package container import ( "context" - "github.com/docker/distribution/reference" - "github.com/docker/distribution/registry/client" "net/http" + + "github.com/distribution/reference" + "github.com/docker/distribution/registry/client" ) // ListTags lists all tags for a container image located at a given From 842746285efcc962d7dffb5477002defd6a57119 Mon Sep 17 00:00:00 2001 From: David Levy Date: Thu, 29 Jan 2026 15:09:47 -0600 Subject: [PATCH 2/2] docs: update NOTICE.md for docker/distribution v2.8.3 --- NOTICE.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/NOTICE.md b/NOTICE.md index 1eb06c95..c5d37a6c 100644 --- a/NOTICE.md +++ b/NOTICE.md @@ -587,8 +587,8 @@ SOFTWARE. ## github.com/docker/distribution * Name: github.com/docker/distribution -* Version: v2.8.2 -* License: [Apache-2.0](https://github.com/docker/distribution/blob/v2.8.2/LICENSE) +* Version: v2.8.3 +* License: [Apache-2.0](https://github.com/docker/distribution/blob/v2.8.3/LICENSE) ``` Apache License