1.1.2 (2026-01-25)

Bug Fixes

• wire blockCache through to registry Pull (#62) (7857128)
• wire WithRefCacheTTL to ref cache creation (#60) (5d4b964)

1.1.1 (2026-01-25)

Bug Fixes

• registry: return raw bytes from manifest cache for policy evaluation (#58) (fcf8c0a)

1.1.0 (2026-01-23)

Features

• add progress reporting for CLI progress bars (#48) (10f2fbe)
• core: add CopyFile method for single-file extraction with rename (#51) (727a0e9)
• core: add DirStats method for directory statistics (#54) (e9ed59a)
• core: add Exists, IsDir, IsFile convenience methods (#53) (ffc1ac6)
• core: add NormalizePath helper for fs.ValidPath conversion (#50) (6ddbec5)
• core: add ValidateFiles method for bulk file validation (#55) (5eb137a)
• core: return CopyStats from copy operations (#52) (c48479d)

1.0.0 (2026-01-21)

Features

• add block-level caching for ByteSource (#7) (8fc2eef)
• add Client.Sign() method for sigstore manifest signing (#22) (23a4065)
• add file-based API for local archives (#5) (c126d80)
• add Inspect() method to fetch archive metadata without data blob (#21) (3b0ac97)
• add optional structured logging with slog (#42) (37fd027)
• adds cache integrity + validation to OCI caches (#8) (cd1e58d)
• adds index caching for OCI images (#9) (28b5908)
• adds landing page with benchmarks (#15) (0f488ef)
• adds OCI client (#6) (6974053)
• adds policy engine with sigstore signing (#13) (8cf67f9)
• adds policy support for gittuf (#36) (4ca8243)
• adds TTL support for OCI ref cache (#11) (5f900df)
• examples: integrate gittuf verification in provenance example (#37) (24ae1ed)
• examples: update provenance to use new public API (#20) (2160370)
• initial archive format design and interfaces (#1) (6728a29)
• initial implementation of blob (#2) (07ae9d3)

Bug Fixes

• ci: check PR author instead of actor for dependabot detection (#34) (d767490)
• ci: use REPO_PAT to trigger CI on generated commits (#35) (32c2430)
• gittuf: remove WithAllowMissingGittuf() after adding SSH key to policy (#43) (c08aa58)
• gittuf: use forked gittuf instead of local /tmp path (#40) (9dd6d80)
• prevents path traversal attacks by jailing extractions (#19) (2350540)

Code Refactoring

• adds new public API (#16) (dbcc376)