v4.4.1

Changes by Kind

Feature

• Reduce peak memory usage during edge grouping by ~50% (#1772, @saschagrunert) [SIG Release]

Bug or Regression

• Fix a regression where S3-backed file promotions only listed the first page of destination objects, which could trigger unnecessary re-uploads and timeouts. (#1802, @dims) [SIG Release]
• Fix promotion timeout when prow diff contains no image digests (#1798, @saschagrunert) [SIG Release]
• Increase retry budget for transient Artifact Registry rate limits during signature replication. (#1784, @saschagrunert) [SIG Release]

Dependencies

Added

• github.com/google/go-github/v84: v84.0.0
• github.com/moby/moby/api: v1.54.0
• github.com/moby/moby/client: v0.3.0
• github.com/oklog/ulid/v2: v2.1.1
• github.com/pborman/getopt: 7148bc3

Changed

• cloud.google.com/go/aiplatform: v1.114.0 → v1.120.0
• cloud.google.com/go/area120: v0.9.7 → v0.10.0
• cloud.google.com/go/artifactregistry: v1.19.0 → v1.20.0
• cloud.google.com/go/asset: v1.22.0 → v1.22.1
• cloud.google.com/go/auth: v0.18.2 → 87cdcc9
• cloud.google.com/go/bigquery: v1.72.0 → v1.74.0
• cloud.google.com/go/bigtable: v1.41.0 → v1.42.0
• cloud.google.com/go/container: v1.45.0 → v1.46.0
• cloud.google.com/go/dataform: v0.12.1 → v0.13.0
• cloud.google.com/go/dataproc/v2: v2.15.0 → v2.16.0
• cloud.google.com/go/datastore: v1.21.0 → v1.22.0
• cloud.google.com/go/dialogflow: v1.74.0 → v1.76.0
• cloud.google.com/go/documentai: v1.39.0 → v1.42.0
• cloud.google.com/go/iam: v1.5.3 → v1.6.0
• cloud.google.com/go/kms: v1.25.0 → v1.26.0
• cloud.google.com/go/maps: v1.26.0 → v1.29.0
• cloud.google.com/go/networkconnectivity: v1.20.0 → v1.21.0
• cloud.google.com/go/networkmanagement: v1.21.0 → v1.23.0
• cloud.google.com/go/osconfig: v1.15.1 → v1.16.0
• cloud.google.com/go/pubsub/v2: v2.3.0 → v2.4.0
• cloud.google.com/go/retail: v1.25.1 → v1.26.0
• cloud.google.com/go/spanner: v1.87.0 → v1.88.0
• cloud.google.com/go/speech: v1.29.0 → v1.30.0
• cloud.google.com/go/storage: v1.60.0 → v1.61.3
• filippo.io/edwards25519: v1.1.0 → v1.1.1
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.20.0 → v1.21.0
• github.com/aws/aws-sdk-go-v2: v1.41.3 → v1.41.5
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.7.6 → v1.7.8
• github.com/aws/aws-sdk-go-v2/config: v1.32.11 → v1.32.13
• github.com/aws/aws-sdk-go-v2/credentials: v1.19.11 → v1.19.13
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.18.19 → v1.18.21
• github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.22.5 → v1.22.10
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.4.19 → v1.4.21
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.7.19 → v2.7.21
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.8.5 → v1.8.6
• github.com/aws/aws-sdk-go-v2/internal/v4a: v1.4.19 → v1.4.22
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.13.6 → v1.13.7
• github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.9.11 → v1.9.13
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.13.19 → v1.13.21
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.19.19 → v1.19.21
• github.com/aws/aws-sdk-go-v2/service/kms: v1.49.1 → v1.49.5
• github.com/aws/aws-sdk-go-v2/service/s3: v1.96.3 → v1.97.3
• github.com/aws/aws-sdk-go-v2/service/signin: v1.0.7 → v1.0.9
• github.com/aws/aws-sdk-go-v2/service/sso: v1.30.12 → v1.30.14
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.35.16 → v1.35.18
• github.com/aws/aws-sdk-go-v2/service/sts: v1.41.8 → v1.41.10
• github.com/docker/cli: v29.2.1 → v29.3.0
• github.com/docker/go-connections: v0.5.0 → v0.6.0
• github.com/go-chi/chi/v5: v5.2.4 → v5.2.5
• github.com/go-git/go-git/v5: v5.17.0 → v5.17.1
• github.com/go-openapi/analysis: v0.24.1 → v0.24.3
• github.com/go-openapi/errors: v0.22.6 → v0.22.7
• github.com/go-openapi/jsonpointer: v0.22.4 → v0.22.5
• github.com/go-openapi/jsonreference: v0.21.4 → v0.21.5
• github.com/go-openapi/loads: v0.23.2 → v0.23.3
• github.com/go-openapi/runtime: v0.29.2 → v0.29.3
• github.com/go-openapi/spec: v0.22.3 → v0.22.4
• github.com/go-openapi/strfmt: v0.25.0 → v0.26.0
• github.com/go-openapi/swag: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/cmdutils: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/conv: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/fileutils: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/jsonname: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/jsonutils: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/jsonutils/fixtures_test: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/loading: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/mangling: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/netutils: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/stringutils: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/typeutils: v0.25.4 → v0.25.5
• github.com/go-openapi/swag/yamlutils: v0.25.4 → v0.25.5
• github.com/go-openapi/testify/enable/yaml/v2: v2.0.2 → v2.4.1
• github.com/go-openapi/testify/v2: v2.0.2 → v2.4.1
• github.com/go-openapi/validate: v0.25.1 → v0.25.2
• github.com/go-viper/mapstructure/v2: v2.4.0 → v2.5.0
• github.com/google/go-containerregistry: v0.21.2 → v0.21.3
• github.com/google/go-querystring: v1.1.0 → v1.2.0
• github.com/google/wire: v0.6.0 → v0.7.0
• github.com/googleapis/enterprise-certificate-proxy: v0.3.12 → v0.3.14
• github.com/googleapis/gax-go/v2: v2.17.0 → v2.19.0
• github.com/in-toto/attestation: v1.1.2 → v1.2.0
• github.com/letsencrypt/borp: a78493c → 89c6927
• github.com/letsencrypt/boulder: v0.20251110.0 → v0.20260223.0
• github.com/magefile/mage: v1.15.0 → v1.16.1
• github.com/redis/go-redis/v9: v9.17.2 → v9.18.0
• github.com/sigstore/rekor: v1.5.0 → v1.5.1
• github.com/sigstore/sigstore: v1.10.4 → v1.10.5
• github.com/sigstore/sigstore/pkg/signature/kms/aws: v1.10.3 → v1.10.4
• github.com/sigstore/sigstore/pkg/signature/kms/azure: v1.10.3 → v1.10.4
• github.com/sigstore/sigstore/pkg/signature/kms/gcp: v1.10.3 → v1.10.4
• github.com/sigstore/sigstore/pkg/signature/kms/hashivault: v1.10.3 → v1.10.4
• github.com/weppos/publicsuffix-go: 5340293 → v0.50.2
• go.opentelemetry.io/otel: v1.40.0 → v1.42.0
• go.opentelemetry.io/otel/exporters/stdout/stdoutmetric: v1.39.0 → v1.40.0
• go.opentelemetry.io/otel/metric: v1.40.0 → v1.42.0
• go.opentelemetry.io/otel/sdk: v1.40.0 → v1.42.0
• go.opentelemetry.io/otel/sdk/metric: v1.40.0 → v1.42.0
• go.opentelemetry.io/otel/trace: v1.40.0 → v1.42.0
• go.step.sm/crypto: v0.75.0 → v0.76.2
• gocloud.dev: v0.40.0 → v0.45.0
• golang.org/x/crypto: v0.48.0 → v0.49.0
• golang.org/x/mod: v0.33.0 → v0.34.0
• golang.org/x/net: v0.50.0 → v0.52.0
• golang.org/x/oauth2: v0.35.0 → v0.36.0
• golang.org/x/sync: v0.19.0 → v0.20.0
• golang.org/x/sys: v0.41.0 → v0.42.0
• golang.org/x/telemetry: e7419c6 → 579e4da
• golang.org/x/term: v0.40.0 → v0.41.0
• golang.org/x/text: v0.34.0 → v0.35.0
• golang.org/x/time: v0.14.0 → v0.15.0
• golang.org/x/tools: v0.42.0 → v0.43.0
• golang.org/x/xerrors: 93cc26a → 7835f81
• google.golang.org/api: v0.269.0 → v0.273.0
• google.golang.org/genproto: 8636f87 → 0b37fe3
• google.golang.org/genproto/googleapis/api: 546029d → 0b37fe3
• google.golang.org/genproto/googleapis/bytestream: 42d3e9b → d00831a
• google.golang.org/genproto/googleapis/rpc: 42d3e9b → d00831a
• google.golang.org/grpc: v1.79.1 → v1.79.3
• k8s.io/apimachinery: v0.35.2 → v0.35.3
• k8s.io/utils: bc988d5 → b8788ab
• sigs.k8s.io/release-sdk: v0.12.5 → v0.12.6

Removed

• github.com/docker/docker: v28.5.2
• github.com/google/go-github/v55: v55.0.0
• github.com/google/go-github/v75: v75.0.0
• github.com/moby/sys/atomicwriter: v0.1.0
• github.com/montanaflynn/stats: v0.7.1
• github.com/morikuni/aec: v1.0.0
• github.com/xdg-go/pbkdf2: v1.0.0
• github.com/xdg-go/scram: v1.1.2
• github.com/xdg-go/stringprep: v1.0.4
• github.com/youmark/pkcs8: a2c0da2
• sigs.k8s.io/structured-merge-diff/v4: v4.6.0