As mentioned in https://github.com/aws/aws-sdk-go-v2/issues/2370, AWS
SDK for Go v2 releases after 2023/11/15 broke compatibility with all
previous releases.
Resolves#2882
Signed-off-by: Patrick Decat <pdecat@gmail.com>
In v1.8.0 (commit 7410007) kaniko switched to using the pax tar header
format for compressing image layers, since this format allows for greater
precision in recording timestamps, however this inadvertendly broke the
"--reproducible" functionality, due to an bug in the underlying
go-containerregistry dependency which did not set the additional
timestamps in the pax header when canonicalizing image layers. This
oversight has since been fixed in the dependency.
This commit bumps the google/go-containerregistry dependency to the
first commit which has fixed the bug
(v0.13.1-0.20230201183932-824efc7772b0). It also bumps the version of
cloud.google.com/go/storage to v1.29.0 to be compatible with the higher
transitive dependency.
* Vendor changes for go-containerregistry switch.
* Manual changes for go-containerregistry switch.
The biggest change is refactoring the tarball unpacking.
* Pull more of container-diff out.
* More vendor removals.
* More unit tests.
Patrick Decat
Joël Pepper
Ben Einaudi
dlorenc
Priya Wadhwa