Merge branch 'main' into add-resumable-downloads

Author: Subserial

.github/workflows/ecr-auth.yaml

@@ -28,7 +28,7 @@ jobs:
         run: go install .
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2.0.0
+        uses: aws-actions/configure-aws-credentials@v5.1.0
         with:
           role-to-assume: arn:aws:iam::${{ env.AWS_ACCOUNT }}:role/federated-ecr-readonly
           aws-region: ${{ env.AWS_REGION }}
@@ -67,7 +67,7 @@ jobs:
         run: go install .
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2.0.0
+        uses: aws-actions/configure-aws-credentials@v5.1.0
         with:
           role-to-assume: arn:aws:iam::${{ env.AWS_ACCOUNT }}:role/federated-ecr-readonly
           aws-region: ${{ env.AWS_REGION }}

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
         with:
           go-version: 1.21
           check-latest: true
-      - uses: goreleaser/goreleaser-action@v4.2.0
+      - uses: goreleaser/goreleaser-action@v6.4.0
         id: run-goreleaser
         with:
           version: "~> v1.19"
@@ -53,7 +53,7 @@ jobs:
     permissions: read-all
     steps:
       - name: Install SLSA verifier
-        uses: slsa-framework/slsa-verifier/actions/installer@v2.7.0
+        uses: slsa-framework/slsa-verifier/actions/installer@v2.7.1
       - name: Download assets
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yaml

@@ -18,4 +18,4 @@ jobs:
 
       - run: go test -coverprofile=coverage.txt -covermode=atomic -race ./...
 
-      - uses: codecov/codecov-action@v4.1.0
+      - uses: codecov/codecov-action@v5.5.1

pkg/crane/copy.go

@@ -26,6 +26,10 @@ import (
 	"golang.org/x/sync/errgroup"
 )
 
+// ErrRefusingToClobberExistingTag is returned when NoClobber is true and the
+// tag already exists in the target registry/repo.
+var ErrRefusingToClobberExistingTag = errors.New("refusing to clobber existing tag")
+
 // Copy copies a remote image or index from src to dst.
 func Copy(src, dst string, opt ...Option) error {
 	o := makeOptions(opt...)
@@ -58,7 +62,7 @@ func Copy(src, dst string, opt ...Option) error {
 			}
 
 			if head != nil {
-				return fmt.Errorf("refusing to clobber existing tag %s@%s", tag, head.Digest)
+				return fmt.Errorf("%w %s@%s", ErrRefusingToClobberExistingTag, tag, head.Digest)
 			}
 		}
 	}

pkg/v1/remote/options.go

@@ -169,8 +169,7 @@ func makeOptions(opts ...Option) (*options, error) {
 		}
 
 		// Wrap the transport in something that can retry network flakes.
-		o.transport = transport.NewRetry(o.transport, transport.WithRetryPredicate(predicate), transport.WithRetryStatusCodes(o.retryStatusCodes...))
-
+		o.transport = transport.NewRetry(o.transport, transport.WithRetryBackoff(o.retryBackoff), transport.WithRetryPredicate(predicate), transport.WithRetryStatusCodes(o.retryStatusCodes...))
 		// Wrap this last to prevent transport.New from double-wrapping.
 		if o.userAgent != "" {
 			o.transport = transport.NewUserAgent(o.transport, o.userAgent)