Brandon Mitchell

PR is in draft pending the 30 day IPR period.

> To put that another way, if we _don't_ get that fixed, this certainly doesn't matter (and we should kill the site instead, perhaps redirecting to GitHub directly or something...

> BTW, do we plan to cut a release recently? > > * [bump containerd API v1.8.0 kubernetes/kubernetes#128602](https://github.com/kubernetes/kubernetes/pull/128602) is pending on a new release from image spec. Thanks for the...

> How do we make sure the latest releases include whatever our links are referring to and that we're not implicitly relying on unreleased content? That's why we have a...

@tianon is now the forever-maintainer of that jq command. I disavow all responsibility. 😂 > ``` > $ docker run --rm buildpack-deps:scm git ls-remote https://github.com/opencontainers/runtime-spec.git 'refs/tags/v[0-9]*' \ > | jq...

Linking issues #561 and #563.

> duplicates with: https://github.com/docker/roadmap/issues/269 cc @dentrax @developer-guy I meant to link that one too. I wouldn't say a duplicate, but certainly related. #269 is asking to add signing capabilities to...

Considering the deprecation of DCT and Docker's own recommendation to use sigstore (cosign), this seems worth a polite reminder. https://www.docker.com/blog/retiring-docker-content-trust/

To add more context, we're looking at what is needed to also support chunked blob pushes and tagged manifests with a different digest. https://github.com/opencontainers/distribution-spec/pull/543

Two examples I have available are my own [regclient](https://github.com/regclient/regclient/releases/tag/v0.5.4) project that puts all the metadata in a tgz (it's a lot of small files that get less than 1% of...